Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.mft
File:                     J_g-VravdgCD61S7W24Z3bQd2Io.mft (raw, json)
Hash identifier:          /DNaasiZsoJtll+v4Q9vj1rhQvC1GwHC77o97wvlHU0=
Subject key identifier:   D6:45:CE:A5:A4:BC:F9:5E:3D:91:2B:52:A4:16:E1:FB:5A:6D:B8:AF
Authority key identifier: 27:F8:3E:56:B6:AF:76:00:83:EB:54:BB:5B:6E:19:DD:B4:1D:D8:8A
Certificate issuer:       /CN=27f83e56b6af760083eb54bb5b6e19ddb41dd88a
Certificate serial:       019D26CD56A465B81FC65FEBB27C0BAB3973
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.mft
Manifest number:          14D7
Signing time:             Wed 25 Mar 2026 21:01:24 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:24 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:24 +0000
Files and hashes:         1: J_g-VravdgCD61S7W24Z3bQd2Io.crl (hash: lx2nUhdYE/rC2T4xuFQcYOh831jxA0h8TscU7p8hROU=)
                          2: fYbpVRDWAjZurXbI75VmAntEEJ4.roa (hash: 97OtigCrP0e9lMm10aXBrc8Zkbd0C52W6qxynDHBaLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:56:a4:65:b8:1f:c6:5f:eb:b2:7c:0b:ab:39:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f83e56b6af760083eb54bb5b6e19ddb41dd88a
        Validity
            Not Before: Mar 25 21:01:24 2026 GMT
            Not After : Mar 26 21:01:24 2026 GMT
        Subject: CN=d645cea5a4bcf95e3d912b52a416e1fb5a6db8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d1:05:f5:ae:d1:94:30:11:dd:f6:8e:c3:bc:
                    00:69:ed:34:85:48:b1:a5:93:1b:75:42:74:6c:f7:
                    32:c5:f5:c1:92:f9:9c:61:5e:2b:a3:51:32:65:74:
                    88:9e:36:c0:40:a7:a7:b9:f3:1e:96:57:fa:34:aa:
                    b2:fe:21:f0:c9:0e:f4:ad:88:dc:a8:57:d5:a9:70:
                    6c:0d:b3:a5:31:51:f9:ee:c5:47:be:86:87:33:33:
                    70:2f:c7:dd:6d:0b:8d:65:d3:d5:81:7c:33:3e:f0:
                    1b:0b:0e:40:c4:91:8b:30:35:fd:07:c0:a6:0a:39:
                    b3:8c:13:d7:97:ee:d7:68:99:1d:39:c5:35:21:9c:
                    a7:53:bc:1b:d0:1b:8e:a1:f3:cd:2e:bf:82:48:72:
                    43:92:57:d5:ed:80:ed:69:5d:d8:97:9a:eb:bc:d3:
                    d6:f6:7d:6a:09:04:bf:d1:69:32:3c:9a:e0:06:cc:
                    84:31:e3:87:a6:65:fa:c0:15:2b:37:c2:da:2f:ff:
                    a7:03:d5:00:87:50:3d:e6:31:90:38:e9:ed:07:da:
                    9c:19:6d:e7:35:be:f6:37:6c:fb:2a:1f:80:7e:e4:
                    0c:16:24:fd:61:ca:78:0f:ff:60:c0:27:3b:9d:67:
                    b0:e3:cd:75:06:12:83:4c:84:2f:c1:de:00:bf:2d:
                    97:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:45:CE:A5:A4:BC:F9:5E:3D:91:2B:52:A4:16:E1:FB:5A:6D:B8:AF
            X509v3 Authority Key Identifier:
