Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
File:                     J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft (raw, json)
Hash identifier:          raFhm6NyJOEjQGD+6+9bSW0QqFYhx1vvMON82TB6reA=
Subject key identifier:   F1:1B:44:46:C4:5E:6A:55:E9:73:EF:83:7A:58:46:82:6E:E0:DB:87
Authority key identifier: 27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7
Certificate issuer:       /CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7
Certificate serial:       019D258326EE181A0E4D5E63C1832B31896F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
Manifest number:          084D
Signing time:             Wed 25 Mar 2026 15:00:45 +0000
Manifest this update:     Wed 25 Mar 2026 15:00:45 +0000
Manifest next update:     Thu 26 Mar 2026 15:00:45 +0000
Files and hashes:         1: 90bA_1c0b9wqSfAPCrrQL_H-kZA.roa (hash: r0eCLDLHOhzDC6shAKnaCsXhzGuMaX3Bckc660qpoRM=)
                          2: J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl (hash: qX4COwt6rMCo6DHsVEYiPkShdj9UCuEecSMUsxIIrSA=)
                          3: qx8ZrK3WQLJkbH55xMHBPltKk88.roa (hash: jcmV2sIKz7lybDK1rHLrSEaabC9BpZRW23JHTDg1hhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:26:ee:18:1a:0e:4d:5e:63:c1:83:2b:31:89:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7
        Validity
            Not Before: Mar 25 15:00:45 2026 GMT
            Not After : Mar 26 15:00:45 2026 GMT
        Subject: CN=f11b4446c45e6a55e973ef837a5846826ee0db87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c5:c7:3f:e6:97:db:9c:06:9c:a5:dc:2b:4d:
                    39:a9:ca:98:fb:9f:26:58:e2:a5:f5:93:1e:6d:28:
                    42:62:42:22:ee:a7:1e:31:9c:9e:21:45:f6:e9:08:
                    65:ec:fc:4f:38:5e:93:5e:a1:17:e1:6a:4b:9f:0c:
                    03:eb:4e:f4:42:ff:9d:32:88:21:3c:b6:e9:14:4f:
                    c7:ee:e8:16:c3:64:50:8c:4d:53:e0:79:54:2b:48:
                    35:35:2d:b4:a3:71:4d:32:2e:b2:dd:47:42:3c:34:
                    46:69:9b:65:71:70:4b:6c:b4:a3:17:32:2e:c1:b3:
                    a2:bb:72:1e:bf:b0:38:f6:b7:5d:60:83:1d:52:8d:
                    a5:cc:f5:40:dd:08:43:5a:9f:ba:67:8d:12:f1:bc:
                    16:0c:9c:df:05:67:09:b7:70:5f:73:22:73:14:a9:
                    b5:5b:8c:3a:36:f6:38:76:5a:ac:1d:23:ea:f6:5f:
                    c3:a7:60:71:39:a0:e4:8f:f6:bf:13:a6:f8:a5:fc:
                    95:1f:44:a8:84:77:5c:ef:48:78:1b:18:a2:f9:3b:
                    72:58:d5:fe:e3:a0:14:f0:4d:a4:eb:a3:b8:56:29:
                    4f:72:78:fb:72:41:92:da:8a:dc:54:99:26:31:ce:
                    ce:9f:70:1c:2a:3a:0a:d8:b7:8e:55:1c:90:ff:96:
                    ed:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1B:44:46:C4:5E:6A:55:E9:73:EF:83:7A:58:46:82:6E:E0:DB:87
            X509v3 Authority Key Identifier:
                keyid:27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:0d:af:31:cd:f4:40:20:b8:ec:03:92:3c:20:1b:de:cc:6e:
         c0:f8:a7:58:eb:04:eb:9b:9c:60:df:18:78:98:2b:7a:86:43:
         78:2e:c8:ed:12:e7:2d:c7:05:bb:9d:0c:e0:dc:fc:01:fd:ff:
         61:15:83:a5:fa:6a:1a:64:39:73:d3:79:de:eb:61:12:b7:35:
         67:e3:e9:00:e5:8e:11:ee:98:f6:80:7d:19:b7:0e:c3:19:91:
         4d:2e:9f:17:81:e0:9f:7c:01:2d:7d:13:36:ad:1f:1f:4b:51:
         bc:47:b1:0b:ff:ac:84:d9:3d:d0:e7:54:bc:18:c6:5c:8c:c8:
         54:d6:64:48:27:a7:d7:5f:ba:13:bc:75:2c:77:d0:2f:dc:da:
         7f:bf:ea:a6:cc:50:ff:f1:95:93:b6:c7:f3:53:5d:0b:17:88:
         22:b6:7f:a9:f9:0a:59:80:41:af:16:b2:77:ce:32:8c:4a:37:
         ee:5b:5c:0f:dd:28:e6:5a:e6:08:ff:bb:10:c6:b7:50:1e:4d:
         5f:fc:e7:6d:67:27:06:9c:e7:58:10:5f:c1:11:f9:fc:3c:6c:
         04:4b:6c:32:52:7d:a9:b1:70:42:61:a1:25:4f:a3:2d:5e:34:
         9f:02:1d:0c:11:c0:8d:78:b4:c2:8f:3c:50:f2:9d:01:c4:3b:
         6e:8d:74:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:05 2026 by rpki-client