Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
File:                     JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft (raw, json)
Hash identifier:          IFxlEWs08xzNBMvTtX6ti8GxIueRKpwiCLVcvhGBQyQ=
Subject key identifier:   35:C2:4F:BF:17:A1:F2:70:FD:1B:A2:0C:CB:59:54:A6:E3:45:A2:01
Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
Certificate issuer:       /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Certificate serial:       019D26CD6F886E0DE01C86B644E3B2BA2886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 21:01:30 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:30 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:30 +0000
Files and hashes:         1: IgEQEQxKF4JA_Yvwjt39ZRq-8to.roa (hash: w7LlxRV0iiav+R1gAPk1T8fKDTaiJNPPpktAM0ZCdmY=)
                          2: JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl (hash: 0PwnHpJI2ePwESJoSVTNVOMn7Pagy2gySqVoZ7Obxfc=)
                          3: VpdxolhjeAAWOSWgaqR-V3JQwwo.roa (hash: Ruq0CFducLP8nqCWrlVaWaavOiOwsIA0PJ/oDQESMw8=)
                          4: gQf5G9Hw0jqLTco8BzanoYJkr0s.roa (hash: PQEokUiOnX9Qj/TyQO7GSAnGjYkROWa561oyoy92YWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:6f:88:6e:0d:e0:1c:86:b6:44:e3:b2:ba:28:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
        Validity
            Not Before: Mar 25 21:01:30 2026 GMT
            Not After : Mar 26 21:01:30 2026 GMT
        Subject: CN=35c24fbf17a1f270fd1ba20ccb5954a6e345a201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:b6:c3:da:d5:59:b0:07:72:11:9d:77:06:
                    3a:6c:99:30:82:9f:60:67:7a:0e:fe:0c:ac:96:24:
                    f4:48:6a:4b:38:1c:41:ab:13:3e:30:6e:e1:9e:da:
                    1d:a1:df:9a:a7:60:f0:40:fd:56:a0:23:8b:6d:f4:
                    f4:01:4b:75:2b:d0:02:98:f2:3e:24:f2:64:73:77:
                    b9:24:51:66:38:19:44:6d:25:a5:ec:07:06:47:15:
                    aa:ca:3e:4a:72:f2:3a:68:f8:93:0c:b9:24:0d:a3:
                    08:a2:89:f9:ea:fd:ff:61:e3:cd:aa:c2:89:a0:c4:
                    01:d1:16:5d:00:da:bb:05:b1:3b:79:cb:69:e7:bf:
                    00:1c:12:0f:e6:ad:4f:1c:e6:f8:78:26:da:ec:50:
                    ba:0a:5b:9c:8d:b6:55:5e:90:e9:f1:d6:ff:33:53:
                    7b:92:ca:91:a5:8e:b9:f2:62:e0:5a:bb:8b:c7:7d:
                    cd:b4:dd:90:4f:7b:92:f6:2f:66:c4:ce:a3:28:ef:
                    88:f2:70:bd:ce:33:8d:c9:01:26:0a:6f:0c:4d:ea:
                    64:56:5a:ff:ea:8b:e7:b7:17:3e:b7:31:7e:2b:2b:
                    f4:09:ce:81:4e:21:10:65:7a:c0:e3:1b:7f:43:9a:
                    b3:47:6d:ef:85:97:bd:9a:e8:96:e7:37:68:56:66:
                    62:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C2:4F:BF:17:A1:F2:70:FD:1B:A2:0C:CB:59:54:A6:E3:45:A2:01
            X509v3 Authority Key Identifier:
                keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c1:d1:4b:e8:1a:12:4f:00:78:67:0e:85:64:07:4a:b9:73:
         40:70:75:f1:13:13:cc:cb:39:47:75:8a:b4:f4:82:68:be:1c:
         93:ad:fc:b2:0a:1c:27:1b:99:50:2d:57:a6:32:18:41:4f:0b:
         16:e5:57:74:24:ed:44:1a:75:b1:76:2c:73:7e:92:89:75:b6:
         1f:32:fd:cc:b7:0f:88:3c:1c:16:9e:1f:31:dd:d5:b1:4a:94:
         cf:b2:e9:03:dc:a3:d9:fd:fe:5c:17:58:cd:e1:35:11:9a:25:
         7e:b4:7b:e8:5a:d6:a7:0e:fe:bf:b5:9d:37:7d:b8:b5:b7:52:
         76:79:ff:9b:de:d4:6d:5b:42:ef:c4:6e:6e:a1:a3:97:ec:f8:
         c7:49:e4:44:b1:4c:21:5d:c9:f6:0b:87:d5:2c:48:4d:f6:69:
         64:0a:4f:4a:13:36:f5:8d:f3:88:97:87:b7:b7:3d:40:3e:5e:
         2f:01:cb:99:47:ab:d0:80:62:94:05:ae:bb:b1:89:9e:02:fe:
         1e:70:80:c9:28:3e:6b:13:f9:93:76:36:0a:46:9a:6b:03:5e:
         4f:54:b6:8c:85:4c:f5:c0:da:93:94:d5:ab:e3:86:67:10:b8:
         5c:c5:74:05:44:43:19:bf:1f:83:65:93:76:65:f4:b0:ba:41:
         e8:f2:d3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:22 2026 by rpki-client