Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
File:                     jntpkn3SG7nhRV-ojtiO0kfHGNo.mft (raw, json)
Hash identifier:          /PQMbcg07BrQxIO0IzFKHCXAkmbYliQ6NyBFbHU9AOc=
Subject key identifier:   4F:5E:B8:C7:E5:24:E9:B6:A3:96:C6:E5:17:A3:EC:B8:5E:D8:45:62
Authority key identifier: 8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
Certificate issuer:       /CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Certificate serial:       019D258435A73D47BA7460EF646B5119F330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
Manifest number:          15F4
Signing time:             Wed 25 Mar 2026 15:01:54 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:54 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:54 +0000
Files and hashes:         1: O01TpHeHqBiUeJused6g5bROXeI.roa (hash: lprGNMtGbZUy/qu3fbQs2Y1Q7vEBDCNvAujKwUnYorA=)
                          2: jntpkn3SG7nhRV-ojtiO0kfHGNo.crl (hash: myHqTchjkM7iTeAMO8U3uW2XFaHzqAkoYkHIzB2tHbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:84:35:a7:3d:47:ba:74:60:ef:64:6b:51:19:f3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
        Validity
            Not Before: Mar 25 15:01:54 2026 GMT
            Not After : Mar 26 15:01:54 2026 GMT
        Subject: CN=4f5eb8c7e524e9b6a396c6e517a3ecb85ed84562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:ec:6e:df:79:e0:4a:cd:ac:47:03:09:e1:
                    e2:f8:3a:e5:34:d9:bf:5f:f8:1f:a7:c4:3c:3a:60:
                    54:1b:80:53:20:e7:34:c5:4f:3c:d2:52:08:49:f5:
                    8d:cb:94:74:7a:17:5a:87:f3:e8:b8:0f:e8:8d:1b:
                    75:1b:fd:4b:c4:df:9c:94:e8:f6:b0:4a:88:1f:d0:
                    2b:80:36:29:2a:e6:1c:d3:6d:23:4f:8f:ac:2f:43:
                    56:de:d7:0d:7c:c7:74:84:87:37:d1:f0:a8:aa:7a:
                    99:4b:8a:ca:8d:7d:46:c9:38:56:b4:b7:db:c3:6f:
                    91:dc:7c:76:d3:31:22:5d:02:7f:b2:be:8d:bc:6e:
                    0b:f9:ed:ab:59:9d:d3:63:26:34:c3:a3:98:91:04:
                    48:f4:03:f6:ba:8d:99:83:a8:4c:11:6c:6e:e4:e5:
                    17:f0:c2:87:29:8e:d4:74:af:af:09:15:c1:4f:29:
                    54:2f:f5:06:b8:1e:2e:4a:bf:f0:2c:02:8c:73:d9:
                    3d:3a:ec:94:8d:ea:f7:6f:16:05:b9:b9:f3:fa:6e:
                    bd:f5:85:e7:8a:7d:32:64:e8:93:f0:01:75:40:7f:
                    04:b0:70:ba:6f:e0:19:8d:62:c6:6d:b1:c5:2c:0d:
                    8a:ff:0b:57:32:81:c2:93:65:5b:a9:3a:2d:2d:9f:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5E:B8:C7:E5:24:E9:B6:A3:96:C6:E5:17:A3:EC:B8:5E:D8:45:62
            X509v3 Authority Key Identifier:
                keyid:8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:07:0c:0d:00:48:b2:6d:5f:1f:51:2d:3f:50:b2:ed:c6:21:
         c2:2c:ff:2a:40:8f:5f:d6:65:6f:56:78:bb:12:b0:9c:17:77:
         2a:01:c0:49:6d:9c:15:86:c5:a9:62:10:1f:93:fe:13:ae:19:
         ef:e2:f4:e5:c8:66:78:4a:8c:db:ac:a8:8f:68:cc:76:3f:ce:
         f2:a4:ce:38:96:51:75:84:33:39:7d:89:82:40:97:51:46:99:
         3f:c8:db:64:65:ef:56:30:f9:57:23:97:71:ab:d1:e8:b5:a1:
         cb:5f:86:f2:67:ed:09:0e:54:a7:87:3e:f5:c6:e4:2c:d7:be:
         d6:81:6e:d2:f2:e9:65:b2:e0:24:95:92:e7:c4:8b:cb:f7:8e:
         2d:c9:1d:81:1f:03:71:d0:d6:9c:1b:6b:c1:4f:2c:cf:4d:63:
         37:47:58:b8:0c:33:f1:27:1b:a8:19:77:88:d5:44:98:ab:d8:
         e1:c5:25:cc:57:4f:e5:ec:05:56:a2:8b:73:55:ae:49:8e:d2:
         38:08:42:5e:f5:76:c1:44:99:dd:f2:75:01:22:3d:48:61:a5:
         d5:ea:23:ac:09:fb:69:d5:73:31:e3:69:da:15:1a:17:91:44:
         05:fa:de:3d:50:5a:7e:16:95:24:38:b8:80:34:1d:8d:36:bf:
         91:30:b2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:02 2026 by rpki-client