Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
File:                     J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft (raw, json)
Hash identifier:          3PLYYBuZRLxQALEszrqDcUPY9KVjJtcdqk1SYl9LbCM=
Subject key identifier:   5B:4A:A0:F7:50:7C:9F:DE:25:D3:AE:1C:4E:F6:FC:47:E8:CC:F6:B2
Authority key identifier: 27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7
Certificate issuer:       /CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
Certificate serial:       019E1E351BE36D68EF0D028162DDC0B29840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
Manifest number:          1909
Signing time:             Tue 12 May 2026 22:00:57 +0000
Manifest this update:     Tue 12 May 2026 22:00:57 +0000
Manifest next update:     Wed 13 May 2026 22:00:57 +0000
Files and hashes:         1: J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl (hash: pfQNvFtJdxRZD5n1hBm9RYQoEaaAuaTWEmIuP1Tzm3s=)
                          2: SPWsU8T9PLAubzeedd1G0T5GSAM.roa (hash: UkMo0FW619fM25TcBwQ8m/aK6wdUQ2mji2t/icRA2rU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:1b:e3:6d:68:ef:0d:02:81:62:dd:c0:b2:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
        Validity
            Not Before: May 12 22:00:57 2026 GMT
            Not After : May 13 22:00:57 2026 GMT
        Subject: CN=5b4aa0f7507c9fde25d3ae1c4ef6fc47e8ccf6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:20:d6:be:85:88:30:e9:67:62:d5:bb:5d:86:
                    2a:91:9e:5e:2a:44:3e:26:b7:bd:91:ff:a2:99:34:
                    01:79:40:fd:69:05:56:62:57:b5:a5:5f:d9:0d:44:
                    ab:16:62:19:28:02:47:bb:49:3f:93:39:b4:68:49:
                    99:e8:5d:47:94:7e:5d:a7:78:62:b8:46:51:c5:6f:
                    33:4b:47:6b:62:bc:e8:59:f5:f6:94:a0:56:9f:17:
                    e5:1f:a0:17:eb:d0:a2:0e:f6:8b:b1:46:fe:f4:da:
                    c2:2b:f1:e8:45:c1:00:79:76:53:52:cb:6a:79:0d:
                    89:80:3b:cd:00:4b:3f:52:e3:f6:23:6e:4b:c8:1d:
                    b5:df:cf:82:7c:38:08:aa:c7:af:f9:bc:28:74:72:
                    21:e8:5d:26:56:bc:48:41:fa:58:ea:c1:ee:e3:74:
                    6f:5b:4f:32:70:c1:e6:76:de:b9:20:74:53:b4:52:
                    4e:18:76:ac:71:74:5d:df:ef:ff:57:dd:ca:12:47:
                    9a:17:7b:de:1b:d5:0a:2a:4c:8b:2c:c1:76:56:26:
                    a0:15:b0:7a:9e:e0:ad:40:41:19:f0:82:d8:9c:e6:
                    aa:9d:d0:af:07:56:65:21:0d:f4:56:79:b4:8a:ea:
                    56:c7:ea:4a:12:50:df:d2:a8:30:77:d3:47:c9:35:
                    1b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4A:A0:F7:50:7C:9F:DE:25:D3:AE:1C:4E:F6:FC:47:E8:CC:F6:B2
            X509v3 Authority Key Identifier:
                keyid:27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:41:38:25:9f:aa:b3:2d:e5:48:bd:ff:26:19:1b:b6:3d:5b:
         78:05:36:f5:75:c8:34:04:fe:8f:3f:01:ad:17:a0:28:e2:22:
         63:f3:30:d1:96:40:44:3d:74:8b:8c:94:35:58:f7:e7:39:73:
         f3:42:6e:a7:fa:98:6b:68:bc:12:7b:58:65:01:0a:11:a7:5a:
         e5:21:2b:c8:d3:12:6c:f4:ef:ca:e8:d7:d3:b7:2f:8f:04:4f:
         20:b2:ca:83:29:53:0b:e6:73:a8:60:a5:99:78:9c:3c:a6:e9:
         ca:6f:66:bb:7b:ec:de:4f:98:79:ef:c3:27:5f:ee:bc:41:55:
         56:11:ec:fb:f7:13:65:84:cf:db:fa:13:b3:1c:d0:e1:1a:f4:
         e3:04:f7:b4:73:f6:ea:64:4e:e0:e8:8d:15:95:39:7a:9c:5d:
         08:f8:48:de:d2:c1:6a:de:34:c3:7e:6e:35:00:10:9c:1a:db:
         17:fc:3e:82:34:98:e5:00:d8:2b:36:13:28:ed:54:28:5b:8a:
         5e:5e:21:79:cb:25:30:47:38:69:4d:fb:24:4c:02:7d:84:6e:
         77:c2:4d:7a:e0:65:2e:a1:9b:c5:84:a3:60:de:ae:d0:d6:96:
         37:1b:5e:2e:a9:8d:f7:82:25:03:3e:c4:49:cb:79:17:a5:80:
         33:57:02:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:00 2026 by rpki-client