Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
File:                     k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft (raw, json)
Hash identifier:          7ijzyohHNzmASNAo/NrXLAeQlvpYX4q6q25QEIJR2bA=
Subject key identifier:   0D:CE:00:C7:98:44:B3:C6:F0:9A:A4:37:7F:1E:B6:98:D2:8B:3A:58
Authority key identifier: 93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
Certificate issuer:       /CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Certificate serial:       019D2627DC2C49B4428C11E02C1894AFDBC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
Manifest number:          16D5
Signing time:             Wed 25 Mar 2026 18:00:39 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:39 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:39 +0000
Files and hashes:         1: k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl (hash: KTlpITdjwcBa98TD6aCv/ux9e4a5bIteqr9X4j6Jdy0=)
                          2: xrChCZKPpUH_V3yyUorXAC7-wuI.roa (hash: mu02wWY4fhbPfdL9W27X+rqqcQR4ghwCDLbVsERFcxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:27:dc:2c:49:b4:42:8c:11:e0:2c:18:94:af:db:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
        Validity
            Not Before: Mar 25 18:00:39 2026 GMT
            Not After : Mar 26 18:00:39 2026 GMT
        Subject: CN=0dce00c79844b3c6f09aa4377f1eb698d28b3a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:0a:4c:dd:32:66:ff:93:70:70:14:be:9d:
                    f0:21:3a:69:28:a0:60:a7:00:d2:04:12:3a:89:d3:
                    cc:62:17:08:e5:d8:9a:9f:aa:b3:00:7b:78:31:22:
                    9b:2b:5d:e9:07:c8:74:26:d0:44:e5:82:81:ea:50:
                    dd:cf:85:3c:a6:16:27:72:c1:41:24:c6:16:ad:86:
                    ed:6b:dc:69:d6:e5:57:da:89:70:f0:e8:82:bf:e4:
                    39:0d:06:f7:3d:63:ed:e4:5b:3d:9b:f7:8b:e1:e1:
                    3d:ec:44:47:e0:ae:01:fa:3d:ba:35:d4:f7:ae:cb:
                    72:0b:2d:26:c7:8f:78:7c:3d:6e:13:a7:1f:85:8b:
                    14:03:13:d6:67:8c:0a:71:9d:af:0e:55:ab:9d:b8:
                    04:bb:d2:1e:cc:83:a7:30:68:f2:c0:99:98:a8:4c:
                    9d:d8:ac:98:78:8f:0a:af:18:69:8f:36:fb:f9:93:
                    d2:97:42:38:5a:57:27:46:44:1d:59:1b:aa:98:ec:
                    c6:38:b1:d6:1c:1d:e9:0a:a2:91:89:8c:40:28:81:
                    d0:25:3e:87:99:18:e4:97:ac:75:5f:d4:66:83:d3:
                    28:56:4c:94:f5:46:72:3b:2f:62:ab:83:a1:ba:3c:
                    39:7d:98:c4:f1:62:cc:2c:0a:97:98:bd:04:41:de:
                    bf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CE:00:C7:98:44:B3:C6:F0:9A:A4:37:7F:1E:B6:98:D2:8B:3A:58
