Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
File:                     jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json)
Hash identifier:          jQdKaOVxyFPddCH1w7beCIjveFLqTv20EQ0dNKSIyvw=
Subject key identifier:   EE:A1:B0:6D:3D:5F:68:BC:E3:53:62:6B:54:37:E2:01:78:BD:89:0C
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Certificate issuer:       /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial:       019D29CEC13593A7C19F385C02346147BCB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
Manifest number:          0972
Signing time:             Thu 26 Mar 2026 11:01:48 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:48 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:48 +0000
Files and hashes:         1: 6ckN970H7cpuN5SlW3wkVE1-uM4.roa (hash: 4RC2uU6qxyV9bc9Cvszgx0ISOMF1kgJvTGxyXOpdXhI=)
                          2: LdSpOpsyc-7BV3CaoUeOBlbAHE4.roa (hash: sCGRtI2KCA+jQQtUTNpqZX8j5KBH3bE/D1f4nUTBd00=)
                          3: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: mN2hxrtcZh7m2cQAJd7xaTd++A6FASEYkbWNNIAMVrE=)
                          4: yQpjhvw8i6e9KzrpvjEnSpkHzwc.roa (hash: tuojuZc92088axUvGHKz4onECSlWfJI0kA5M4lGnMdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:c1:35:93:a7:c1:9f:38:5c:02:34:61:47:bc:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
        Validity
            Not Before: Mar 26 11:01:48 2026 GMT
            Not After : Mar 27 11:01:48 2026 GMT
        Subject: CN=eea1b06d3d5f68bce353626b5437e20178bd890c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:92:65:51:13:53:8e:10:95:ed:9b:4f:dc:3e:
                    a9:a0:f0:c1:59:c8:0b:61:bb:25:3d:4d:57:9c:52:
                    4b:50:7b:f8:59:81:93:7d:b1:07:22:06:74:ff:e5:
                    6a:33:5d:22:61:28:e1:c8:98:dd:e4:dd:f3:9b:c0:
                    2a:5c:32:de:b0:0e:b2:7c:92:38:3f:4a:b2:e8:be:
                    ca:6a:38:23:cb:e5:9f:d8:40:ca:de:5b:29:69:09:
                    35:98:57:93:3e:b8:f8:84:40:58:cf:f7:d4:de:de:
                    5c:37:cb:61:89:17:5e:3f:b5:51:bd:c9:11:4c:5b:
                    25:fd:9a:70:b7:27:fc:36:7e:a2:47:8d:2a:7b:b5:
                    21:27:f8:63:dc:89:bd:db:3b:22:f9:15:01:dc:86:
                    26:8b:ea:0a:b1:fc:4c:87:2c:85:6b:b7:32:86:86:
                    0a:d2:3b:16:04:d7:b8:59:9b:0f:17:6c:22:f7:1c:
                    c0:60:2d:f5:7c:2f:9c:92:d9:40:d8:9c:08:b3:7c:
                    8f:f4:5d:1c:17:1e:39:36:c1:bb:34:2c:82:21:b4:
                    ed:d1:e9:17:a5:1c:77:13:ef:fc:13:57:14:8c:e5:
                    9b:21:56:17:41:ab:09:f1:19:d8:b7:48:3e:d9:65:
                    d2:4b:8c:94:95:e6:85:4a:c4:7d:46:42:66:5b:39:
                    d9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A1:B0:6D:3D:5F:68:BC:E3:53:62:6B:54:37:E2:01:78:BD:89:0C
            X509v3 Authority Key Identifier:
                keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:2d:51:11:90:9e:3f:d7:e2:e2:81:8c:38:75:c8:a9:32:e1:
         37:2c:6b:a3:dc:8d:ca:e5:f4:34:2f:57:07:4b:8a:c1:c1:cd:
         fc:10:c0:ff:9a:1c:4d:76:37:d6:43:3c:3c:f0:17:d2:48:56:
         c5:12:8e:00:25:25:2a:63:a5:01:7e:bb:5d:29:82:86:ab:af:
         25:f4:ad:f1:55:b5:16:5b:3a:4e:f3:d5:e0:2f:06:a1:17:4a:
         84:66:8b:4a:fb:f1:e3:e5:ad:1e:7a:b9:b9:09:6f:1c:a1:79:
         9b:88:19:43:07:85:e7:ac:aa:03:47:3b:ae:c3:e3:0e:61:74:
         ae:66:32:61:fe:42:2f:40:f9:65:37:c9:0f:be:65:e4:52:ac:
         62:7a:fe:58:06:f3:1d:3a:8c:ec:f8:3d:b7:28:1d:1d:ec:96:
         ac:f6:46:b2:fd:b1:f6:f8:cf:e5:01:99:23:9d:f6:21:a6:fb:
         c7:80:32:f5:94:0e:e3:03:1f:67:cc:55:d1:5e:4c:1f:3c:9a:
         be:c1:88:17:1f:78:fa:7f:06:21:b0:6a:de:c8:db:32:87:2a:
         62:8b:cf:b6:d2:c0:b4:51:0b:54:d1:0c:bb:9e:91:54:22:76:
         cd:01:a2:f3:6e:5a:93:b4:c2:e9:e4:c1:e3:14:31:41:a0:fa:
         30:e8:e4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:52:19 2026 by rpki-client