Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File:                     JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier:          j3AzBDlv1jXET8X8xHqVX74M35nDJCb6xvZU05Z/qJg=
Subject key identifier:   4C:9C:02:DF:6E:9F:24:7F:0D:49:D1:09:5E:E9:9A:59:18:EC:84:E3
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer:       /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial:       019D28F2F35F27B954DFEFFA35FA72892F99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number:          1818
Signing time:             Thu 26 Mar 2026 07:01:43 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:43 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:43 +0000
Files and hashes:         1: F542RKRQvPrXJffMgDoWUXOCGjM.roa (hash: i0Pd1YsF/0CZkMewWg+RkQERNB+Z6enGZOfMb6J8Sd0=)
                          2: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: SGBqyzLqh8uuNTzS2ZYqcXd8kyv0z4TA5C/pHm1epHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:f3:5f:27:b9:54:df:ef:fa:35:fa:72:89:2f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
        Validity
            Not Before: Mar 26 07:01:43 2026 GMT
            Not After : Mar 27 07:01:43 2026 GMT
        Subject: CN=4c9c02df6e9f247f0d49d1095ee99a5918ec84e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f8:05:70:14:ab:db:7d:90:1e:15:28:ee:a9:
                    b4:b3:d1:60:b3:fb:5a:1a:3c:ca:5c:c7:a6:9f:42:
                    7a:bf:9d:70:e8:33:38:97:c8:9f:eb:1b:0d:8c:c4:
                    18:24:c3:b7:42:35:b3:26:75:09:26:cb:0f:0d:b9:
                    cb:ad:de:ec:e9:9c:b1:25:26:b7:1a:46:b8:88:2f:
                    07:d0:f1:c8:73:01:5d:df:91:2b:21:8c:95:e0:6c:
                    ed:b8:f7:10:9e:41:9d:73:5e:df:2f:ce:2f:d4:3d:
                    fb:5e:46:96:03:e4:82:16:6e:f4:e5:89:34:22:d5:
                    05:a8:84:07:ff:06:fe:a5:2b:3b:aa:b3:1b:87:b8:
                    d2:84:57:a5:d0:ef:9b:06:97:d5:4e:66:41:59:ed:
                    18:6e:a9:ba:c6:b1:1d:53:19:81:d2:c8:d5:f8:27:
                    33:c4:8a:0a:2f:9a:23:57:7f:30:bc:a7:84:96:eb:
                    96:3e:f6:08:91:e8:5e:b4:5c:d4:66:18:43:5c:7b:
                    ba:a0:c5:b3:1a:40:db:bc:66:a8:4a:ce:44:90:44:
                    47:28:15:87:ae:a7:5a:44:ec:a6:99:f6:79:c0:a0:
                    f6:89:38:63:25:fc:44:6c:40:e0:52:53:2f:6d:d8:
                    e1:00:0a:d5:88:e0:0c:11:eb:3b:20:cb:1e:0d:c1:
                    eb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9C:02:DF:6E:9F:24:7F:0D:49:D1:09:5E:E9:9A:59:18:EC:84:E3
            X509v3 Authority Key Identifier:
                keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:79:2d:3c:af:81:75:f5:a7:f5:90:bf:e9:4f:b4:d2:df:33:
         3e:fd:78:e0:d9:96:d5:3c:26:3f:d5:0f:77:47:6b:c1:ae:d9:
         4c:6b:1d:4b:b7:53:43:6d:be:f8:68:30:71:09:f9:26:d9:4e:
         d0:4e:46:fb:9b:b4:ed:2e:23:d8:b4:f3:8f:8b:2a:c1:6b:a6:
         6d:7f:5a:3c:81:9f:fe:a3:d2:2c:52:0f:dd:39:81:0b:79:92:
         90:35:f5:4c:35:31:7c:24:75:73:3e:d8:83:b0:7a:35:dd:9d:
         2b:bd:7b:6d:7a:62:9f:05:33:41:6a:c3:45:9c:e2:05:34:b7:
         20:84:1c:55:cb:da:47:57:f2:0e:17:d6:de:26:47:4a:4f:f9:
         d0:1f:8c:ba:93:61:dd:72:c5:6c:5f:80:b8:5e:5e:72:c6:01:
         f7:a8:35:0c:de:10:ad:ab:43:e6:38:54:a1:34:db:80:78:01:
         78:da:f4:74:d9:95:f8:65:e6:5e:28:d4:26:d3:06:18:68:a2:
         ba:20:f3:66:69:2a:f8:51:3c:d0:ee:28:7f:b1:cd:c8:f3:5c:
         f5:06:24:ac:3c:bc:04:7e:6e:6a:ec:a3:0c:a6:f8:1d:0d:16:
         9a:8b:c0:40:ae:e0:80:0d:54:52:5b:36:a2:16:45:b0:2f:38:
         69:59:78:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:01 2026 by rpki-client