            X509v3 Authority Key Identifier:
                keyid:93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d9:86:f8:92:b3:34:de:4b:75:37:bb:cb:f3:5c:5e:43:19:
         ed:0f:79:5c:6b:d0:1d:8d:34:57:89:62:f6:0f:97:d3:38:10:
         c6:6c:ee:91:94:fb:5e:87:a7:45:85:d6:ac:ca:33:89:14:fd:
         cd:c8:90:7e:59:68:62:78:7d:71:2e:a7:db:86:47:09:7e:09:
         12:7b:ea:89:80:fb:fe:1b:0f:f2:e1:04:12:67:8c:ce:cb:bd:
         6f:5e:09:b7:05:2d:c3:f1:37:10:f2:97:4b:0a:d6:4a:01:64:
         a5:a7:10:64:69:32:be:10:5b:6d:b5:e7:d5:73:43:d6:5b:91:
         14:d1:f7:5f:c6:8a:02:1c:b7:c3:48:1c:ed:20:4e:a6:54:d9:
         4f:97:c8:91:c8:ad:ec:d8:d6:98:cd:6e:f8:22:f2:eb:d9:d7:
         7a:ec:ab:8e:6a:92:35:65:4e:cf:88:54:87:2d:93:dd:18:64:
         1b:17:18:b9:42:36:b4:fc:a1:22:c3:af:1d:4f:61:2b:ec:50:
         d2:33:c7:b2:29:46:43:48:b0:ab:1e:09:25:aa:0d:fc:5e:9c:
         ca:24:fd:e6:46:46:23:f3:17:c9:36:a1:fe:0a:11:17:f8:95:
         a1:81:ae:b0:63:b8:b0:8d:7a:e3:94:13:8e:34:3c:df:81:1d:
         23:77:bb:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mJ9wsSbRCjBHgLBiUr9vDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZjI1YjcyNzU4ZGE1OGYwZjNlYzBmMDcyNzM1M2ViZDJi
NDQ3NzQwHhcNMjYwMzI1MTgwMDM5WhcNMjYwMzI2MTgwMDM5WjAzMTEwLwYDVQQD
EygwZGNlMDBjNzk4NDRiM2M2ZjA5YWE0Mzc3ZjFlYjY5OGQyOGIzYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApooKTN0yZv+TcHAUvp3wITppKKBg
pwDSBBI6idPMYhcI5dian6qzAHt4MSKbK13pB8h0JtBE5YKB6lDdz4U8phYncsFB
JMYWrYbta9xp1uVX2olw8OiCv+Q5DQb3PWPt5Fs9m/eL4eE97ERH4K4B+j26NdT3
rstyCy0mx494fD1uE6cfhYsUAxPWZ4wKcZ2vDlWrnbgEu9IezIOnMGjywJmYqEyd
2KyYeI8Krxhpjzb7+ZPSl0I4WlcnRkQdWRuqmOzGOLHWHB3pCqKRiYxAKIHQJT6H
mRjkl6x1X9Rmg9MoVkyU9UZyOy9iq4Ohujw5fZjE8WLMLAqXmL0EQd6/fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3OAMeYRLPG8JqkN38etpjSizpYMB8GA1UdIwQY
MBaAFJPyW3J1jaWPDz7A8HJzU+vStEd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva19KYmNuV05wWThQUHNEd2NuTlQ2OUswUjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80ZTY2YTItYTM3Mi00OGI0LTkwYjQt
ODJhMzExMmY0OWM3LzEva19KYmNuV05wWThQUHNEd2NuTlQ2OUswUjNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80ZTY2YTItYTM3Mi00OGI0LTkwYjQtODJhMzExMmY0OWM3
LzEva19KYmNuV05wWThQUHNEd2NuTlQ2OUswUjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9mG+JKz
NN5LdTe7y/NcXkMZ7Q95XGvQHY00V4li9g+X0zgQxmzukZT7XoenRYXWrMoziRT9
zciQflloYnh9cS6n24ZHCX4JEnvqiYD7/hsP8uEEEmeMzsu9b14JtwUtw/E3EPKX
SwrWSgFkpacQZGkyvhBbbbXn1XND1luRFNH3X8aKAhy3w0gc7SBOplTZT5fIkcit
7NjWmM1u+CLy69nXeuyrjmqSNWVOz4hUhy2T3RhkGxcYuUI2tPyhIsOvHU9hK+xQ
0jPHsilGQ0iwqx4JJaoN/F6cyiT95kZGI/MXyTah/goRF/iVoYGusGO4sI1645QT
jjQ834EdI3e7Hg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:36 2026 by rpki-client