Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
File:                     sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft (raw, json)
Hash identifier:          NGAO7WRkkA8UC6hxINspLiOFTDw64xXr7udE76f4ri4=
Subject key identifier:   CA:4D:5F:62:DB:E3:9E:6D:1B:4A:80:62:21:A7:F7:76:90:9F:0B:C8
Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
Certificate issuer:       /CN=b092425ab7d66bab711fbaa22757377807834159
Certificate serial:       019D265EDD6568F4B57102D0E1F5902B0363
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
Manifest number:          13C7
Signing time:             Wed 25 Mar 2026 19:00:44 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:44 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:44 +0000
Files and hashes:         1: ob4RLJ_y_7wEvkHKUSSog54LQNw.roa (hash: Jads8EK5VWX+m/AfmuiROvWcFDNzh7waaTO1j/WWRvo=)
                          2: sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl (hash: gXCYsgI/95Sso+3tSeH1fWbw43XrP0Wm1vGyXGplf6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5e:dd:65:68:f4:b5:71:02:d0:e1:f5:90:2b:03:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b092425ab7d66bab711fbaa22757377807834159
        Validity
            Not Before: Mar 25 19:00:44 2026 GMT
            Not After : Mar 26 19:00:44 2026 GMT
        Subject: CN=ca4d5f62dbe39e6d1b4a806221a7f776909f0bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:64:89:fe:84:47:6c:a5:4e:7d:9f:c6:a9:ea:
                    23:66:96:4d:c6:1e:98:63:40:6a:ad:fe:31:87:b8:
                    7e:f5:88:3c:b8:e2:dc:35:b2:cc:24:70:84:c6:dd:
                    78:61:2c:d1:a2:13:a6:59:63:d5:a2:90:96:4b:aa:
                    4b:70:72:59:91:7b:40:21:47:d7:c3:03:50:48:c2:
                    ec:40:81:13:62:e9:d7:8b:64:b7:c0:f8:73:f2:06:
                    4d:b7:bf:29:6b:1a:68:60:b9:bf:7e:d9:c3:96:ac:
                    b1:aa:66:b1:4b:75:ef:08:ae:ca:98:4c:00:6c:b0:
                    58:83:61:3c:b7:5c:d5:7d:dc:34:f2:6b:dc:57:8c:
                    fb:21:1e:f9:05:a4:16:d1:9e:ce:ae:61:b2:91:57:
                    ab:8d:41:0b:cd:96:6d:a7:fa:e6:29:79:27:b5:2f:
                    4e:2a:01:d1:fe:bc:4d:a3:9d:8e:a4:52:ec:fa:61:
                    67:95:5d:bc:f1:b6:9b:0f:2e:c3:a7:4c:56:4c:65:
                    82:b2:85:af:53:65:60:48:90:96:e3:38:73:61:df:
                    98:21:eb:3d:b8:cc:cc:d2:77:e6:4c:c7:f0:25:25:
                    91:b9:31:e0:ca:cc:af:e6:6e:96:ff:c7:a8:bb:ce:
                    10:3d:94:2c:7d:8a:da:36:34:ea:d0:69:62:80:11:
                    22:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:4D:5F:62:DB:E3:9E:6D:1B:4A:80:62:21:A7:F7:76:90:9F:0B:C8
            X509v3 Authority Key Identifier:
                keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:0a:c2:26:a2:b6:3c:e0:21:b1:46:11:cb:17:b0:e5:b3:f1:
         95:90:df:a2:7e:95:0b:91:02:04:8d:61:c9:f1:14:af:e8:62:
         38:7b:fc:ec:f1:2e:a8:b8:d5:b7:09:81:54:72:b2:c1:d8:42:
         09:80:fe:8d:78:7e:c7:ca:69:df:d6:c3:23:ab:d2:a8:9b:86:
         7c:e8:fe:44:4c:40:aa:55:ea:1d:34:0b:58:a1:e6:59:54:04:
         6b:86:7b:9f:b7:56:64:b9:43:6a:bd:56:39:cb:64:de:58:bb:
         96:fe:a9:b6:c4:28:9d:f9:b9:f6:23:34:39:98:2a:aa:5c:d0:
         a3:01:d3:38:d9:00:13:7a:bd:9c:cc:e7:a3:d6:cf:1b:d7:fa:
         b7:cc:00:a3:c9:46:97:f8:75:5d:d6:41:00:c6:90:42:e3:be:
         3d:5b:46:9f:a7:ea:ce:5e:d3:85:61:25:10:18:c9:3f:34:2d:
         1c:23:55:b5:57:a1:06:ca:6e:1c:9f:a5:40:bb:46:81:82:63:
         88:f3:03:01:88:38:f6:44:e1:55:2d:d8:04:0f:29:02:05:b0:
         5b:55:14:e2:a3:b3:61:15:24:a6:1e:8e:51:52:c4:52:eb:1b:
         78:de:9c:f5:c5:ff:22:0a:80:89:f5:c8:e0:e0:00:fa:5f:53:
         09:e6:39:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:29:05 2026 by rpki-client