Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
File:                     JojvNz-PAOAcJc-SS08ujsaiGdE.mft (raw, json)
Hash identifier:          qkkR9BejtRsuUZiZdWFUzGMBkIawU8MRlOVBVKNtxUE=
Subject key identifier:   A5:EE:2B:1B:C5:FA:CF:DB:7B:79:BC:D1:36:21:CF:78:2D:79:2A:81
Authority key identifier: 26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
Certificate issuer:       /CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Certificate serial:       019D25BA798B4A4D559083F9DA3E33AE2345
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
Manifest number:          1889
Signing time:             Wed 25 Mar 2026 16:01:10 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:10 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:10 +0000
Files and hashes:         1: JojvNz-PAOAcJc-SS08ujsaiGdE.crl (hash: 7R8qSaTrGzwZfQHl0/cqtsjQlolqNcwn38y/4DRnFsQ=)
                          2: lMxeGirQXYR0GmDk4V1MklHdGZ0.roa (hash: FHwqA5/kX+tzwJy24N20vnc6oaI1ZNK+QVCJ/kD2Qfg=)
                          3: w71z6e1nnczS-eMiXSgzScyOD6k.roa (hash: IC3JerQQwAfGduvYY+qJSAnye5COvgk3vpfNs1yG+I4=)
                          4: zkOZlou0wZ6me2DfEVkQRqyFe8k.roa (hash: pU85jXVjO3BbHeMnI95HpijaHL/9kMqJ0g5Ywj9M28E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:79:8b:4a:4d:55:90:83:f9:da:3e:33:ae:23:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
        Validity
            Not Before: Mar 25 16:01:10 2026 GMT
            Not After : Mar 26 16:01:10 2026 GMT
        Subject: CN=a5ee2b1bc5facfdb7b79bcd13621cf782d792a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:85:a6:a4:a1:84:49:07:13:2f:e8:da:5d:31:
                    e3:a8:2a:b5:ce:77:3d:90:0d:ab:6f:22:11:04:e7:
                    93:8a:8d:6c:e6:83:21:ea:61:35:74:2d:b2:70:fa:
                    dc:23:d8:16:f7:43:17:29:17:0b:5f:ff:2a:cf:01:
                    e5:e4:42:49:d2:0a:ba:88:66:f1:47:a2:02:6c:9b:
                    c6:be:62:4b:99:6a:cf:59:c1:27:79:70:f1:d0:cb:
                    df:d3:d9:fd:f9:8a:44:12:38:de:b4:b3:51:94:ab:
                    b8:61:9c:33:ee:1f:fa:8c:ad:c5:f2:f7:21:bb:7b:
                    05:83:72:b7:22:25:18:f2:31:39:53:8f:52:dc:72:
                    ba:6a:de:fc:57:eb:8c:08:a0:4c:52:cd:d3:b8:07:
                    d8:2b:4d:2f:97:60:18:5c:39:98:ca:44:23:37:b2:
                    d2:6a:e5:fa:07:3d:b6:15:79:11:ab:32:b9:d8:f8:
                    e9:ac:4f:7f:f2:71:ad:48:61:44:12:33:58:3e:2c:
                    d4:9a:cd:96:df:bb:ee:f7:e7:fc:15:d5:1d:c6:47:
                    a6:d0:6d:d5:2a:83:e8:cc:84:28:7c:2e:92:34:95:
                    5f:2d:6e:db:1a:3b:fb:15:4e:62:14:06:fe:e9:b6:
                    1c:17:ca:8f:6d:b5:24:bc:21:35:3a:7e:dd:71:57:
