Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
File:                     1-J4in4YLBY0j_SiikmFhuHhjMMY.mft (raw, json)
Hash identifier:          177/vFc3JTPaH334P4B/Y+pCcIZVM3iEf+MweMwJcMU=
Subject key identifier:   6C:56:DF:F7:D0:1A:48:F1:E5:9F:F0:2E:22:A9:2B:A2:EB:85:37:1A
Authority key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
Certificate issuer:       /CN=f89e229f860b058d23fd28a2926161b8786330c6
Certificate serial:       019D284D4278E62EB1443842066E32E56B0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
Manifest number:          114D
Signing time:             Thu 26 Mar 2026 04:00:44 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:44 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:44 +0000
Files and hashes:         1: 1-J4in4YLBY0j_SiikmFhuHhjMMY.crl (hash: raJunwOqIHYKjXbEbGfQupDiQCjr9RZbHhO8nwicc2g=)
                          2: fSxv-fa820aQ4S9EYgBkeHgJYUs.roa (hash: K47nAqoGk2oEUNxR6ydvT1zDvrh8m0EYPg1t6S3F6ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:42:78:e6:2e:b1:44:38:42:06:6e:32:e5:6b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89e229f860b058d23fd28a2926161b8786330c6
        Validity
            Not Before: Mar 26 04:00:44 2026 GMT
            Not After : Mar 27 04:00:44 2026 GMT
        Subject: CN=6c56dff7d01a48f1e59ff02e22a92ba2eb85371a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fd:23:67:c3:b8:56:d1:09:46:3f:69:fa:e4:
                    44:3c:8a:7c:37:35:b2:91:27:10:6a:96:b6:26:d0:
                    bc:5e:ee:0c:8e:8e:f9:84:8a:ce:2a:00:97:8e:8c:
                    22:34:33:aa:35:e9:17:29:24:f5:7a:0f:f6:1b:88:
                    77:0f:5a:f2:6e:e1:65:0a:dc:fe:f0:fd:5c:ee:41:
                    b3:d3:9b:26:93:c8:79:2d:ed:4d:9f:c7:c6:b0:4f:
                    83:b6:62:f2:e6:91:6e:e2:d7:d9:a2:b2:19:4a:6f:
                    1d:ec:b8:ee:b8:95:25:cb:f4:01:a8:35:77:a4:f8:
                    dd:0e:01:e0:f0:ef:a4:7f:41:b5:a8:89:71:c4:04:
                    92:4d:3c:3f:92:44:fd:ff:a9:0e:29:33:24:14:38:
                    f7:6e:1a:2d:39:6d:8a:78:90:8f:aa:7b:5a:2b:0e:
                    3f:ca:32:71:02:c7:94:7a:03:da:e0:30:ba:21:72:
                    3e:dd:92:c0:28:82:df:23:cc:fb:4a:bf:ac:14:ae:
                    d4:48:23:07:a5:87:df:14:c8:23:3e:bc:05:69:b3:
                    5c:92:79:a3:6e:bb:d1:7c:cb:89:42:3f:72:7c:04:
                    76:80:ea:12:8a:ac:6a:eb:64:e2:80:c2:a7:fa:42:
                    e1:e9:94:6b:36:ae:07:70:e5:29:ad:99:50:c2:d1:
                    6b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:56:DF:F7:D0:1A:48:F1:E5:9F:F0:2E:22:A9:2B:A2:EB:85:37:1A
            X509v3 Authority Key Identifier:
                keyid:F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:8c:ab:6a:3f:f5:9b:c4:66:50:f8:46:35:00:e3:7a:84:72:
         d1:d4:1a:64:59:eb:f4:04:96:f2:ba:0f:9e:2e:c6:64:71:bf:
         62:ce:cb:5e:c0:79:0f:16:bb:89:76:b6:86:3d:a7:4e:6d:a1:
         c6:98:1d:3c:83:f9:c6:10:b5:da:48:ba:b5:9f:04:d7:40:b6:
         cb:bb:68:24:e9:c0:49:bc:f8:81:93:c1:4d:a7:e8:5c:7a:17:
         39:55:b2:ff:d6:7d:17:7a:3e:1d:a6:bb:d1:1e:e7:cd:2f:3a:
         bc:c3:74:17:ed:ec:72:76:14:d6:1c:20:0d:fd:73:ef:78:cf:
         1b:1e:3e:bf:3b:9d:ea:29:f0:a6:ed:36:a0:06:d9:29:86:1b:
         a5:42:97:28:5f:43:77:03:e6:55:98:23:ae:dc:fe:6d:53:3d:
         e6:0b:80:e8:9e:cd:1c:09:43:b3:8e:fb:29:40:f1:b4:28:19:
         00:80:25:08:18:23:f1:4c:e3:7a:78:d2:d2:5a:ae:4f:97:ab:
         25:1c:db:6a:f6:e0:e0:69:4d:f0:e5:f4:bf:9e:d9:29:e5:41:
         42:5e:12:bd:da:ed:ab:a4:9f:bc:8c:0d:5d:71:2d:25:ce:27:
         91:65:02:dd:63:81:e5:ef:c7:97:ec:51:b4:99:22:87:77:61:
         13:2a:f7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:38 2026 by rpki-client