                keyid:27:F8:3E:56:B6:AF:76:00:83:EB:54:BB:5B:6E:19:DD:B4:1D:D8:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:cd:d2:f2:94:67:ce:fd:fc:40:4b:2d:31:bf:90:09:d2:c4:
         8e:62:52:c4:c6:12:21:a0:ef:ad:f0:aa:2b:c3:ba:4c:d7:b9:
         bd:45:1e:31:37:90:4d:a0:d2:f1:11:c6:34:92:f0:da:ac:ca:
         42:be:a6:be:52:a5:65:a3:b5:a7:d7:8c:8a:b4:a4:1f:6c:34:
         f3:f9:84:cd:ba:cc:43:11:9a:9e:69:04:86:c5:52:96:bc:89:
         15:11:c6:cd:d3:fd:70:0a:e9:e3:2a:ff:28:4a:e8:93:76:b5:
         8b:af:44:96:f9:80:7d:ef:6b:76:3e:44:b5:12:a7:62:88:22:
         f0:65:df:1d:47:e6:93:a4:f2:d2:09:4b:0c:ed:d4:4d:67:ff:
         2c:54:89:1d:60:2a:d2:af:bf:8f:4d:68:17:3e:7f:01:c3:1e:
         cc:68:f5:37:c6:7d:28:48:00:52:ea:04:02:3c:f0:0e:3c:bd:
         df:7f:f6:6d:0c:09:a3:eb:75:50:0d:f6:6b:ba:13:4f:dc:da:
         ff:55:60:a8:1b:cc:d0:59:ca:86:6a:8f:5d:1e:04:e9:86:74:
         e4:36:58:05:82:ba:44:df:7d:74:f1:5c:60:90:c0:92:d4:da:
         b1:cd:8e:ac:09:ab:55:86:8e:fd:c8:05:a5:a8:5f:f0:e5:cb:
         d5:2c:a5:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzVakZbgfxl/rsnwLqzlzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZjgzZTU2YjZhZjc2MDA4M2ViNTRiYjViNmUxOWRkYjQx
ZGQ4OGEwHhcNMjYwMzI1MjEwMTI0WhcNMjYwMzI2MjEwMTI0WjAzMTEwLwYDVQQD
EyhkNjQ1Y2VhNWE0YmNmOTVlM2Q5MTJiNTJhNDE2ZTFmYjVhNmRiOGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NEF9a7RlDAR3faOw7wAae00hUix
pZMbdUJ0bPcyxfXBkvmcYV4ro1EyZXSInjbAQKenufMellf6NKqy/iHwyQ70rYjc
qFfVqXBsDbOlMVH57sVHvoaHMzNwL8fdbQuNZdPVgXwzPvAbCw5AxJGLMDX9B8Cm
CjmzjBPXl+7XaJkdOcU1IZynU7wb0BuOofPNLr+CSHJDklfV7YDtaV3Yl5rrvNPW
9n1qCQS/0WkyPJrgBsyEMeOHpmX6wBUrN8LaL/+nA9UAh1A95jGQOOntB9qcGW3n
Nb72N2z7Kh+AfuQMFiT9Ycp4D/9gwCc7nWew4811BhKDTIQvwd4Avy2XXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZFzqWkvPlePZErUqQW4ftabbivMB8GA1UdIwQY
MBaAFCf4Pla2r3YAg+tUu1tuGd20HdiKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl9nLVZyYXZkZ0NENjFTN1cyNFozYlFkMklvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jMDMwNWUtNTlhMS00YjY3LTllNjEt
N2M0ZmUzNjEwMzdhLzEvSl9nLVZyYXZkZ0NENjFTN1cyNFozYlFkMklvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jMDMwNWUtNTlhMS00YjY3LTllNjEtN2M0ZmUzNjEwMzdh
LzEvSl9nLVZyYXZkZ0NENjFTN1cyNFozYlFkMklvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANc3S8pRn
zv38QEstMb+QCdLEjmJSxMYSIaDvrfCqK8O6TNe5vUUeMTeQTaDS8RHGNJLw2qzK
Qr6mvlKlZaO1p9eMirSkH2w08/mEzbrMQxGanmkEhsVSlryJFRHGzdP9cArp4yr/
KErok3a1i69ElvmAfe9rdj5EtRKnYogi8GXfHUfmk6Ty0glLDO3UTWf/LFSJHWAq
0q+/j01oFz5/AcMezGj1N8Z9KEgAUuoEAjzwDjy933/2bQwJo+t1UA32a7oTT9za
/1VgqBvM0FnKhmqPXR4E6YZ05DZYBYK6RN99dPFcYJDAktTasc2OrAmrVYaO/cgF
pahf8OXL1SylcQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:02 2026 by rpki-client