Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
File:                     jAmWt03P0bu4ZvLrrU4W_cyStjs.mft (raw, json)
Hash identifier:          EF5/rAZB5xPmsVym7LWjTULcjGS2AYvOtuAAFiwPuDg=
Subject key identifier:   B2:30:57:BD:4A:85:FE:C6:0E:2C:1D:1F:F6:CD:37:10:DC:C1:0C:EE
Authority key identifier: 8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
Certificate issuer:       /CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Certificate serial:       019D29978D05A9653F670E3E714D577D1AB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
Manifest number:          096F
Signing time:             Thu 26 Mar 2026 10:01:30 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:30 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:30 +0000
Files and hashes:         1: jAmWt03P0bu4ZvLrrU4W_cyStjs.crl (hash: n/S7OcZaJCwyco21gByTv9qX3twlgGwVlRPiodUKhCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:8d:05:a9:65:3f:67:0e:3e:71:4d:57:7d:1a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
        Validity
            Not Before: Mar 26 10:01:30 2026 GMT
            Not After : Mar 27 10:01:30 2026 GMT
        Subject: CN=b23057bd4a85fec60e2c1d1ff6cd3710dcc10cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e3:74:af:a0:84:ac:7b:7d:ab:61:cf:b8:d0:
                    9c:e4:44:81:d0:a2:ec:54:1d:04:28:46:86:e1:1d:
                    12:fa:ec:a1:42:75:36:b3:e1:8b:e0:d5:a4:7a:77:
                    7b:78:e0:f2:69:63:4b:71:61:a2:52:fe:53:fb:dc:
                    78:74:c7:81:d6:6d:af:e2:d7:2e:0f:7e:3b:a8:bf:
                    9c:ce:3b:b0:42:fc:77:e7:38:13:ac:14:78:f4:fd:
                    a0:83:69:ad:18:e2:20:ec:b6:c6:26:fc:74:b5:09:
                    2f:03:83:49:2a:16:ed:1a:44:9d:e7:83:74:28:0b:
                    a3:8f:2d:6f:59:71:a5:85:fb:1c:64:fd:61:70:47:
                    a5:4a:ff:5b:93:30:82:25:f2:b6:e2:ed:03:b6:eb:
                    0d:70:57:67:8b:8d:b0:ea:93:b2:1a:cf:72:be:e4:
                    1d:a0:57:e3:92:bc:23:0f:c0:95:84:a3:10:43:16:
                    d2:45:23:c1:ad:e9:76:bc:51:ea:d7:12:a8:ab:c4:
                    ab:b8:2f:0f:b1:a8:af:9d:6f:99:0e:8f:e8:e2:79:
                    81:5c:17:20:39:dc:19:8a:bb:e0:6e:2c:d4:a7:d6:
                    e8:6d:12:95:99:db:13:ca:50:de:eb:17:99:dc:00:
                    d7:c5:d5:01:6d:26:15:91:f8:85:62:0a:86:e8:1f:
                    33:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:30:57:BD:4A:85:FE:C6:0E:2C:1D:1F:F6:CD:37:10:DC:C1:0C:EE
            X509v3 Authority Key Identifier:
                keyid:8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:fb:00:03:f0:dc:86:75:50:40:9f:db:ba:fa:10:b9:76:39:
         64:5a:2d:b5:ca:ba:b4:93:53:70:f4:e4:99:8b:7f:c0:da:ad:
         b1:c7:b5:da:70:c5:9a:6c:88:ca:62:e7:4a:34:fe:cb:8a:51:
         6e:1e:44:6c:c8:05:64:4d:bc:1b:f2:50:ea:64:ce:f1:7b:a0:
         8f:69:da:15:bf:35:ee:44:8b:29:9e:76:29:3a:b5:dd:92:32:
         96:51:3d:e5:83:af:0a:63:5e:05:f4:0e:83:12:00:15:75:b9:
         c0:ff:4e:f8:d1:86:88:8c:18:1e:68:fc:89:9f:cc:f7:9d:5a:
         7c:c4:39:04:aa:e5:28:7c:cb:3f:d5:27:ad:6e:a4:37:47:30:
         23:a1:bc:43:a6:dc:cc:39:65:c9:11:5f:70:45:3b:a1:5b:99:
         da:5d:06:91:11:d8:20:ac:76:80:1c:73:1c:5e:73:89:51:16:
         cd:98:0b:4d:6f:8b:93:17:8c:47:37:38:54:c3:7f:78:2f:4b:
         d7:d7:39:2d:c2:e9:3e:a2:5d:f0:61:ee:30:7c:78:b1:11:ab:
         cd:23:de:89:75:ce:9e:64:bf:94:84:57:11:1f:fa:32:11:c1:
         aa:49:bd:41:1b:9c:ab:ec:11:ad:ba:eb:94:8e:07:eb:b6:33:
         96:17:46:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:18:37 2026 by rpki-client