Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
File:                     JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json)
Hash identifier:          bLn+TLicgwm0O5tvonOeRGd0a9ADpbONM7fEeWapcOA=
Subject key identifier:   1E:62:F9:F9:66:37:58:D2:69:BB:33:04:16:20:2B:44:39:3F:51:CA
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Certificate issuer:       /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial:       019D27E04DE2F8B437B4F7C31B3553A47EE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
Manifest number:          0965
Signing time:             Thu 26 Mar 2026 02:01:44 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:44 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:44 +0000
Files and hashes:         1: A5wtuBfY6dxUh5eS44FlMqwcmog.roa (hash: tZbTVJ0vSZUIP4JV/ZEsCDLjrfqC4a0hum2qjGz/VQE=)
                          2: C6kXQbmf9ed-Rd3RlEcWQXFNlRk.roa (hash: DW0PJcH29KhjZVwZo0qWO+ll1hc593uNe8QjdzH0uYc=)
                          3: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: TkqTgeOrqn3Au0UNtFRL2S2p+8hUBYNUBFoUKfoMJJY=)
                          4: Prtm22vbQehmnlO5aEmPr0BFZa4.roa (hash: 2TJTM+cDnTV/eFEpw6CMVHfCzUzdPWSSepuSHNmY9Qo=)
                          5: ROVyIAsBNfwBer4Npp8bVnXZW2U.roa (hash: Z2rohR1T9JeCw9lXsHTXnEJbzYMGmnxfv3f6fLAZwjY=)
                          6: SN7iUL1ZTDZriT9WldHFs3bgME4.roa (hash: KkH9Un51EAXewil4Qmtkkj2B60LR6wL89EVPG96bBUw=)
                          7: vYV80pMOfJdsEu4niWAcrkBUgNc.roa (hash: gHF1ZhItzUzKri2+egaA2O0GGW8DIyzH1CkBWVld6xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:4d:e2:f8:b4:37:b4:f7:c3:1b:35:53:a4:7e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
        Validity
            Not Before: Mar 26 02:01:44 2026 GMT
            Not After : Mar 27 02:01:44 2026 GMT
        Subject: CN=1e62f9f9663758d269bb330416202b44393f51ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c4:c1:ce:0c:fc:50:82:43:9d:ff:af:f0:2d:
                    7e:a9:c5:86:61:05:31:6e:28:f3:0b:12:f3:01:b2:
                    ae:ad:46:15:3e:21:dc:1f:df:43:f7:a2:2c:95:88:
                    66:2a:a3:0a:c1:f8:8a:a1:f3:99:71:c0:e9:62:f6:
                    75:fc:ac:34:da:95:d2:ec:63:62:93:e8:13:2b:72:
                    83:d0:57:62:e6:9c:4d:1f:49:1f:d5:e1:ca:75:cb:
                    75:53:7f:52:b2:42:dc:73:51:ab:92:b2:9c:93:72:
                    cf:f4:50:13:e4:6e:9a:95:91:7e:4d:ec:66:dd:7b:
                    f9:c8:78:e1:ff:5d:57:98:b2:89:e3:ea:b9:ca:b9:
                    d5:f8:1e:20:be:ed:db:89:34:20:82:7b:61:93:64:
                    6e:77:64:9b:47:92:68:9b:ed:c8:ef:75:34:bd:f4:
                    62:20:6d:7f:78:db:de:6d:a1:13:72:cf:df:27:f3:
                    70:73:b8:77:dd:28:ac:55:43:d4:f4:83:66:27:a6:
                    44:df:d2:3a:49:a2:69:e8:75:32:b3:23:bb:09:2b:
                    7f:e1:f8:11:7e:39:a1:1c:f0:55:da:76:e4:1e:98:
                    1f:f3:a9:87:10:c8:f4:d7:1c:08:46:8e:77:2a:40:
                    c2:c2:e0:2b:0f:51:b3:07:97:1e:f8:0a:84:d0:b3:
                    69:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:62:F9:F9:66:37:58:D2:69:BB:33:04:16:20:2B:44:39:3F:51:CA
            X509v3 Authority Key Identifier:
                keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:17:23:1a:79:23:c5:6e:82:6a:74:b3:a3:9c:96:bd:03:b6:
         48:00:8d:3e:85:01:c1:9a:67:26:47:50:15:6e:b8:7b:41:bb:
         76:01:b3:52:90:ef:ca:91:8e:e2:be:7f:f7:ec:b0:c7:bf:dd:
         38:33:e5:62:5d:95:37:a9:6a:90:6f:c4:72:89:e3:e8:33:6d:
         e7:2e:1d:e1:57:ac:15:03:23:75:f9:19:18:9c:6a:64:7a:de:
         86:45:3e:18:13:6d:6c:e2:6f:43:01:6f:b9:4f:66:80:30:96:
         9b:5e:39:8d:62:d5:6e:83:05:50:f3:e5:f7:73:62:2c:06:e1:
         5d:49:67:c8:a6:9c:6f:4e:32:cc:53:79:e0:a8:3d:a1:2c:f8:
         5a:01:18:39:ae:8d:b3:ca:01:16:36:4b:cd:e7:0a:74:4c:dc:
         2f:17:83:72:7d:d2:c0:71:96:7a:ad:9e:41:f3:61:2d:42:38:
         27:b8:a2:42:b4:3c:72:31:80:98:18:7c:1c:78:7e:85:fe:14:
         85:35:53:ae:0f:89:61:87:28:60:a4:2a:da:d2:b3:92:b4:b7:
         ed:01:53:f2:c7:4f:00:a0:48:dd:b7:1b:39:18:c0:d4:6a:25:
         f9:f8:28:e6:0c:8a:82:85:29:23:86:d0:c5:b8:88:20:65:c9:
         c5:3a:75:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----