Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
File:                     rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json)
Hash identifier:          /j0bH7ejZN/3YzhwSRG5Aig/Bm6VS+tfKx9P3qeju2I=
Subject key identifier:   0B:9D:CC:74:20:77:07:83:77:93:6D:85:CF:66:9E:7D:93:EC:87:F0
Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
Certificate issuer:       /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Certificate serial:       019D265F01D8974F5226646F61C421C2728B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
Manifest number:          0B4F
Signing time:             Wed 25 Mar 2026 19:00:53 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:53 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:53 +0000
Files and hashes:         1: cFj2gabjb2A6OS2M4OWiTy7sjlY.roa (hash: c2wHgi8z7Wquh1Yiowi4MCoX8zsu06SPgPbyIoYnmLY=)
                          2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: nZ88dX4azoZREqm59r/Rd6stavEzAQf0wAeXOjoZcMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:01:d8:97:4f:52:26:64:6f:61:c4:21:c2:72:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
        Validity
            Not Before: Mar 25 19:00:53 2026 GMT
            Not After : Mar 26 19:00:53 2026 GMT
        Subject: CN=0b9dcc742077078377936d85cf669e7d93ec87f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:90:f0:a0:db:c5:45:24:71:fe:c3:46:34:11:
                    34:02:4c:d4:60:6a:68:41:80:03:8d:7f:d8:31:86:
                    30:7e:b7:11:a0:65:a7:a6:be:60:7d:a6:b8:2a:00:
                    b0:61:b3:4f:3a:06:40:bc:75:7d:44:2d:82:4d:f0:
                    c9:68:75:77:e0:42:ec:57:de:2e:55:3f:9c:60:19:
                    cb:91:5e:48:17:b2:81:af:8b:51:2f:93:cc:ab:94:
                    01:44:c2:7f:a1:6b:9b:e7:b3:6f:93:ea:b2:7b:85:
                    b8:ab:dc:56:ae:e9:54:6f:b5:53:93:93:d8:eb:74:
                    e3:5e:f7:4c:c3:fa:2b:3b:20:f5:06:95:26:d2:ee:
                    b0:0a:1e:84:e8:e6:f0:10:c2:e3:8d:73:64:08:67:
                    1f:89:6d:b7:b2:1e:65:98:d5:7a:c1:10:c9:75:35:
                    22:ca:d4:c4:9c:60:2e:22:cb:33:b8:e4:5e:15:fd:
                    7b:8c:ec:7c:d9:bb:0d:eb:90:b9:8d:73:d7:20:3c:
                    04:44:05:3e:cd:bb:db:6a:39:67:07:15:ba:a6:02:
                    c7:5d:c6:55:2e:4e:6d:be:40:ee:67:6f:69:1f:15:
                    57:d2:0d:91:62:c6:73:10:6a:59:d4:72:97:62:df:
                    3f:03:9d:dd:41:56:b8:a4:5b:b5:66:2c:25:fe:d2:
                    17:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9D:CC:74:20:77:07:83:77:93:6D:85:CF:66:9E:7D:93:EC:87:F0
            X509v3 Authority Key Identifier:
                keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c9:b5:68:59:0c:c7:0a:24:d6:76:50:88:4d:c7:0f:d3:37:
         70:83:a3:91:67:31:5c:a9:15:8d:3f:68:0c:ce:ae:2b:1a:81:
         43:1a:cb:aa:f2:d4:f5:90:ed:0d:11:46:b5:7c:73:2d:e3:84:
         39:6b:4a:c1:24:b9:f9:71:f7:81:96:3e:75:53:ee:ae:39:a7:
         45:ca:bc:07:4f:c1:13:f6:03:37:b2:56:69:6b:b6:96:3a:87:
         69:18:bc:b0:97:e1:8f:d9:30:bd:5a:ac:9d:f6:cd:24:41:9f:
         d6:5c:dc:6e:32:9b:b3:81:79:3c:84:5e:18:72:3f:e0:19:ea:
         01:6d:1a:56:25:9c:b6:ba:e7:e0:a2:46:75:b5:24:61:fc:18:
         57:5b:f7:38:96:c7:d9:73:ec:79:a8:ec:ec:03:25:9f:43:c9:
         79:4b:1f:21:67:d7:9c:29:4d:73:79:94:8d:05:b7:fa:c5:17:
         e9:fa:b2:7a:6a:bc:fc:1a:d7:4f:32:ae:59:25:39:6e:12:69:
         32:00:a3:71:d5:50:ed:40:bc:35:22:c6:b9:2c:f1:72:00:5b:
         c2:6e:c0:28:27:a7:fa:42:ff:8b:b6:a4:f7:60:77:f5:1e:22:
         c3:2c:b5:5a:84:53:c1:63:72:8b:e5:2d:d0:da:71:90:61:1c:
         33:c4:03:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:35 2026 by rpki-client