Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
File:                     J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft (raw, json)
Hash identifier:          28bMqqYklc7Ag0bozWVmRmcoh0v8dfAo6ydNBYmg0iY=
Subject key identifier:   63:62:F7:85:01:6A:73:67:0E:05:E6:A4:96:E5:62:0F:53:6A:74:EC
Authority key identifier: 27:83:79:03:50:87:0F:DB:5B:26:74:BC:61:C8:D8:FD:62:D7:71:9B
Certificate issuer:       /CN=2783790350870fdb5b2674bc61c8d8fd62d7719b
Certificate serial:       019D2A04B3F12E415A0D3C64AFC3F26E612B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
Manifest number:          08E4
Signing time:             Thu 26 Mar 2026 12:00:44 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:44 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:44 +0000
Files and hashes:         1: J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl (hash: HFxyyWQESdr2hAmXRmNSX15y6V96WtJKeqLc2mtgBl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:b3:f1:2e:41:5a:0d:3c:64:af:c3:f2:6e:61:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2783790350870fdb5b2674bc61c8d8fd62d7719b
        Validity
            Not Before: Mar 26 12:00:44 2026 GMT
            Not After : Mar 27 12:00:44 2026 GMT
        Subject: CN=6362f785016a73670e05e6a496e5620f536a74ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:74:e4:5e:51:09:d1:45:16:fa:4f:e8:70:9a:
                    02:cf:b2:99:86:69:7e:f8:a5:b9:2e:1a:4d:2f:09:
                    3c:2d:dc:6f:9d:d6:3f:c5:8c:3d:9e:62:30:43:d1:
                    dd:ca:92:7d:1d:db:7d:1d:c4:94:b0:dc:7b:84:58:
                    87:e2:47:5a:14:a7:a3:d8:b8:2f:d3:b3:24:f8:88:
                    c4:01:db:5b:32:c8:38:13:7e:5d:a2:64:7b:63:af:
                    48:20:2a:d9:8c:88:3d:5d:50:73:b4:2e:39:d5:60:
                    80:a8:a2:7e:d4:8c:aa:f1:f2:36:72:91:bf:b1:dd:
                    81:92:57:3c:70:a2:6d:cd:f1:fa:61:d7:75:f6:b1:
                    2d:ee:4a:0e:15:ca:ef:9c:87:58:42:6f:23:a8:b2:
                    aa:4e:a3:fc:52:8a:af:60:09:31:1e:06:fe:2b:2d:
                    c0:7f:5e:ff:dc:49:e0:98:d5:f6:70:b3:4f:82:51:
                    30:a7:90:72:63:71:e1:12:c2:c9:0b:91:f0:ab:32:
                    4b:4f:80:73:bf:cb:2a:b7:04:36:be:00:f4:1a:b0:
                    70:60:7a:75:2e:ca:66:25:f5:ba:44:a6:8c:8d:e6:
                    19:8b:52:88:97:7d:dc:8e:73:1c:84:73:dc:1e:2a:
                    e5:dd:37:07:67:76:ea:bc:d0:5a:58:db:40:24:b6:
                    8f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:62:F7:85:01:6A:73:67:0E:05:E6:A4:96:E5:62:0F:53:6A:74:EC
            X509v3 Authority Key Identifier:
                keyid:27:83:79:03:50:87:0F:DB:5B:26:74:BC:61:C8:D8:FD:62:D7:71:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:1b:5d:e3:e2:2c:dd:94:5e:25:22:2a:fe:c2:e5:73:9d:0e:
         a3:79:60:8c:41:1b:8a:94:f1:80:f6:fe:ce:93:d7:ef:61:13:
         4e:be:4d:33:9c:32:38:3e:fa:6d:2d:94:6f:1c:3e:a0:fe:ca:
         08:dc:ce:90:29:5f:a7:3b:8d:6f:e0:75:5d:73:bd:5c:8c:4a:
         26:50:65:f0:eb:69:f1:f3:89:d1:24:95:d1:dc:52:54:26:3d:
         53:3c:c5:d4:04:7d:51:d4:29:a1:15:b7:50:b5:38:0c:f3:06:
         2c:f4:12:84:b3:15:44:2f:67:15:9b:48:df:50:30:cb:78:64:
         bd:3c:92:bc:81:39:35:72:0b:91:3c:3f:7f:40:96:97:47:41:
         91:52:7f:a3:e0:6d:c0:06:0d:71:eb:44:aa:3b:f3:ee:fc:e5:
         c4:36:18:52:69:67:4f:d9:2c:6a:92:d7:da:3e:6d:d5:45:17:
         eb:cc:ed:a4:61:65:0d:70:34:cf:6e:40:f6:dd:a5:dc:f2:3c:
         b1:2a:5a:65:e2:57:da:72:34:34:0c:22:0b:6f:6d:71:7a:b9:
         ce:87:34:de:aa:54:a2:62:20:e6:13:bd:bd:1a:11:6f:77:76:
         7e:16:0a:16:cb:26:db:a1:70:30:4f:be:26:7f:29:53:93:f3:
         2a:d6:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:44:58 2026 by rpki-client