Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft
File:                     sJLCwjUMWQpEg_1E8lCnf-6qspY.mft (raw, json)
Hash identifier:          zZaZft7loRk39n5B102EdkliNBV6WQsq3TheA90C8Kw=
Subject key identifier:   24:E8:01:76:F4:DB:29:97:3B:1D:34:BF:EA:07:19:48:94:E5:A0:70
Authority key identifier: B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96
Certificate issuer:       /CN=b092c2c2350c590a4483fd44f250a77feeaab296
Certificate serial:       019D273B2BE67A42FECAB6F648035D4301B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft
Manifest number:          082C
Signing time:             Wed 25 Mar 2026 23:01:22 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:22 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:22 +0000
Files and hashes:         1: 3bXwyJRphHC821s-_1eJDdRcSaQ.roa (hash: 1C3Vwg+v+ejiWvSqFbwaT9wdnlbnP0w1UGBSQJTnl9w=)
                          2: sJLCwjUMWQpEg_1E8lCnf-6qspY.crl (hash: eis8PFak5K/NKiTI8qAblPCcaYgqdgk2PWFmVAyruus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:2b:e6:7a:42:fe:ca:b6:f6:48:03:5d:43:01:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b092c2c2350c590a4483fd44f250a77feeaab296
        Validity
            Not Before: Mar 25 23:01:22 2026 GMT
            Not After : Mar 26 23:01:22 2026 GMT
        Subject: CN=24e80176f4db29973b1d34bfea07194894e5a070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:2c:81:59:ca:92:21:85:8c:4a:ee:52:11:
                    2f:74:1f:8c:8c:da:cb:3b:c4:ff:d5:8b:fc:c4:32:
                    24:14:5c:7a:df:b6:43:74:0e:78:37:13:f9:57:be:
                    92:42:c2:b9:e2:f2:87:7b:03:d1:b0:f2:d2:be:93:
                    4a:7d:e3:c2:14:8e:dd:5c:33:2c:ca:dd:60:f1:9b:
                    15:e6:08:68:db:2f:68:89:14:f7:d3:61:3a:ce:b8:
                    9f:c3:30:78:04:cf:ec:d6:c6:99:73:88:2e:a1:83:
                    5f:28:77:ab:ff:50:7a:a9:5d:b6:4c:d2:c2:f1:fd:
                    d8:37:19:19:c2:b2:df:f0:b2:04:db:ad:6f:f4:4a:
                    82:da:f1:63:92:ba:e4:97:06:f7:24:4e:88:de:98:
                    30:0c:d7:9b:24:46:54:cb:2a:eb:8a:df:56:d9:7a:
                    1b:cf:fd:12:02:6a:ef:4b:e2:24:02:19:d4:82:dc:
                    35:aa:9c:df:b5:73:bb:e1:78:ac:63:28:4d:3a:0f:
                    9d:31:4c:bd:46:7c:49:9a:eb:22:58:10:01:be:20:
                    63:cf:fa:58:15:71:aa:d3:db:fb:f5:15:77:de:e8:
                    39:fe:4a:e2:14:ee:7b:c5:72:80:d4:65:44:0d:82:
                    a6:37:29:2c:e3:15:6e:61:47:64:ab:68:cc:a1:af:
                    6b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E8:01:76:F4:DB:29:97:3B:1D:34:BF:EA:07:19:48:94:E5:A0:70
            X509v3 Authority Key Identifier:
                keyid:B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:92:66:68:2e:76:8f:16:aa:b5:49:d9:56:3c:82:98:e0:cf:
         7b:69:af:22:21:c0:00:8f:55:45:d4:5b:98:9e:34:a4:eb:c8:
         62:86:ee:89:59:44:64:22:1e:c7:ad:77:f1:b4:91:55:8c:36:
         8e:5f:be:9f:26:1c:ab:79:6a:6d:d7:b8:31:d2:b5:44:19:79:
         a3:2b:fa:2e:e5:b5:0d:7b:e9:94:b6:68:69:f3:d8:39:57:cb:
         71:33:8d:5c:ab:c6:17:50:be:98:71:e9:07:c5:15:a2:56:dd:
         9f:a8:5c:5b:e2:af:50:98:9a:62:09:6d:77:3b:70:d6:39:5f:
         c5:26:a5:97:cc:a4:30:ae:76:63:34:bb:35:1d:7c:ad:36:3e:
         c9:61:6d:8a:72:72:30:fb:e9:fc:ca:6b:00:b9:83:af:1d:d9:
         95:22:0c:80:9e:ed:ee:10:51:67:ee:6b:28:44:3f:f3:29:c9:
         9d:95:40:84:89:26:e0:34:b1:2d:fe:30:d8:c2:19:90:c3:b5:
         0b:5a:01:3f:56:1f:08:d5:8d:3a:cc:5f:02:cd:34:9b:4b:36:
         7e:6e:ca:51:a8:ba:d4:c0:6c:ed:cc:70:6a:7c:aa:4f:5c:32:
         9c:ce:5d:8e:41:93:16:67:45:60:6b:b2:de:ca:30:97:80:67:
         d3:64:f1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:28 2026 by rpki-client