Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File:                     JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier:          3L+1+VGysD1ACUxAo8x8grL0Feuwp/6OiSkt5sFWEgo=
Subject key identifier:   06:41:3D:95:ED:AF:1D:5A:F5:6F:F5:39:4B:E4:09:E9:D4:8D:A9:65
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer:       /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial:       019D292906775B618CE6D096617AB273C84C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number:          10B2
Signing time:             Thu 26 Mar 2026 08:00:47 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:47 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:47 +0000
Files and hashes:         1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: lCS4e3SGJpAFWBcJjYQJ30Qfu56l3Blz9fBIGLxQpLE=)
                          2: lLxgfqurH_Hgps0nmWFaFien01Q.roa (hash: N0SnJ14VpoDgSTsYIgjlp8sX8VgDL1JD7jVAinD1cAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:06:77:5b:61:8c:e6:d0:96:61:7a:b2:73:c8:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
        Validity
            Not Before: Mar 26 08:00:47 2026 GMT
            Not After : Mar 27 08:00:47 2026 GMT
        Subject: CN=06413d95edaf1d5af56ff5394be409e9d48da965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c4:fc:7f:33:7a:bf:6f:68:89:d5:37:30:ef:
                    cb:b4:b4:77:8c:62:d8:5e:8d:2f:74:d3:76:91:d2:
                    f4:ab:5f:25:84:c8:ef:b2:09:db:40:29:0d:1a:9e:
                    e1:05:bd:14:00:5e:61:1e:4d:6a:d7:89:f7:99:96:
                    5a:8e:5b:e1:5c:28:02:59:20:f9:bf:a3:42:f8:5a:
                    0b:c4:2d:0d:cb:d0:89:85:28:3c:99:ca:73:e6:70:
                    13:53:02:a7:35:7c:5d:61:65:3d:31:40:fb:77:da:
                    de:01:45:5a:23:00:d3:a3:13:89:c2:57:5e:bd:d9:
                    3b:4c:b3:21:94:cf:86:48:ee:8c:be:72:0d:6a:94:
                    ef:3a:4e:84:7d:32:a7:68:a9:d4:65:2d:ff:72:36:
                    72:40:ed:60:11:16:c4:b8:11:fd:8a:59:66:56:c1:
                    64:6e:5e:79:5a:a5:9e:7f:af:97:f9:88:02:93:2c:
                    39:f9:83:d1:c0:60:a6:b6:f4:b7:18:6a:e2:92:f1:
                    ac:d2:34:89:37:79:54:59:3c:47:b6:08:ff:89:32:
                    d3:66:7c:e3:e0:6f:32:39:51:c6:48:61:13:13:18:
                    22:8e:b9:49:60:a0:98:e3:d4:3c:2b:d1:55:40:74:
                    89:38:05:a2:14:80:9b:c5:cd:84:5a:92:a9:c4:cc:
                    68:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:41:3D:95:ED:AF:1D:5A:F5:6F:F5:39:4B:E4:09:E9:D4:8D:A9:65
            X509v3 Authority Key Identifier:
                keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1b:9d:ed:a5:96:76:b2:33:c5:24:20:a0:57:88:d5:20:6a:
         45:f0:88:23:12:3a:9d:4f:85:08:15:95:23:2d:61:3d:fb:95:
         3e:c9:8b:0f:8e:89:43:e1:4d:1b:94:e0:3f:06:75:fa:55:67:
         9b:84:a9:25:d8:66:f3:fb:08:4f:ec:c1:72:5b:13:ad:af:82:
         1d:39:50:bd:80:5d:f9:92:a1:41:a3:ca:f2:6b:a8:03:b3:71:
         4f:ba:8c:ff:04:f1:40:09:91:72:ec:15:7b:dc:3b:b8:24:4c:
         c9:8f:4a:42:ff:da:bb:ed:c7:8a:2b:4a:ce:ed:32:0b:4c:0c:
         fb:2e:03:f6:d7:1b:ff:51:3e:10:33:5a:a8:5f:0f:9b:00:cd:
         e1:ee:8d:0c:ca:dd:4d:25:df:cb:42:b7:a0:db:1b:c7:ef:a6:
         83:6f:c8:a0:1b:d8:8b:58:34:eb:d9:75:20:0e:92:63:71:3d:
         f3:74:90:b4:7a:03:bf:3b:de:fc:f6:b4:b6:f8:a6:89:aa:19:
         61:86:0b:41:af:b8:0d:a5:f3:4e:74:72:09:c2:a2:c7:4a:91:
         a6:a2:33:86:5c:d2:34:62:3d:65:99:c9:ce:59:d5:d3:a4:b2:
         5e:bd:f9:e4:e0:c0:ac:3a:e4:14:a8:e2:c0:91:46:ab:c7:37:
         ef:a9:82:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:15 2026 by rpki-client