Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
File:                     JfzJXxkPb63_o5NBMcdMs6BojXI.mft (raw, json)
Hash identifier:          cA8Mhmb2v6zK8A0/HGVEGc0CVEG5X2V/MH+DjFEB56w=
Subject key identifier:   11:8B:89:AD:C2:D7:DA:1B:12:44:B7:5F:76:79:D9:C8:B3:D0:3E:ED
Authority key identifier: 25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
Certificate issuer:       /CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Certificate serial:       019D2B84DFB21322AC9B1E7651ECCC341761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
Manifest number:          65
Signing time:             Thu 26 Mar 2026 19:00:21 +0000
Manifest this update:     Thu 26 Mar 2026 19:00:21 +0000
Manifest next update:     Fri 27 Mar 2026 19:00:21 +0000
Files and hashes:         1: JfzJXxkPb63_o5NBMcdMs6BojXI.crl (hash: htiu/iYwCrVL5PGpaHUUAMsI5Zh6DJR46pd/8esCinc=)
                          2: g4SpKvZLDrCSSEc4j2eY2sgyR8k.roa (hash: F6VZpsG6B4dQY8+6I93tdHS61Qfv0yiT02WGdhA/ATs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:84:df:b2:13:22:ac:9b:1e:76:51:ec:cc:34:17:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
        Validity
            Not Before: Mar 26 19:00:21 2026 GMT
            Not After : Mar 27 19:00:21 2026 GMT
        Subject: CN=118b89adc2d7da1b1244b75f7679d9c8b3d03eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2f:df:24:da:dd:53:ac:1a:3b:c7:7b:fd:b8:
                    21:1f:3c:6e:35:21:b7:bf:2f:35:8e:b9:57:af:cb:
                    96:25:e5:cc:c3:b3:ec:07:6e:46:fa:4b:30:a8:23:
                    d0:9f:ec:8f:a9:7a:68:98:73:ad:7d:63:b0:12:be:
                    0e:57:12:66:ad:81:fc:ab:1b:0b:6f:b4:9e:fc:8f:
                    95:65:1b:cb:33:c3:c5:1e:06:45:bd:c1:e1:c2:cd:
                    ac:a3:af:74:cb:0b:b1:14:9f:3d:f3:bd:3a:ff:d8:
                    28:29:f5:ba:37:89:a0:ed:ce:44:96:7c:86:8b:ad:
                    ed:82:0f:12:25:a7:c4:11:4c:2c:35:04:e4:87:0d:
                    68:2a:d6:83:11:6c:db:bf:0e:a9:2e:61:d0:6e:81:
                    0d:05:ea:32:e5:35:aa:89:ee:ed:e7:1f:4f:13:c9:
                    f3:c6:04:a9:02:29:6d:77:53:10:c6:13:f2:4c:b3:
                    94:bd:c6:d7:0c:4b:42:05:33:0b:63:d2:5e:38:13:
                    78:8e:39:49:66:71:a0:38:19:e3:8c:b2:9a:b9:93:
                    b9:23:28:6e:51:12:93:56:3f:a8:06:35:29:4d:49:
                    2e:c4:94:a8:47:6e:6f:4e:49:35:8b:8b:59:0a:a5:
                    9c:ee:b0:b2:de:bf:d8:a0:9b:90:ab:62:27:4d:f5:
                    64:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8B:89:AD:C2:D7:DA:1B:12:44:B7:5F:76:79:D9:C8:B3:D0:3E:ED
            X509v3 Authority Key Identifier:
                keyid:25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:32:dd:af:eb:13:ba:b4:39:22:13:56:18:56:ae:5e:50:00:
         2e:14:ea:50:b9:1f:61:12:23:2f:b8:0a:9d:1f:c1:9e:23:5a:
         a6:bc:c2:79:43:34:5a:6d:14:83:23:15:b8:6f:f9:26:e8:73:
         28:e2:f9:0b:12:d8:dc:d8:d9:00:95:87:2e:72:b5:7d:79:a9:
         25:1b:2e:cf:87:54:48:e5:1b:7a:28:f8:b6:c1:ae:38:52:ae:
         3f:41:ca:dd:a3:93:da:cf:c7:8a:3a:a7:e2:31:5c:44:bb:c0:
         08:90:ed:8f:b0:72:40:0c:d4:d5:7b:e6:b3:36:45:30:46:86:
         2a:cf:ba:14:07:c4:c3:a8:01:58:9e:ac:51:ec:a3:ec:b2:e5:
         aa:3d:18:d7:1c:47:84:05:f4:bf:0a:cc:41:82:f3:4d:2b:aa:
         28:81:fb:d9:19:45:4e:3c:cc:b3:48:2d:09:ed:73:78:be:3b:
         0b:fc:4f:aa:3f:3c:46:f4:bd:1f:5e:18:d4:5b:4e:42:f7:d2:
         2d:ac:79:6c:9c:2b:cc:a2:60:2f:7e:39:62:fa:5a:c2:75:bc:
         62:cc:79:1f:3a:83:ca:01:bc:84:8c:d6:2c:42:f1:53:67:4b:
         a6:7c:59:8a:29:b6:81:fd:37:01:d7:46:f4:68:be:0d:06:6b:
         aa:a1:c2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:53:28 2026 by rpki-client