Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
File:                     fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft (raw, json)
Hash identifier:          /xbDVPEBlRbsAi4cePEOraG3m1rGx2yRxrxtqo8TTf8=
Subject key identifier:   DE:8A:80:4D:34:0C:5A:76:0A:7C:E6:DF:17:F1:79:99:07:01:33:8B
Authority key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Certificate issuer:       /CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Certificate serial:       019D26CD002E10B2CEE9BA193950A779BCA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
Manifest number:          188F
Signing time:             Wed 25 Mar 2026 21:01:02 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:02 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:02 +0000
Files and hashes:         1: 8nmID8YSgejdLQDU1TdrXV697zE.roa (hash: KrMGBak4/fIs5j7LDuELbl6SHABXQ17c4ySNducYIik=)
                          2: A2M66sw2tcycyLjgPTEhytJQnIc.roa (hash: +Km27RHetRVgDuAGLBqMHsKKPqRCEvEoFi3khHWhEj0=)
                          3: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl (hash: VgFDG5MYnEMYvKcPRQKcjzAHN4izxQ3y86K5ZQt9wWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:00:2e:10:b2:ce:e9:ba:19:39:50:a7:79:bc:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
        Validity
            Not Before: Mar 25 21:01:02 2026 GMT
            Not After : Mar 26 21:01:02 2026 GMT
        Subject: CN=de8a804d340c5a760a7ce6df17f179990701338b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:52:a9:1f:28:47:36:d7:7a:78:c4:ae:54:dd:
                    cb:a2:28:9f:51:06:f2:d6:bc:10:7a:f4:89:0b:c6:
                    c3:ab:18:21:dc:f7:f0:01:c3:2e:02:d7:fc:fa:0e:
                    4a:2f:5d:a0:a1:b2:2e:04:54:34:61:e2:5d:b6:06:
                    d8:87:94:fb:50:f6:30:67:a0:9f:9b:1c:b0:78:fc:
                    ec:51:2a:9e:22:38:e4:47:af:f3:ba:ca:6c:36:f9:
                    2e:1b:89:00:25:cd:62:37:1c:d2:c5:ad:48:9e:ad:
                    66:ab:49:97:6a:41:fe:cb:eb:75:80:d9:40:e6:91:
                    cc:4b:66:33:88:27:dc:0a:d3:19:80:36:43:cb:1c:
                    98:73:9c:31:4a:32:de:ca:6d:e7:ff:f9:87:ae:a5:
                    3d:9c:25:0e:96:64:39:37:30:65:91:54:ce:59:60:
                    9c:8c:32:ea:36:47:68:30:5d:c6:2d:b0:66:b4:36:
                    c3:c1:c7:d0:2f:55:c9:3d:37:d2:6f:42:71:e9:78:
                    1e:da:b6:1c:fc:af:c4:76:8e:87:cb:30:91:d1:fb:
                    4c:ca:34:bd:7d:0f:32:9d:d1:28:9a:6b:0a:e3:37:
                    7f:06:d3:90:19:c5:53:a3:0d:c9:e8:90:60:2a:92:
                    50:f7:67:8b:a3:3f:b2:00:e4:d6:aa:8b:45:57:90:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8A:80:4D:34:0C:5A:76:0A:7C:E6:DF:17:F1:79:99:07:01:33:8B
            X509v3 Authority Key Identifier:
                keyid:7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:8e:42:c7:e7:55:3e:bf:02:3c:21:c8:44:ce:03:95:98:30:
         5e:0a:da:d4:96:f4:ab:1b:06:d6:4e:a1:3b:5a:17:a6:86:1d:
         02:71:3b:3e:15:5d:90:87:5d:0f:6e:1d:5b:eb:c0:bd:1e:05:
         00:88:f4:b8:ac:2f:b8:93:22:89:90:8f:00:7f:af:21:b9:e0:
         64:f6:b1:aa:9f:f1:a3:b9:0f:c1:6e:00:bb:6c:f7:ca:6f:9d:
         e0:8c:fb:99:f7:f1:82:94:52:f4:09:c9:90:43:8e:60:4a:cb:
         a4:14:43:14:a4:bd:c2:2b:2c:6e:20:89:19:f5:fd:75:f9:6a:
         56:bb:f4:a4:93:61:e7:ca:ac:3f:60:90:95:36:18:96:f8:3e:
         b9:51:b7:e3:1f:7b:12:fe:60:4a:7b:e1:d8:9d:f7:5f:e8:d0:
         06:bb:54:73:cb:34:c7:be:b8:e4:01:e6:a1:76:1f:14:68:b8:
         8d:a7:fd:66:63:6f:db:cb:c0:89:c6:e1:75:94:85:ee:3c:05:
         61:e7:13:2a:6d:6a:77:5c:a8:7f:91:c0:70:aa:07:9e:32:b9:
         1b:c0:50:ac:8f:d5:88:40:bb:42:a3:ef:89:4d:b5:dd:dc:07:
         2b:62:04:7e:9f:30:0f:22:c8:30:ba:aa:24:19:d1:ab:67:f0:
         d7:18:09:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:14 2026 by rpki-client