Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
File:                     jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft (raw, json)
Hash identifier:          2WbF1grW3oUOAOHF8Twr1sRoAJJHr3yUn8FGqIasFcA=
Subject key identifier:   4F:A2:52:49:87:F6:A9:ED:11:77:6F:81:53:A4:C7:9E:33:5B:1F:4F
Authority key identifier: 8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A
Certificate issuer:       /CN=8c029fb18e19c5677244057eda38c63dc18da12a
Certificate serial:       019D28F224C428F1DECEAC33E414BE63C494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
Manifest number:          046D
Signing time:             Thu 26 Mar 2026 07:00:50 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:50 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:50 +0000
Files and hashes:         1: 3SvuzLztH7kaYqpigx8jbNPhEro.roa (hash: jRC8rlwTfMhG8lXkzGvIt38V+oAm4+j9qe4aEosOOZM=)
                          2: jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl (hash: PtcYDG01aaaYHCP3syElXuGEQgZ3WMVlRnhiTk2kJ8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:24:c4:28:f1:de:ce:ac:33:e4:14:be:63:c4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c029fb18e19c5677244057eda38c63dc18da12a
        Validity
            Not Before: Mar 26 07:00:50 2026 GMT
            Not After : Mar 27 07:00:50 2026 GMT
        Subject: CN=4fa2524987f6a9ed11776f8153a4c79e335b1f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:10:1e:cd:f0:ed:c0:4d:de:76:d3:5a:5c:6c:
                    55:ed:90:99:75:0b:98:b2:de:0c:84:28:12:97:6f:
                    43:e0:2a:7e:53:5c:2c:09:a7:fb:eb:51:0d:0a:aa:
                    89:a6:de:8a:1a:bc:45:d3:3f:e6:c1:4a:52:16:50:
                    ac:6f:2f:2c:b1:ae:f6:dd:83:c8:bc:9e:1b:9b:4f:
                    ff:1a:60:5c:da:99:1e:63:76:a1:0a:f6:b0:64:22:
                    7d:97:be:38:d8:91:2c:20:c4:97:ff:35:40:d7:a3:
                    c7:0d:7e:7e:f7:22:59:e6:c1:83:9c:86:26:1a:56:
                    9d:02:51:69:37:f5:44:38:ad:2c:c1:cc:f8:88:7c:
                    15:94:fb:06:33:10:80:73:7b:9c:7a:42:9b:e1:3a:
                    e1:e5:b8:20:22:85:a5:a6:1d:6d:d4:d1:57:36:72:
                    02:39:0b:b5:f2:e8:3e:1b:25:2d:ec:18:19:83:19:
                    f6:d5:a0:8e:ee:8a:04:52:d0:8d:be:45:6d:4d:2f:
                    c6:ea:98:7f:6c:0f:5c:66:8c:f7:81:a5:26:a4:03:
                    67:32:c6:bf:f6:7f:2d:56:d9:a2:4c:d5:44:9e:43:
                    d2:08:10:42:1f:79:a6:42:97:17:9f:7c:55:c4:ea:
                    a1:1d:a0:5f:d3:97:4c:c3:17:7f:db:a2:2d:bf:c0:
                    61:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A2:52:49:87:F6:A9:ED:11:77:6F:81:53:A4:C7:9E:33:5B:1F:4F
            X509v3 Authority Key Identifier:
                keyid:8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f4:19:c3:cb:a9:fd:3e:ed:ab:bf:d4:5b:50:28:43:03:0d:
         82:7d:45:be:0b:0d:3a:c7:e6:5b:ae:fb:6e:a5:84:b3:7d:e7:
         d6:a0:4c:3b:23:6b:12:52:ab:4b:26:b9:fc:e7:0d:21:af:12:
         92:d8:55:e4:67:4b:da:7c:d6:f3:8a:a1:a6:19:c7:21:e8:9d:
         24:20:7b:03:12:47:fa:22:94:e2:17:1c:2f:36:5e:08:6b:97:
         b5:d3:64:be:a1:17:75:d6:e4:f7:eb:fd:af:c7:38:6c:59:65:
         75:1f:29:ba:ef:a8:e8:ee:a4:59:2d:07:24:f8:96:6e:54:2f:
         73:8e:ed:82:55:1b:54:06:29:f8:d2:0d:79:22:b4:06:20:c9:
         85:c3:76:dd:be:0c:a1:d8:24:4c:af:7e:e7:c1:39:46:c8:5c:
         91:fd:24:b1:d9:7c:5a:cb:92:76:36:b3:16:c1:4f:dc:fb:46:
         2a:de:9d:c0:41:06:eb:1e:ec:d1:04:64:63:f0:8e:dc:9b:c7:
         69:47:ab:c4:02:03:a3:e6:0f:39:92:98:7a:25:b4:89:38:b7:
         71:db:cf:ed:89:12:57:94:29:24:25:1c:a7:10:b6:d1:4b:d1:
         d4:5d:02:60:c2:b0:2b:b1:c8:c6:d9:8b:db:7d:21:37:69:6d:
         28:6d:b5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:39 2026 by rpki-client