Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
File:                     JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft (raw, json)
Hash identifier:          +r0D5RPxyol6Slk04Q8JyHI+t1HtBtQ01ayKmTaG5lc=
Subject key identifier:   4C:86:EF:10:EE:3F:E1:51:DB:36:D3:E6:A6:E4:6B:D3:6C:1C:AB:F0
Authority key identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
Certificate issuer:       /CN=26c672da72a34cc282adc40f282676de75117654
Certificate serial:       019D2816B9064F1E87878BDCC3A000C40071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
Manifest number:          04D5
Signing time:             Thu 26 Mar 2026 03:01:10 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:10 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:10 +0000
Files and hashes:         1: 4WCS7UgZrFg0xB7Sz_SWzaKXxmg.roa (hash: Dtp0+olrT/g4B/c9sgq/6C+rxWLMhH/r+Ia7+UoUCmg=)
                          2: D-QuEP4IligLmiH1Vpj8cATe378.roa (hash: 9Hc6YaNH5CoT1hAHiAk1w4no/D39VZT0Fifmyjk6Q2k=)
                          3: JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl (hash: gxU2JXSvRWs8uBGVKVIINkbs0XFqKXPGnRAedxmJAw8=)
                          4: cVMPfkbG6UOsNH5plxFAqn0XkEQ.roa (hash: IZdQT+U93+RrywPuq81fYi7D3L8Bi21y4Bobjb9uAxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:b9:06:4f:1e:87:87:8b:dc:c3:a0:00:c4:00:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26c672da72a34cc282adc40f282676de75117654
        Validity
            Not Before: Mar 26 03:01:10 2026 GMT
            Not After : Mar 27 03:01:10 2026 GMT
        Subject: CN=4c86ef10ee3fe151db36d3e6a6e46bd36c1cabf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ba:73:09:ac:02:8c:fa:44:e2:f4:1b:b8:b2:
                    1c:9a:38:ae:af:d9:12:79:5e:55:8a:c2:cf:ac:44:
                    55:3e:85:53:e1:b8:aa:81:f5:ff:50:77:9f:27:90:
                    bb:a6:3b:68:92:03:8f:d0:ae:cb:d0:32:45:4a:a5:
                    03:64:de:f6:b5:f7:2e:be:52:c1:71:1e:28:10:82:
                    49:1b:85:0e:4e:64:31:8c:8b:0f:29:ff:80:f9:73:
                    1c:1c:f6:70:58:94:34:0d:57:42:0b:64:56:7d:22:
                    cd:1a:68:a0:15:43:b3:55:53:fa:1d:b9:fb:24:8d:
                    88:db:95:cc:55:33:53:cb:34:d4:e4:5d:b5:c5:b1:
                    c2:43:18:f5:09:10:10:24:00:54:89:26:05:c5:62:
                    cf:46:b0:96:57:7d:7c:84:10:2d:b1:1d:62:aa:0e:
                    18:95:13:0d:72:b1:8b:19:41:c3:b2:41:07:76:55:
                    8f:a9:c8:bb:b5:b3:42:d5:25:4c:d7:08:18:80:46:
                    15:1d:b2:0e:81:77:0f:8d:8c:94:1d:68:0e:e2:68:
                    f1:36:44:a7:cb:99:3a:9d:1b:7e:9b:e4:a7:11:53:
                    71:27:c2:75:17:cd:ae:f7:a7:0f:4d:d7:6a:59:d7:
                    6d:35:70:0b:aa:ff:af:05:96:b9:44:5b:3c:1c:db:
                    d4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:86:EF:10:EE:3F:E1:51:DB:36:D3:E6:A6:E4:6B:D3:6C:1C:AB:F0
            X509v3 Authority Key Identifier:
                keyid:26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:e2:40:69:97:36:1a:9d:60:5d:40:b3:e4:db:84:2a:4b:01:
         2c:7e:4f:30:f5:84:02:e7:5c:04:d6:75:59:5d:6d:4e:06:46:
         f8:7c:04:c4:b3:01:27:7b:0e:b1:23:e8:3c:10:65:cf:17:41:
         d2:25:63:fe:bf:58:34:34:cd:88:92:ba:4b:80:f7:27:90:f7:
         89:48:3c:d8:2c:f1:06:6f:32:a4:f1:b8:0b:cb:21:59:56:cf:
         69:53:35:44:ea:08:90:91:6f:59:18:86:3c:51:cf:6b:a0:e9:
         1e:99:e2:32:eb:45:17:27:57:9c:c7:92:44:57:1e:7a:a5:ea:
         40:75:a2:c9:93:30:ee:24:d3:86:80:b0:b7:40:41:63:af:4f:
         b0:7b:2b:15:c7:50:70:09:d2:da:bb:05:e0:0f:70:19:7b:43:
         b6:79:72:b8:53:e7:9a:48:2f:c1:88:2f:37:80:68:4a:db:6a:
         b5:2e:fd:a2:7e:8c:74:ee:85:2f:3b:70:e8:2a:6c:a3:e2:6b:
         e8:6f:ff:50:86:85:46:b1:c0:c5:71:8f:ee:08:17:15:a6:c7:
         5a:83:69:9a:7c:ef:75:5e:b4:82:bd:22:0a:af:81:64:d2:48:
         5b:70:05:39:28:0d:c6:1e:9c:a9:2b:bc:05:0d:64:c7:bb:72:
         7a:fd:3a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:51 2026 by rpki-client