Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
File:                     JY9ajila0de0ih4RlYeQBStXolM.mft (raw, json)
Hash identifier:          W2DbZ+PG/WyfJXVUbbchY1whoi4RVR3cqeqV9WH1O9s=
Subject key identifier:   65:18:4A:DF:A9:19:C2:02:FB:07:C6:29:BA:F9:CF:57:78:59:DE:42
Authority key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
Certificate issuer:       /CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Certificate serial:       019D265FCD7D743FC7CC13C8879F0BA61EC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
Manifest number:          17DD
Signing time:             Wed 25 Mar 2026 19:01:45 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:45 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:45 +0000
Files and hashes:         1: JY9ajila0de0ih4RlYeQBStXolM.crl (hash: vj2wbdpzd48JOuAgFKeS+KMYJFOZl7ocSN+COJmGyD0=)
                          2: XsoOkS5cVinDKGylaIEe4V2iJiI.roa (hash: yUEIW+aXADdubfFegT02HQm/MXVHfJjhRJSJMZb2fr0=)
                          3: d9SsK9JFe4erW3mFTzDPmAS0ODY.roa (hash: eDnr+btVqcRjIrpyGoGoaGlmtxJe33quRXxSlU0qhfA=)
                          4: lcmCUf_CgzeIR8L7taeEF8YZZn4.roa (hash: WXtKI31hDy0GKZrnRRKtBFDImlVMPaG1/eg9VugOcII=)
                          5: lhg5zVYrNMLRf5rtCyfanPHKWCo.roa (hash: tJ2WDHFTAECq/EoCtDCOE9Vj8E1Ebzh5Ex98VPbUM4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:cd:7d:74:3f:c7:cc:13:c8:87:9f:0b:a6:1e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258f5a8e295ad1d7b48a1e11958790052b57a253
        Validity
            Not Before: Mar 25 19:01:45 2026 GMT
            Not After : Mar 26 19:01:45 2026 GMT
        Subject: CN=65184adfa919c202fb07c629baf9cf577859de42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8c:9c:30:08:e2:22:ec:96:26:51:63:ad:ad:
                    66:4d:fe:fd:48:8b:ea:8e:b4:87:9f:2a:ea:73:2b:
                    ae:c2:5e:28:b5:23:57:d8:e7:d3:2e:42:9f:30:7c:
                    2a:b4:64:86:60:f4:9b:e1:47:88:5a:34:f1:23:59:
                    8d:96:b6:6e:04:52:90:81:16:04:c0:62:3a:12:9b:
                    f6:80:c8:f6:62:0e:d1:d2:de:38:40:1f:f3:cd:61:
                    94:8f:56:11:70:c4:33:f2:16:a7:b0:ce:4c:ff:00:
                    c9:6a:eb:bf:ec:74:65:5e:c4:f6:d9:72:9c:bc:9f:
                    86:c2:2e:9e:3f:bb:a7:26:19:ab:08:09:b3:57:6b:
                    60:d9:07:8e:dc:8b:9b:b0:b0:33:b6:76:3a:24:95:
                    1b:bb:95:39:6f:67:c0:ab:1e:4b:24:7b:9d:55:08:
                    5b:66:7f:36:1b:56:9e:ca:2d:95:e5:3b:8b:8f:50:
                    70:0d:c6:d8:25:9a:b9:37:92:13:d1:cb:48:12:f0:
                    84:6d:96:ec:c6:50:59:94:b0:9a:52:b7:be:81:88:
                    20:a2:3c:a0:c9:e9:00:fd:a3:cc:dc:85:02:eb:e5:
                    8b:2b:8e:f4:ad:4e:90:f4:03:64:12:f4:7e:04:74:
                    95:ce:e9:d5:39:d3:5e:79:eb:3a:c4:b9:22:0d:8c:
