Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
File:                     yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json)
Hash identifier:          MlbscSixaPnk1FwCRPHouD7ZSVsduFRtjvz2ORJEo0Q=
Subject key identifier:   46:C6:AF:EC:73:65:84:D1:95:C1:4E:8E:8E:F7:1F:E0:9B:3B:D8:A6
Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
Certificate issuer:       /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Certificate serial:       019D27E0549D507C79F9A5749354AD2ABA4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
Manifest number:          04F4
Signing time:             Thu 26 Mar 2026 02:01:46 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:46 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:46 +0000
Files and hashes:         1: amLES0luVq3iLHPQKyufyNQwgaI.roa (hash: UsdGqDJsnylUEzlDTC7n05/NMnzeFnVJjS3/bK29FXs=)
                          2: jIwaLjqt-xdZuLLeeQ6b9JM9ktU.roa (hash: NBpvqEDHRttth2lk+QrdtGdQaHXJVWBfDcwb8ITbXwo=)
                          3: u_iWvzN4ZsIj-85aLk82H6-rRe4.roa (hash: LwmASP5C8j7zpf+fcC+xGqEebuer0tW8AmUmigdVvI8=)
                          4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: 6V+V5sFI9Typo+2U1ML0OPFvdh/0ALqe5AMEnwAxxlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:54:9d:50:7c:79:f9:a5:74:93:54:ad:2a:ba:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
        Validity
            Not Before: Mar 26 02:01:46 2026 GMT
            Not After : Mar 27 02:01:46 2026 GMT
        Subject: CN=46c6afec736584d195c14e8e8ef71fe09b3bd8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b5:2b:de:29:36:8f:1a:71:bf:e7:aa:63:80:
                    77:7f:0e:e3:63:31:e7:49:8b:f0:33:0b:6e:11:d2:
                    a9:c6:f9:91:7a:2f:b2:f0:ea:a0:43:f7:d9:ae:79:
                    38:dc:e8:84:f0:31:11:f8:26:a5:a0:89:c0:fa:12:
                    18:0f:fc:30:4d:07:5b:6d:48:0d:bd:47:fa:9d:7e:
                    f4:66:3a:f3:65:35:84:7e:dd:42:f1:c7:88:21:2c:
                    d3:5f:0d:75:d3:a2:fa:67:43:dd:41:41:9b:d2:e5:
                    3d:df:c7:8d:d7:8e:31:4d:13:f5:f3:9b:9d:ee:df:
                    cd:e7:ac:ee:00:99:c6:e8:90:74:92:3f:88:fa:d5:
                    e3:29:03:bb:2f:56:95:a4:5d:2d:28:9d:41:2d:e7:
                    9d:87:cb:8c:c5:38:7b:9f:59:4c:41:c0:c0:e8:f6:
                    05:db:55:42:61:38:3b:9e:aa:95:92:43:96:04:e9:
                    35:8e:fb:52:de:80:07:ab:84:87:30:b7:98:66:82:
                    c0:d0:42:dc:f0:50:67:15:e2:57:ae:78:00:33:8c:
                    a4:ec:e1:46:fc:71:bb:58:e0:ef:86:48:e0:bf:1d:
                    87:b1:50:42:b4:9c:7e:44:0e:75:d5:f8:47:d6:ef:
                    91:1b:c0:25:35:04:b9:8e:20:3d:ce:32:9e:23:72:
                    10:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C6:AF:EC:73:65:84:D1:95:C1:4E:8E:8E:F7:1F:E0:9B:3B:D8:A6
            X509v3 Authority Key Identifier:
                keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:c4:81:6a:57:f8:27:cc:45:d4:35:76:c8:e4:69:2e:55:b0:
         74:9d:55:1d:26:f2:a4:37:5e:4b:59:90:87:41:26:b1:c2:42:
         cf:d3:88:a2:aa:09:f0:95:c4:08:a4:33:ac:0c:03:c7:55:38:
         47:0b:4a:4f:be:85:24:ec:a0:1e:61:b1:20:0f:90:e3:4b:c3:
         b5:16:5b:8c:d0:55:3e:7c:af:e0:87:dd:2c:9b:83:3e:7c:3d:
         8c:02:2b:8a:ba:c8:fc:c9:51:cf:e0:e8:1c:0a:64:11:83:bb:
         54:90:be:6b:e8:cc:cb:e6:4f:3d:43:75:05:55:93:0b:c8:6a:
         16:37:3c:49:3b:f3:f2:a8:73:a1:ec:b3:81:df:28:51:b9:8d:
         8e:9a:d6:2b:e6:8d:7f:e9:3a:b4:e8:f6:c2:78:69:a0:3d:3f:
         f3:a4:b0:ad:d6:93:d5:93:09:74:b8:ff:74:db:bd:64:d2:03:
         2a:91:f9:a3:14:18:bc:54:62:dd:21:8d:12:0b:97:c0:86:73:
         51:cc:da:ae:b0:c2:8e:c0:5a:7c:cc:22:12:a8:2f:49:05:86:
         57:d4:af:35:72:26:25:d8:2f:45:ee:5f:f8:6a:ab:87:09:ca:
         13:3a:18:d2:1f:3c:7c:f9:f3:51:de:2d:6b:a4:6b:f7:de:30:
         9c:3e:ab:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:46:35 2026 by rpki-client