Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
File:                     2JW-5WBWMPcEix_7PwA7OdKeR6A.mft (raw, json)
Hash identifier:          KvrWbOs90Z67R7tdjtxLi71jzcquYc4cHPSLMGtJATo=
Subject key identifier:   76:BC:46:7C:6F:1C:AE:5D:0F:B8:07:68:8C:A3:28:2D:65:1C:A6:B7
Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
Certificate issuer:       /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Certificate serial:       019D322C3A183235606A09B530D844D907C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
Manifest number:          0810
Signing time:             Sat 28 Mar 2026 02:00:52 +0000
Manifest this update:     Sat 28 Mar 2026 02:00:52 +0000
Manifest next update:     Sun 29 Mar 2026 02:00:52 +0000
Files and hashes:         1: 2JW-5WBWMPcEix_7PwA7OdKeR6A.crl (hash: /L3voLyZKiWILF7Z/gR9igoC4l/F0Hb8CUUs5auQ8Fs=)
                          2: lQThS4mk1Leh8tKsh4-tfyHe4H0.roa (hash: H+cr/TGcF1ncxkT8Z3p54kLCJ/SNrYTbccJfu39qAvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:2c:3a:18:32:35:60:6a:09:b5:30:d8:44:d9:07:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
        Validity
            Not Before: Mar 28 02:00:52 2026 GMT
            Not After : Mar 29 02:00:52 2026 GMT
        Subject: CN=76bc467c6f1cae5d0fb807688ca3282d651ca6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f6:9c:95:00:9a:2d:13:0a:c8:c7:f3:63:d9:
                    97:7e:05:32:cb:9e:ad:62:8c:88:0a:13:ad:66:c6:
                    bc:5a:b7:f3:8d:4a:76:73:ef:33:6c:67:4c:ac:16:
                    bd:dc:55:0b:04:14:2e:e9:c2:25:16:69:f2:66:61:
                    21:eb:58:d8:06:4d:3b:9b:fb:86:df:80:d0:b2:f9:
                    6d:37:b7:4e:2b:69:89:96:97:1b:57:d6:17:57:ce:
                    95:8f:bd:82:95:20:4e:aa:bd:17:6f:e6:d6:96:86:
                    5f:d6:06:69:08:5c:d6:65:56:79:a8:c0:74:9a:4d:
                    c1:7c:96:0b:5e:b8:71:d8:03:b9:86:95:04:8b:58:
                    8f:7e:9e:78:bb:ec:d5:17:40:c1:82:66:7c:7f:f8:
                    74:89:52:2f:37:1d:88:1c:bb:28:47:e0:76:af:9b:
                    c3:04:49:98:7a:ff:44:ab:76:7f:60:51:57:70:9a:
                    7a:91:1f:cd:24:81:f8:49:79:d4:6f:f3:38:f4:3c:
                    c8:ea:63:a0:07:45:6f:31:b9:68:fd:71:3b:71:fb:
                    04:78:f6:c1:97:f8:fe:7b:2f:c6:12:8c:f5:55:b7:
                    b9:22:a0:7e:63:c6:64:57:69:7e:42:a5:79:2a:b9:
                    50:45:c6:1b:d8:48:ce:d5:ae:6c:90:52:d7:d2:16:
                    4a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BC:46:7C:6F:1C:AE:5D:0F:B8:07:68:8C:A3:28:2D:65:1C:A6:B7
            X509v3 Authority Key Identifier:
                keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c6:16:be:45:26:62:13:29:08:2d:44:d5:61:06:d5:05:3c:
         e2:27:06:70:cc:e5:98:69:27:5e:6f:46:31:a8:3d:59:e2:32:
         bd:28:ca:30:4c:2f:37:54:52:f7:9b:1f:23:b7:87:60:49:db:
         45:45:11:6f:c5:b3:1d:8a:99:57:ba:44:8c:1a:0b:a8:24:0c:
         78:74:da:42:a4:f2:65:29:b9:8a:17:d5:29:bd:6e:fe:8d:7d:
         7a:26:ec:b7:5f:2e:a7:71:e9:4d:ba:21:79:ba:99:9d:f6:c8:
         e4:95:4f:1f:8a:4b:71:8e:89:eb:53:c6:d8:58:2d:ac:26:26:
         fd:2e:7b:36:56:11:bf:eb:03:6f:7f:ac:6b:95:9f:a5:05:f5:
         c8:4b:ff:e1:ef:b1:f7:22:20:21:41:0d:2e:47:b6:84:ac:93:
         a9:1d:ca:ec:65:71:29:bd:2a:57:bd:a8:6c:31:4a:26:a3:c2:
         86:b4:a4:60:34:e2:14:05:31:eb:9b:b5:79:6f:40:57:36:4f:
         30:5d:00:ab:f8:84:88:9e:84:16:b8:9f:c5:e5:91:07:b0:22:
         96:55:fb:f7:e6:36:fd:37:cc:7f:5b:ba:fc:93:7b:9c:d0:84:
         c0:17:2b:76:06:23:60:15:b0:fe:6c:69:29:89:b5:b8:01:41:
         27:f1:61:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:40 2026 by rpki-client