                    68:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:18:4A:DF:A9:19:C2:02:FB:07:C6:29:BA:F9:CF:57:78:59:DE:42
            X509v3 Authority Key Identifier:
                keyid:25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2b:3b:e3:2f:95:b2:a8:52:84:e0:87:5c:45:29:62:de:36:
         04:5f:fd:55:35:09:c7:29:85:41:4c:02:e4:dc:13:f3:2d:e9:
         2d:ee:1b:e5:60:3f:1b:be:ba:fb:65:5b:b0:ac:c9:5a:b8:a7:
         09:d2:1f:77:20:5a:6b:50:a4:40:0b:89:b8:20:7c:ec:28:fa:
         8b:e3:01:04:e0:7e:06:4c:b6:e4:57:9b:fe:82:69:8d:a2:b8:
         8c:1f:d9:00:af:7a:6a:37:07:42:a5:f7:64:fa:7f:55:99:14:
         cc:d3:3e:eb:d9:0c:46:7b:ce:5d:63:f9:10:9b:02:68:1d:cf:
         9c:18:d7:2e:a1:0c:35:19:c9:38:69:2a:8d:00:23:92:0e:b3:
         61:fd:8a:8a:29:e0:e3:db:bf:02:d7:73:64:9a:20:bf:d4:11:
         fe:72:25:5b:9b:d4:62:29:b8:aa:03:1f:04:30:2d:41:a4:fa:
         70:fd:a4:fc:30:86:42:8e:3a:e2:ff:13:17:d9:64:4f:ee:da:
         9f:77:14:9f:9b:96:19:d6:eb:f7:83:67:d5:f6:8e:97:fd:ae:
         bb:9a:74:3c:68:84:03:b2:81:f7:f6:d9:51:3c:7b:7c:5c:ef:
         c5:76:2a:d9:fa:a6:ec:82:4b:e1:fc:03:e2:64:31:07:c1:90:
         47:ca:a0:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX819dD/HzBPIh58Lph7BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1OGY1YThlMjk1YWQxZDdiNDhhMWUxMTk1ODc5MDA1MmI1
N2EyNTMwHhcNMjYwMzI1MTkwMTQ1WhcNMjYwMzI2MTkwMTQ1WjAzMTEwLwYDVQQD
Eyg2NTE4NGFkZmE5MTljMjAyZmIwN2M2MjliYWY5Y2Y1Nzc4NTlkZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4ycMAjiIuyWJlFjra1mTf79SIvq
jrSHnyrqcyuuwl4otSNX2OfTLkKfMHwqtGSGYPSb4UeIWjTxI1mNlrZuBFKQgRYE
wGI6Epv2gMj2Yg7R0t44QB/zzWGUj1YRcMQz8hansM5M/wDJauu/7HRlXsT22XKc
vJ+Gwi6eP7unJhmrCAmzV2tg2QeO3IubsLAztnY6JJUbu5U5b2fAqx5LJHudVQhb
Zn82G1aeyi2V5TuLj1BwDcbYJZq5N5IT0ctIEvCEbZbsxlBZlLCaUre+gYggojyg
yekA/aPM3IUC6+WLK470rU6Q9ANkEvR+BHSVzunVOdNeees6xLkiDYxo2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUYSt+pGcIC+wfGKbr5z1d4Wd5CMB8GA1UdIwQY
MBaAFCWPWo4pWtHXtIoeEZWHkAUrV6JTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlk5YWppbGEwZGUwaWg0UmxZZVFCU3RYb2xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zNzE5ZjMtMjJlMS00MzQ0LTlhMzkt
NDU4YTI3MzYxNTdhLzEvSlk5YWppbGEwZGUwaWg0UmxZZVFCU3RYb2xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8zNzE5ZjMtMjJlMS00MzQ0LTlhMzktNDU4YTI3MzYxNTdh
LzEvSlk5YWppbGEwZGUwaWg0UmxZZVFCU3RYb2xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALis74y+V
sqhShOCHXEUpYt42BF/9VTUJxymFQUwC5NwT8y3pLe4b5WA/G766+2VbsKzJWrin
CdIfdyBaa1CkQAuJuCB87Cj6i+MBBOB+Bky25Feb/oJpjaK4jB/ZAK96ajcHQqX3
ZPp/VZkUzNM+69kMRnvOXWP5EJsCaB3PnBjXLqEMNRnJOGkqjQAjkg6zYf2Kiing
49u/AtdzZJogv9QR/nIlW5vUYim4qgMfBDAtQaT6cP2k/DCGQo464v8TF9lkT+7a
n3cUn5uWGdbr94Nn1faOl/2uu5p0PGiEA7KB9/bZUTx7fFzvxXYq2fqm7IJL4fwD
4mQxB8GQR8qgpA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:27 2026 by rpki-client