Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
File:                     J7syqoyfjQXFF74q1mUvZlUKjVc.mft (raw, json)
Hash identifier:          hIUWJugfjRUyjmd1cwuRYEOWI2D+FoUzm6s20EzhgAg=
Subject key identifier:   B6:38:66:58:D0:CF:2F:F1:09:F2:93:91:B6:EF:2C:D7:F4:67:89:D2
Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
Certificate issuer:       /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Certificate serial:       019D265F562BDED3DB8BD5ED297A1BD773EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
Manifest number:          188B
Signing time:             Wed 25 Mar 2026 19:01:15 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:15 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:15 +0000
Files and hashes:         1: 3RCjNuMxUkfSYyNOUlggwRfWfc4.roa (hash: UnwrsssJDeDLbtzFhokPg+3DUFYJBO3poSSiUsMCOJk=)
                          2: J7syqoyfjQXFF74q1mUvZlUKjVc.crl (hash: lqpv/HpVJoTZOmKhk57DG/MjWhfI2bqStSAqKVD3jJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:56:2b:de:d3:db:8b:d5:ed:29:7a:1b:d7:73:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
        Validity
            Not Before: Mar 25 19:01:15 2026 GMT
            Not After : Mar 26 19:01:15 2026 GMT
        Subject: CN=b6386658d0cf2ff109f29391b6ef2cd7f46789d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3d:2d:1a:ad:60:44:41:e9:49:41:45:1b:0e:
                    6d:7e:6d:8f:e6:4e:c2:62:ef:c7:cf:66:2f:29:09:
                    9e:b2:e6:88:d2:24:14:99:a9:51:62:6d:7a:12:2b:
                    05:8b:99:b0:91:51:cd:21:a1:e2:0b:22:a9:a8:3a:
                    89:27:61:f2:7c:7c:be:7b:89:16:86:a1:d8:1f:4b:
                    0a:62:66:2a:a8:85:6d:1e:7b:e2:05:b4:e0:c0:81:
                    e2:18:8b:20:b5:7c:78:7e:c4:1e:d4:b3:7c:dc:ce:
                    08:8c:d2:a0:e1:10:e0:29:2e:c8:4a:e9:c6:6b:29:
                    ff:f9:6f:5c:9b:b4:78:a5:b8:d4:0b:89:00:63:9d:
                    72:a6:0b:25:7e:5b:82:fc:61:8f:fc:55:be:78:dd:
                    f0:19:fe:85:0a:97:41:1d:a9:d4:a7:66:96:0f:4e:
                    83:b4:5d:e2:8e:b2:99:f7:c4:c5:6f:0d:6d:1b:87:
                    11:62:8e:1a:4e:f8:83:38:eb:07:d2:8a:08:8b:0d:
                    56:be:17:84:d3:1e:87:d0:4e:8b:ff:84:c9:4d:36:
                    9a:89:db:a7:64:83:5f:85:02:6e:9a:1e:da:b5:10:
                    6d:c5:24:66:d9:7f:d8:90:86:b6:a2:c2:82:05:b2:
                    2a:44:17:92:29:7e:e0:4c:c7:e8:ae:3c:dc:d0:ef:
                    ec:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:38:66:58:D0:CF:2F:F1:09:F2:93:91:B6:EF:2C:D7:F4:67:89:D2
            X509v3 Authority Key Identifier:
                keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:54:6c:7e:f7:34:22:20:1f:ac:25:54:fb:10:50:ae:c7:a8:
         00:5d:8e:0a:2e:db:0a:6a:9c:5f:6e:7f:89:4a:0c:9b:52:48:
         ba:e2:2e:e8:af:97:b2:fe:72:81:4a:04:b3:1b:0a:2f:39:57:
         b5:98:1c:60:2b:fb:5b:fc:65:7b:a8:a4:2b:8f:fe:0a:09:fc:
         20:67:a3:61:e0:4e:96:7b:42:0b:74:6c:00:0e:e6:bb:94:b5:
         71:0d:f5:2c:55:5e:70:e3:2c:cd:e6:3a:da:61:93:47:d0:56:
         f6:78:78:c6:ba:26:47:0d:34:35:81:ae:0d:16:8f:ad:07:01:
         14:9b:bc:9c:2a:0e:1b:ff:0d:48:31:29:41:07:3a:02:7f:34:
         d2:02:67:ce:b5:08:fb:97:94:fe:30:f3:ee:72:40:08:79:de:
         6a:b7:98:52:04:c4:fc:a1:0e:09:64:ff:97:22:48:00:0a:4f:
         d6:23:2a:e6:05:57:9b:db:99:df:be:a5:58:fd:f2:25:a9:10:
         52:15:26:e6:41:22:9e:36:50:75:c5:43:83:86:ff:63:90:57:
         e1:61:55:19:03:a6:54:68:d6:2f:13:04:f5:6d:53:8d:20:fb:
         86:f5:ae:45:86:fb:fb:cc:bf:11:08:57:e7:e7:67:48:5c:f7:
         f1:fe:31:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:01 2026 by rpki-client