Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
File:                     JiditzviJrFxmZQSYlrMcnAkQ0M.mft (raw, json)
Hash identifier:          kQem6yzzIi44fP30+RIggiiGOY5EArb+erCUWLKnLUE=
Subject key identifier:   AD:5A:0E:E7:67:D5:0B:D3:3A:69:B6:9C:29:E9:A5:B6:EF:46:91:1B
Authority key identifier: 26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43
Certificate issuer:       /CN=262762b73be226b171999412625acc7270244343
Certificate serial:       019D27E034BE6946C7FE7536F62524742345
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
Manifest number:          04D5
Signing time:             Thu 26 Mar 2026 02:01:38 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:38 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:38 +0000
Files and hashes:         1: JiditzviJrFxmZQSYlrMcnAkQ0M.crl (hash: Agw4WNUYkxlYV5uQBMt2Mpy2rF15YupcPBZ3S0/Wz7Y=)
                          2: m7kVx-sKSPUtRod6BBQcaAsqdtY.roa (hash: ySihte+ihW35NP6Gcv6i5fBq39Uu/G8KkgjvNw72U1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:34:be:69:46:c7:fe:75:36:f6:25:24:74:23:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262762b73be226b171999412625acc7270244343
        Validity
            Not Before: Mar 26 02:01:38 2026 GMT
            Not After : Mar 27 02:01:38 2026 GMT
        Subject: CN=ad5a0ee767d50bd33a69b69c29e9a5b6ef46911b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e1:14:e3:a8:7e:f1:0b:30:38:cb:dc:fa:6c:
                    fd:0b:8a:20:bb:51:95:86:66:66:1b:f3:3a:ae:52:
                    79:23:73:b5:4c:31:56:4b:77:aa:8e:c6:a3:53:42:
                    b2:8f:7c:33:fc:b5:10:83:35:a4:66:8b:70:13:a5:
                    04:5e:48:50:80:42:17:87:64:5a:0b:b7:85:56:7b:
                    4a:02:e1:1a:be:ab:75:98:c3:aa:42:5d:60:13:2d:
                    2b:5e:11:3f:89:03:61:b9:00:16:c1:4f:63:5a:8d:
                    74:28:d6:d5:63:19:bd:ce:da:7d:1c:e4:a3:23:1d:
                    69:44:72:71:5d:bf:27:0c:45:46:0f:f7:fd:2d:7b:
                    95:f1:87:1f:e6:d4:70:85:58:18:50:97:e2:1e:ca:
                    fe:0b:1a:be:b3:6c:c9:37:0c:18:96:dd:17:3e:8b:
                    99:7e:98:2a:1e:d3:26:93:09:fb:89:73:a8:62:12:
                    bf:05:7f:b0:df:b7:41:11:87:6c:1a:b8:77:aa:74:
                    1e:fe:e3:c7:f2:e9:4f:aa:7f:18:69:2f:27:b1:30:
                    79:da:54:e6:2d:31:ce:0f:a3:6f:ab:88:64:d5:2e:
                    46:47:12:11:fa:47:b9:08:aa:d4:85:27:c8:fc:48:
                    6a:6b:ff:f0:dc:78:c7:20:6b:ac:2b:17:6b:1d:3f:
                    50:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5A:0E:E7:67:D5:0B:D3:3A:69:B6:9C:29:E9:A5:B6:EF:46:91:1B
            X509v3 Authority Key Identifier:
                keyid:26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:84:f5:98:35:7e:05:46:3d:14:4d:c7:b4:ba:71:a2:1c:dc:
         72:91:fb:70:f4:91:1e:fe:43:26:5f:51:c9:37:df:39:ce:0b:
         5f:46:c7:af:36:3b:b7:c8:7b:cc:1f:fe:75:ac:87:30:d2:4a:
         24:4c:32:be:c2:c4:6e:60:5e:78:be:9c:d2:31:49:07:eb:8f:
         c6:6a:0a:47:04:46:34:c7:f5:69:29:97:97:79:a7:6d:d5:95:
         98:66:ce:aa:9f:11:ba:ec:af:7c:1b:bf:48:73:02:ed:f2:91:
         56:d5:2b:9a:8f:10:7a:1f:0a:7e:25:e9:36:ee:6b:fb:45:b5:
         de:89:a0:9d:d6:e1:36:86:ac:e7:04:24:d5:80:ef:d9:98:cf:
         95:f9:98:e4:49:22:2d:26:2d:58:a5:81:b5:6d:0d:40:f5:93:
         c4:4b:8f:1e:d2:d0:0e:c4:d2:4f:80:f8:7e:c9:38:1a:12:89:
         f3:16:37:87:6e:61:36:9d:c0:9f:28:71:8f:1b:07:2a:fd:d2:
         50:0c:da:a4:b4:d5:9c:c2:46:47:7b:e3:ce:2b:94:99:3f:77:
         f7:09:6b:70:9c:40:5a:96:da:d7:a9:e5:57:42:0f:54:cf:4e:
         9b:17:33:a0:da:1e:0c:71:37:40:ec:2b:89:27:bd:fe:9b:77:
         b5:22:83:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:02:02 2026 by rpki-client