Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.mft
File:                     JpWAdxwfGyIpLXcc0S_Pu_YhuvE.mft (raw, json)
Hash identifier:          5iB1CFr/LFY19BUfO2YScs66ny+1mjSLUr6+MSuJhfA=
Subject key identifier:   BD:79:C3:CF:64:D6:DF:43:EB:D2:4E:95:60:11:BA:06:5E:17:54:D4
Authority key identifier: 26:95:80:77:1C:1F:1B:22:29:2D:77:1C:D1:2F:CF:BB:F6:21:BA:F1
Certificate issuer:       /CN=269580771c1f1b22292d771cd12fcfbbf621baf1
Certificate serial:       019D26CCF233DCB38A9697266A6EDC57B3E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.mft
Manifest number:          1709
Signing time:             Wed 25 Mar 2026 21:00:58 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:58 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:58 +0000
Files and hashes:         1: 8Or4tMIeUKKiFuxLHSHC1VAXS-U.roa (hash: tpnBb6UAy6Kb8GarXQk1S6ql0zPPoJ88ecDTuxqMsa0=)
                          2: JpWAdxwfGyIpLXcc0S_Pu_YhuvE.crl (hash: iLbt8VEEw93VnbOpA3zBWI3HTE+S9xsbI9zS7ABjK/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:f2:33:dc:b3:8a:96:97:26:6a:6e:dc:57:b3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269580771c1f1b22292d771cd12fcfbbf621baf1
        Validity
            Not Before: Mar 25 21:00:58 2026 GMT
            Not After : Mar 26 21:00:58 2026 GMT
        Subject: CN=bd79c3cf64d6df43ebd24e956011ba065e1754d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f6:12:4f:a3:a0:00:33:22:11:0e:0c:1b:da:
                    42:a3:57:29:65:fe:f7:9d:c0:97:7d:2b:de:cf:ac:
                    d5:06:f2:b6:39:d0:5c:aa:2c:45:ca:d7:a1:67:8a:
                    a6:82:8a:bf:0a:e2:d5:8f:ab:c8:ab:48:51:ea:59:
                    b9:7b:2a:b9:a2:88:01:dd:8e:c6:8f:11:c3:03:e5:
                    d3:c8:50:c5:fb:22:8b:ee:eb:f7:7d:db:b1:48:f5:
                    ba:42:cd:51:d1:41:69:6a:79:4b:c6:be:7b:e9:61:
                    20:80:f1:be:8a:1c:64:6e:5c:b3:48:d2:1f:63:d7:
                    74:58:86:68:07:63:17:28:78:8b:50:11:22:d0:68:
                    d0:6f:0a:37:57:94:ed:e8:df:77:c2:ab:91:09:f9:
                    89:d2:56:4a:18:e8:96:3a:a5:c7:7b:b9:b8:70:ed:
                    63:f8:9c:51:e5:da:a4:d0:b2:04:09:82:fe:8b:0c:
                    b6:0a:57:c2:06:7b:ae:9e:b0:33:4a:22:d6:31:c1:
                    62:82:ca:dd:ba:37:59:bd:f8:35:8a:46:b2:35:97:
                    a8:f0:6c:d4:90:11:b9:43:48:57:8a:56:e1:0b:c4:
                    fb:66:33:63:85:63:31:02:f1:2f:9f:8a:48:2b:95:
                    a4:7e:21:a3:c7:a3:7b:98:02:4d:5f:ea:cc:24:e5:
                    24:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:79:C3:CF:64:D6:DF:43:EB:D2:4E:95:60:11:BA:06:5E:17:54:D4
            X509v3 Authority Key Identifier:
                keyid:26:95:80:77:1C:1F:1B:22:29:2D:77:1C:D1:2F:CF:BB:F6:21:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f9:1e:07:91:18:73:f1:53:89:19:d3:3f:0d:2b:09:34:c2:
         34:01:66:7d:56:df:f0:19:93:fd:e7:4b:0c:ae:07:9b:0c:7e:
         45:e9:1e:89:af:63:4e:71:0a:fa:d3:8d:2a:ad:81:fb:9d:0c:
         b7:2d:36:ad:50:52:21:c9:dd:af:b7:ff:61:e6:07:41:71:4f:
         c3:6f:20:ea:be:7c:dd:f8:8d:67:00:d4:95:94:7d:51:d1:05:
         4a:ec:c2:c7:cf:8f:66:e9:7e:40:b8:7b:84:38:87:89:15:4c:
         0c:41:60:39:69:5d:58:11:a0:1a:5b:43:b2:12:64:f8:d9:ab:
         42:d0:9a:0f:35:24:d3:77:64:48:88:3f:75:21:dc:c0:4f:3e:
         98:7f:13:71:5a:d2:14:29:90:cf:25:b8:fd:fc:70:92:53:91:
         7e:c4:ab:fb:d6:11:88:cb:38:7f:4c:8c:fc:15:3c:23:e2:f3:
         78:58:a7:cf:de:db:a4:d3:7d:da:bb:0c:a2:7b:5b:92:06:b4:
         af:63:ea:87:d7:66:1d:b4:4b:4d:c6:1b:62:93:c1:99:65:9e:
         74:60:73:9d:39:d8:0f:9e:d4:9e:a6:52:27:65:e5:c5:29:58:
         b2:bd:dc:9e:69:73:49:97:2c:03:b8:6f:c5:68:1a:06:59:b9:
         ba:83:4f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:44 2026 by rpki-client