Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.mft
File:                     Jqwzv336i9kGGrnml_STFk5JxFg.mft (raw, json)
Hash identifier:          3AT0JZwDYXL+rFwBGlz6vJ2J15BtOJd++AROCHyinVw=
Subject key identifier:   76:2F:F9:46:29:A1:01:6A:6D:4C:00:13:BD:97:E4:13:EF:F5:B3:97
Authority key identifier: 26:AC:33:BF:7D:FA:8B:D9:06:1A:B9:E6:97:F4:93:16:4E:49:C4:58
Certificate issuer:       /CN=26ac33bf7dfa8bd9061ab9e697f493164e49c458
Certificate serial:       019D258425BC7D516D5AB400CEEA02553E31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jqwzv336i9kGGrnml_STFk5JxFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.mft
Manifest number:          9D
Signing time:             Wed 25 Mar 2026 15:01:50 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:50 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:50 +0000
Files and hashes:         1: Jqwzv336i9kGGrnml_STFk5JxFg.crl (hash: bJnIdZag9RAoV/XrmXXGN1obolaaMVQfne3/AHWMzjA=)
                          2: d7TMwS92glTdW3N8KmDukqMRLqU.roa (hash: 31LbEXEUnAvolwco3YmcCdR5874EevAvdxtYmb4X9nU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jqwzv336i9kGGrnml_STFk5JxFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:84:25:bc:7d:51:6d:5a:b4:00:ce:ea:02:55:3e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26ac33bf7dfa8bd9061ab9e697f493164e49c458
        Validity
            Not Before: Mar 25 15:01:50 2026 GMT
            Not After : Mar 26 15:01:50 2026 GMT
        Subject: CN=762ff94629a1016a6d4c0013bd97e413eff5b397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cc:10:b2:3c:87:d4:35:6b:39:4d:55:5e:18:
                    89:46:69:38:c2:3b:ff:f1:c1:49:f2:16:b6:82:f1:
                    9a:dc:8c:03:84:ca:b2:3a:e0:3d:a0:45:18:39:8e:
                    0b:04:fa:92:3e:d4:04:65:a1:ae:57:ef:f7:75:af:
                    79:33:9e:3b:6b:e0:28:6c:0f:92:fe:0d:07:44:7e:
                    ef:83:49:5a:2a:2c:40:b9:ba:04:bc:34:e0:12:c5:
                    a4:80:12:83:21:3b:8a:e4:8e:c3:13:14:c6:f6:04:
                    55:31:1e:eb:99:c8:f2:62:6a:67:8b:0b:e5:38:60:
                    ea:57:bc:5e:86:a4:a9:0a:81:e9:c3:34:f3:03:55:
                    f6:ad:a3:6a:70:95:7b:2e:06:7b:30:90:a8:b0:0c:
                    66:da:7e:df:07:19:3c:cf:36:62:60:fe:5e:86:5f:
                    ca:70:e5:bf:50:1c:e5:d5:54:d9:bd:a8:fd:14:e4:
                    9e:bb:93:cc:5b:b0:3e:11:3a:bc:aa:49:8d:e0:8b:
                    c1:95:79:a8:3e:bd:e5:95:3a:7e:5a:8e:d0:a6:2b:
                    0a:fd:b2:12:7f:3a:bf:45:1a:1a:8a:00:de:20:93:
                    18:9a:0e:32:c8:9b:6e:ac:39:82:ad:d1:f1:5c:7d:
                    f0:0c:fd:84:86:74:7e:b1:72:01:bc:34:e9:b0:e0:
                    ef:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2F:F9:46:29:A1:01:6A:6D:4C:00:13:BD:97:E4:13:EF:F5:B3:97
            X509v3 Authority Key Identifier:
                keyid:26:AC:33:BF:7D:FA:8B:D9:06:1A:B9:E6:97:F4:93:16:4E:49:C4:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jqwzv336i9kGGrnml_STFk5JxFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:0c:c3:78:a7:66:41:2b:e1:15:c8:41:7e:f5:56:c6:a3:10:
         d5:70:92:77:a7:c7:1f:fa:23:90:2c:b8:ce:22:99:e7:52:8d:
         e6:22:9a:1d:30:32:21:89:72:95:e3:91:00:38:7a:50:95:0b:
         bd:81:63:b3:19:a3:ca:bf:98:e7:6a:68:12:6a:b7:d2:ba:97:
         4c:89:e3:f0:70:ae:25:78:ce:62:8c:fe:1e:23:ce:d6:38:d9:
         8d:31:e4:1b:e9:48:b8:df:52:a0:21:6b:87:be:97:cc:5a:49:
         54:44:6d:90:8b:4d:7d:50:fa:6f:11:4c:49:42:d1:1b:be:63:
         aa:e7:cc:bb:a8:89:70:fc:cf:ad:66:76:95:74:d2:54:66:88:
         4e:be:47:09:30:7d:e6:8d:d7:ab:f6:e9:65:31:57:f2:4f:8a:
         e2:99:4a:57:3c:79:d1:47:af:89:35:30:2f:d7:14:d9:78:43:
         fb:81:f8:b9:03:3c:38:ba:3b:98:9b:f9:0b:bd:57:2f:ca:97:
         66:14:c8:7a:fd:40:f1:80:4e:79:07:b2:24:06:ef:44:68:f8:
         75:4d:6c:fe:4e:9a:ed:13:dc:1b:47:32:4a:52:ea:12:ef:bf:
         b0:81:dd:8d:8b:0e:22:29:af:03:16:74:e6:b5:29:6b:b1:1d:
         98:31:db:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:21 2026 by rpki-client