Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
File:                     _JYd_F9wvxt28F5Ep07QKTEl5L4.mft (raw, json)
Hash identifier:          y1Qlp60PSMUPyZPtMgyH0JdrP0w6sZT/NBh3DfgB54U=
Subject key identifier:   DA:22:61:15:A7:57:0A:97:2F:72:0F:F2:74:DB:DD:0F:E3:2E:22:BF
Authority key identifier: FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE
Certificate issuer:       /CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
Certificate serial:       019D269636A5F614BF3C8DFE472B7B88ABBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
Manifest number:          1281
Signing time:             Wed 25 Mar 2026 20:01:11 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:11 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:11 +0000
Files and hashes:         1: 4zeaHxVeOKs_UsyBMTNTTKo1oxQ.roa (hash: XBbtmyDxr/MaSevTjNm0YVLmtgk2DlOz9kdPZzWObLc=)
                          2: _JYd_F9wvxt28F5Ep07QKTEl5L4.crl (hash: YrkHDen32ipVR3C8zzx/fnnT9WQMjwJwy3CYfWDRxJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:36:a5:f6:14:bf:3c:8d:fe:47:2b:7b:88:ab:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
        Validity
            Not Before: Mar 25 20:01:11 2026 GMT
            Not After : Mar 26 20:01:11 2026 GMT
        Subject: CN=da226115a7570a972f720ff274dbdd0fe32e22bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:dc:a1:ec:0e:99:35:04:04:1d:36:09:bf:
                    a4:88:e8:13:f5:d2:2a:47:5e:a9:88:f1:74:33:60:
                    78:c7:fd:9d:cd:fb:5c:ee:ca:bc:da:74:fa:21:6c:
                    32:50:ba:47:32:7f:ba:e2:d2:e8:c6:7a:2f:b3:b6:
                    ac:fd:40:ce:b6:ad:da:30:f3:ff:47:40:c9:91:ec:
                    18:4a:87:c6:b0:8f:50:27:25:90:e6:19:a0:f9:0b:
                    30:17:c1:db:61:b4:60:b6:63:b7:ae:4a:44:c8:44:
                    c6:04:74:3d:ea:a2:19:92:81:24:6d:42:d8:2d:f9:
                    8b:d4:e6:1e:a4:61:a7:12:1d:92:06:31:19:a1:b5:
                    3b:33:2c:06:0d:a1:94:e3:4a:0b:b4:2f:b8:cd:83:
                    4b:94:e7:ce:25:70:44:2f:74:18:fe:63:74:0f:be:
                    78:30:10:c0:15:86:81:08:53:af:6a:66:4e:d4:19:
                    14:d3:fd:12:a2:38:0a:0b:24:40:0d:02:1e:72:91:
                    95:af:ce:e8:81:1c:a3:a0:8e:35:26:e5:cc:3d:5b:
                    c7:c4:20:6b:03:98:ad:5a:a7:5b:43:22:73:6f:26:
                    34:13:23:28:e0:82:78:c6:e7:50:3e:ed:de:9a:07:
                    fe:b9:a1:e2:cc:f0:2f:8a:17:d1:a6:5d:3c:25:6b:
                    ae:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:22:61:15:A7:57:0A:97:2F:72:0F:F2:74:DB:DD:0F:E3:2E:22:BF
            X509v3 Authority Key Identifier:
                keyid:FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:ab:2e:6d:40:75:ce:c7:2c:d9:39:19:60:72:b7:98:07:ef:
         98:c8:e6:d1:03:f0:63:b8:a1:f3:cd:a1:24:8d:03:05:25:58:
         da:25:9e:49:c2:e7:a1:12:96:42:c5:01:2c:9f:6c:43:8f:12:
         cc:f9:cf:e9:a3:4a:92:21:bc:b2:5d:46:1b:e3:d1:d8:05:20:
         a4:87:aa:4f:7a:19:95:60:c4:a4:c8:c9:ba:69:37:d4:70:36:
         a6:16:e8:c8:63:13:7b:22:79:26:86:7c:1f:a6:dd:5b:85:ec:
         f6:1e:fb:a4:c0:71:23:43:0e:06:1a:a9:96:69:71:c7:45:b2:
         49:96:ed:ec:6e:14:dd:cc:c4:03:fd:86:c2:7c:66:85:0c:71:
         44:ee:3b:51:70:b4:9c:83:2c:14:06:20:1e:d7:68:22:eb:43:
         4d:41:9b:68:e0:92:1e:ec:28:7b:fe:4c:c9:a6:73:e7:18:cc:
         f0:3c:3d:f8:49:a9:63:7d:0b:9c:d0:95:ff:3f:ac:ae:3e:f5:
         bd:0a:92:6e:17:46:9f:56:85:2d:16:d9:21:39:b4:e7:cf:9e:
         be:e9:5a:19:bf:8c:ec:19:3b:e5:19:42:c2:20:08:93:fc:ff:
         ce:e2:e0:3b:32:68:77:4f:7b:ff:13:8d:a6:28:0f:03:99:7f:
         00:6b:d9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:53 2026 by rpki-client