Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
File:                     j1Gq0OQUir4_KouNQxjzS0VrZfE.mft (raw, json)
Hash identifier:          h6640EvmMAjv7exSKaRPX/HZRKWYBXfDthzwewZ3TRI=
Subject key identifier:   4A:38:B3:5C:73:51:63:F3:1B:EB:1F:BB:33:20:E9:69:C2:37:EC:D8
Authority key identifier: 8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1
Certificate issuer:       /CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
Certificate serial:       019D2A72D070AB271FBB0CAB4C36DF439A28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
Manifest number:          0150
Signing time:             Thu 26 Mar 2026 14:01:00 +0000
Manifest this update:     Thu 26 Mar 2026 14:01:00 +0000
Manifest next update:     Fri 27 Mar 2026 14:01:00 +0000
Files and hashes:         1: 17JRT-eliiqD0ZudhQwcd-RHoCY.roa (hash: rsCaM5usnSELR3Hid5CN2oWYMmohcr2pCEMxJm1TSn4=)
                          2: 5CYe2w6R8bIP53LSediQOkU8X6Y.roa (hash: 62hxmbI0Pt2Gc+kE97Qd4+IWL8YV1uOGUoBpSifMc4g=)
                          3: AiyDVffautqfmFw0-sHwLnrdi94.roa (hash: NqMMGxy1WwFAXktdmGqyVpQBfDu1vxm8tC/DWTYXqCg=)
                          4: KTAAuRsqmRld1n4ZdiqcKLG_hbI.roa (hash: Z/rqoZBNVfDm70QTbYQ7hfqHZXGsKtZpgexuaPzb1M4=)
                          5: j1Gq0OQUir4_KouNQxjzS0VrZfE.crl (hash: OZjeR75DwdHzq50d72CKRPF7iGsMulHqsA9okfj/EtI=)
                          6: lXUAxU6WVwpNoYD3PNJupX0IdnQ.roa (hash: 1IXDFDpAZ7cDUUd7sdHkzjt07vGwbPC7cOUCYW3+UFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 14:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:d0:70:ab:27:1f:bb:0c:ab:4c:36:df:43:9a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
        Validity
            Not Before: Mar 26 14:01:00 2026 GMT
            Not After : Mar 27 14:01:00 2026 GMT
        Subject: CN=4a38b35c735163f31beb1fbb3320e969c237ecd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:b6:99:76:93:e9:b6:0b:03:28:c1:4d:ec:
                    fa:f2:f3:c1:4b:0b:2f:25:30:4a:e0:96:2a:45:de:
                    61:16:1a:33:0d:a4:ed:38:1b:a2:13:92:25:83:9c:
                    25:a6:38:29:29:65:ec:5d:87:5f:f0:05:ce:4a:3d:
                    e0:fd:d2:e4:9f:e9:b6:2a:a6:5e:96:da:4f:f8:63:
                    01:d7:8a:19:b5:bd:68:48:eb:bd:4d:8f:f9:db:05:
                    87:ad:4a:54:b2:3b:36:87:75:7e:80:5a:a9:a7:f1:
                    62:e3:ec:e1:31:fa:95:da:16:7e:f0:51:5a:40:61:
                    0b:d7:44:08:a3:ae:9e:15:f0:36:b6:59:79:c5:65:
                    6f:b0:99:f6:8a:fd:ba:ac:c8:79:ec:57:1d:3a:28:
                    1b:e0:b7:e0:75:7a:8c:83:a2:50:9a:8c:0a:b9:26:
                    4b:a2:28:86:b7:3b:5d:b5:29:3f:d6:24:1b:6f:31:
                    d0:e1:04:69:91:3f:1d:74:b8:17:3c:a3:20:52:f6:
                    d4:a7:a3:23:7c:d7:e4:55:03:5c:58:e4:d7:09:19:
                    b6:3a:d6:75:f9:96:29:17:f8:cb:94:8e:21:ea:d8:
                    03:7b:cc:4b:ec:33:14:a9:4b:4d:49:41:dc:dc:f3:
                    05:aa:29:a5:62:b8:7b:86:92:f5:c1:50:e3:ee:cc:
                    7c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:38:B3:5C:73:51:63:F3:1B:EB:1F:BB:33:20:E9:69:C2:37:EC:D8
            X509v3 Authority Key Identifier:
                keyid:8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ea:ef:1c:1b:3d:15:ec:5b:b6:10:53:5f:3b:30:65:91:a8:
         5b:64:9d:1c:b7:1a:52:fe:76:9d:75:4d:00:95:24:6f:72:b0:
         50:80:7c:e5:de:dc:10:46:8c:1f:bd:e7:19:fb:0f:a0:10:80:
         af:ae:66:6b:74:d2:d9:54:ea:fd:ac:de:14:01:09:e3:1a:cc:
         d8:2b:b3:fe:7f:ca:74:ae:7f:fc:20:b6:23:c2:5b:df:ed:66:
         65:a4:36:dd:99:c3:47:9b:dd:b6:10:04:82:b8:65:d5:4c:cd:
         18:15:eb:9b:df:40:37:67:86:32:d5:32:17:b5:33:66:cd:b9:
         93:2b:ca:33:84:6c:d0:b9:85:e3:5e:ea:33:4d:82:d7:75:87:
         3b:be:39:f9:51:3f:b1:75:99:88:7a:9b:cf:97:6f:d7:55:87:
         71:d1:26:1e:e1:45:10:f5:56:67:2f:2f:df:a8:d0:4c:39:dc:
         33:6f:66:af:1e:05:97:8d:8b:a7:be:4d:d9:a2:70:7e:70:9a:
         d5:2c:df:17:58:86:2b:6a:ad:0d:ff:bd:eb:01:2c:62:2c:0a:
         da:ee:2c:fa:f6:18:d7:b0:42:43:fb:11:cd:93:04:92:07:87:
         e7:7e:d3:d9:cd:49:fa:03:a8:c6:1b:8e:17:a5:62:b9:30:5e:
         fa:b7:30:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:25:44 2026 by rpki-client