                    de:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EE:2B:1B:C5:FA:CF:DB:7B:79:BC:D1:36:21:CF:78:2D:79:2A:81
            X509v3 Authority Key Identifier:
                keyid:26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:cc:c3:1b:74:f2:26:d7:b5:c7:db:9c:5e:02:be:51:62:6c:
         e5:f1:d9:f3:a6:1a:93:fb:d6:ce:9a:43:b6:5c:c1:8d:18:6f:
         1c:29:ca:16:44:75:e8:44:da:00:cb:d2:72:ee:9d:03:ca:5c:
         a2:a7:d2:73:34:52:b3:52:ce:52:86:5a:cd:06:a6:ea:5b:73:
         d9:dc:e3:eb:c1:92:f0:75:a4:26:bb:3a:ae:a1:7a:93:81:02:
         d5:3f:42:ef:23:29:70:46:03:e9:cd:84:0f:4c:33:f1:cb:0b:
         93:34:2b:58:bc:59:ff:d4:59:60:68:7e:52:2b:53:cc:2b:f5:
         a7:2e:ee:d0:17:1a:6e:ea:90:03:c9:96:7b:d4:e2:f2:99:b8:
         f1:08:90:53:06:07:e3:6c:3f:fd:fe:68:bf:db:d5:cd:45:c5:
         24:08:b2:ae:66:c5:cb:45:3c:05:25:00:bf:ff:14:32:1c:bd:
         a2:82:39:26:e6:b8:ff:0c:83:ff:16:3d:ef:11:2f:be:4c:d0:
         30:6d:e2:46:c9:38:48:69:4b:69:8d:21:5a:b0:c5:85:bb:b5:
         5f:ee:fa:9e:ef:cd:9c:2c:05:13:e2:d4:d7:5e:e9:39:8b:9a:
         8b:b4:47:86:cd:fc:89:58:38:4e:00:49:61:d4:dc:d6:5d:3a:
         96:0e:3a:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lunmLSk1VkIP52j4zriNFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ODhlZjM3M2Y4ZjAwZTAxYzI1Y2Y5MjRiNGYyZThlYzZh
MjE5ZDEwHhcNMjYwMzI1MTYwMTEwWhcNMjYwMzI2MTYwMTEwWjAzMTEwLwYDVQQD
EyhhNWVlMmIxYmM1ZmFjZmRiN2I3OWJjZDEzNjIxY2Y3ODJkNzkyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oWmpKGESQcTL+jaXTHjqCq1znc9
kA2rbyIRBOeTio1s5oMh6mE1dC2ycPrcI9gW90MXKRcLX/8qzwHl5EJJ0gq6iGbx
R6ICbJvGvmJLmWrPWcEneXDx0Mvf09n9+YpEEjjetLNRlKu4YZwz7h/6jK3F8vch
u3sFg3K3IiUY8jE5U49S3HK6at78V+uMCKBMUs3TuAfYK00vl2AYXDmYykQjN7LS
auX6Bz22FXkRqzK52PjprE9/8nGtSGFEEjNYPizUms2W37vu9+f8FdUdxkem0G3V
KoPozIQofC6SNJVfLW7bGjv7FU5iFAb+6bYcF8qPbbUkvCE1On7dcVfewQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXuKxvF+s/be3m80TYhz3gteSqBMB8GA1UdIwQY
MBaAFCaI7zc/jwDgHCXPkktPLo7GohnRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm9qdk56LVBBT0FjSmMtU1MwOHVqc2FpR2RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNmYzMzktODQ1NS00ZGI0LWE2NTAt
N2Y3OGEzYmFhN2MxLzEvSm9qdk56LVBBT0FjSmMtU1MwOHVqc2FpR2RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mNmYzMzktODQ1NS00ZGI0LWE2NTAtN2Y3OGEzYmFhN2Mx
LzEvSm9qdk56LVBBT0FjSmMtU1MwOHVqc2FpR2RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZszDG3Ty
Jte1x9ucXgK+UWJs5fHZ86Yak/vWzppDtlzBjRhvHCnKFkR16ETaAMvScu6dA8pc
oqfSczRSs1LOUoZazQam6ltz2dzj68GS8HWkJrs6rqF6k4EC1T9C7yMpcEYD6c2E
D0wz8csLkzQrWLxZ/9RZYGh+UitTzCv1py7u0BcabuqQA8mWe9Ti8pm48QiQUwYH
42w//f5ov9vVzUXFJAiyrmbFy0U8BSUAv/8UMhy9ooI5Jua4/wyD/xY97xEvvkzQ
MG3iRsk4SGlLaY0hWrDFhbu1X+76nu/NnCwFE+LU117pOYuai7RHhs38iVg4TgBJ
YdTc1l06lg46Dw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:36 2026 by rpki-client