Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
File:                     JBW_nGHIXbfJmsTN95JX55l6t3w.mft (raw, json)
Hash identifier:          tg4Ez+5WhsWuhRdlQn5mTqHMMlM4DRFR1fvNs6Bka6M=
Subject key identifier:   EA:7D:8C:56:34:38:37:07:18:B1:C3:16:72:6E:7B:B8:6B:8A:3F:9D
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Certificate issuer:       /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial:       019D2B17B6ED9CF2AFAAC23275351B36C6E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
Manifest number:          05F5
Signing time:             Thu 26 Mar 2026 17:01:07 +0000
Manifest this update:     Thu 26 Mar 2026 17:01:07 +0000
Manifest next update:     Fri 27 Mar 2026 17:01:07 +0000
Files and hashes:         1: AhjWgQe5daBXqh1dc2blAO0Ic2w.roa (hash: a7wxAC+oIB/6gPef5eFXwJM4UM8yzMuA8+Ys7Te3ao0=)
                          2: GXGKIBcqqhQNGnmXFb4-jHoOCEE.roa (hash: PlvHrrR/gICbE9juRm1dMuCUlODkxhFuRDveJO5Bh7Q=)
                          3: JBW_nGHIXbfJmsTN95JX55l6t3w.crl (hash: KMtvnVxOWJpGC9UFwNtnFeflt6h/j3I2qW0bfa4t1tM=)
                          4: Q5KSfGS3tHda5rpVovsFITdTDYg.roa (hash: ICa5+GlL+U3Gm/Y9rjnti3iGdfCYMhzdaqvSwGSYDhw=)
                          5: WCJ9gE-e8QjNE_vVGqmE6pO_nvw.roa (hash: DeEHxD61Idh7MZyjwpXRlXo6rPbiEwB469c7Waf82Ic=)
                          6: XtShvNgMwZA_rgTfZdTsjFYrJj4.roa (hash: QVsItKxf/ARRX3hlHmJ5FKurvG5F+zyGh9CaElCqQS8=)
                          7: au6l1R_D5TS70Po3ddjxh4jpsrw.roa (hash: nF+JU9MjISfoV5j1pWIuixKzo4d4T8t4S6fvAEqKW0w=)
                          8: kU0h6DQAW6ALWVeNhG0VOl8Gro8.roa (hash: DYmIhG/wRif14OJ02fuyBK+O/9TIFv1/d//lBb/p9Yw=)
                          9: yG4OkZWGVc801WR319uN12MQwCU.roa (hash: S1EYNeOLg4hu92HVj8eCs4hi5JNKFzGXwWgW8RpMiv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:17:b6:ed:9c:f2:af:aa:c2:32:75:35:1b:36:c6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
        Validity
            Not Before: Mar 26 17:01:07 2026 GMT
            Not After : Mar 27 17:01:07 2026 GMT
        Subject: CN=ea7d8c563438370718b1c316726e7bb86b8a3f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f4:77:13:39:59:ec:3c:e7:1e:63:98:d0:01:
                    ae:a8:e8:4d:a6:ec:26:6d:84:d7:6a:22:55:f0:3f:
                    9f:0c:31:49:58:c2:f4:bb:12:cc:1b:3e:53:0f:1c:
                    db:9d:66:5e:55:8e:1b:f8:65:8e:55:3a:20:d7:63:
                    99:a0:2e:37:d0:b1:ff:89:4a:0e:de:1b:72:ae:44:
                    7f:c0:2c:28:16:b0:b5:46:83:db:6f:66:bc:a6:05:
                    22:54:62:1f:dc:d4:9c:38:fa:db:33:0c:4b:61:2c:
                    49:3a:89:a1:c3:59:46:f0:2a:bc:15:60:24:8a:c0:
                    dc:37:3d:d0:cb:e1:f0:f3:75:fd:c1:59:c9:49:47:
                    32:d3:ec:5e:b6:c2:ec:0b:a1:a8:61:d8:13:33:3b:
                    f2:68:45:13:58:64:2f:30:2b:51:82:d7:79:91:4a:
                    75:39:e4:d7:fc:4a:42:02:d9:cf:a0:69:57:61:8a:
                    e9:e1:3e:c7:27:55:07:b4:73:b8:de:2f:47:77:de:
                    a6:54:c9:ab:6c:15:2e:0b:1b:a9:74:20:46:62:08:
                    a5:48:0e:e7:9d:ea:34:32:f2:01:44:a3:96:96:a9:
                    9d:14:9a:62:d5:bd:64:61:ac:4b:1b:bf:72:80:d5:
                    ce:43:f4:a3:9a:ef:ff:a9:2b:ea:2f:91:ad:12:33:
                    70:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7D:8C:56:34:38:37:07:18:B1:C3:16:72:6E:7B:B8:6B:8A:3F:9D
            X509v3 Authority Key Identifier:
                keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d3:3a:bc:32:3d:aa:10:17:da:e1:3b:a1:6a:74:61:a6:84:
         44:d8:d8:de:ce:f9:5e:9e:f7:5a:30:96:ae:e7:26:7a:73:68:
         1f:91:24:a9:56:d4:40:5e:50:d2:b1:e1:83:b5:51:ed:b1:f7:
         43:4b:05:81:5b:48:5b:0c:76:50:37:0f:0e:55:dc:f1:f7:a5:
         19:c5:4f:e0:fa:28:ff:ec:05:ca:f8:2d:7e:42:9c:3a:4c:48:
         49:43:8b:53:42:67:f0:f2:a6:b9:95:49:d7:62:cc:c4:f9:38:
         6d:c0:50:4a:bf:c2:05:22:c2:c3:46:7e:6c:51:de:0c:3d:11:
         8b:96:0b:f3:40:8d:2c:6c:5f:59:64:fa:8b:04:5e:87:a6:b8:
         b2:24:e7:d2:cf:d4:e1:20:ab:ad:c7:4e:5a:16:2b:8c:bc:a7:
         e0:8f:5b:f1:64:3c:66:f7:10:f5:57:61:ba:33:bc:e0:ec:83:
         b3:b6:53:01:dd:5f:14:d9:73:ae:59:7b:60:37:df:b6:45:e5:
         66:29:4a:6d:26:4d:a9:9f:15:d7:34:d1:73:c1:64:be:c5:88:
         ce:eb:5f:a1:4c:39:fd:85:ac:8b:02:16:43:be:27:3b:2c:d6:
         41:59:f3:43:1f:38:8d:ef:13:7e:7c:a7:13:90:85:ea:dc:29:
         67:9f:dd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:55:35 2026 by rpki-client