Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File:                     J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier:          4RwG8Oq9Q8CTHd1HzTVDSde/6bp+tHDwIhmloRrtySA=
Subject key identifier:   6E:C8:10:B9:6D:E3:80:CA:5D:8C:57:A6:2F:83:EF:8D:11:9C:B8:F3
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer:       /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial:       019D2AA95C64D3EAD74344BF490BB51FA188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number:          1162
Signing time:             Thu 26 Mar 2026 15:00:35 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:35 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:35 +0000
Files and hashes:         1: 0oxdyMukMZaAGBeo9l9rFsh78pk.roa (hash: DX6ZwX+iC1cN81KUv6aS7NPJaf7Awa86RPypXOmFS5E=)
                          2: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: wNrZrlGq/logGhf366kKQJpDHqKv7U3XIA3uDkHcVtY=)
                          3: dyVWHuwmCwNemfhA3NEDaxJ2sdw.roa (hash: Q8NYEk98UWxN0ux4Y6DtAD9386w6kojLNf1xUJ5/UcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:5c:64:d3:ea:d7:43:44:bf:49:0b:b5:1f:a1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
        Validity
            Not Before: Mar 26 15:00:35 2026 GMT
            Not After : Mar 27 15:00:35 2026 GMT
        Subject: CN=6ec810b96de380ca5d8c57a62f83ef8d119cb8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:39:60:34:95:66:1a:b7:a7:76:59:0b:7d:8a:
                    d4:8b:24:e4:3f:cf:a5:45:23:54:a2:cd:bf:c6:b1:
                    bf:63:8a:c1:0e:16:ac:40:a0:e4:40:0b:01:1e:99:
                    d1:cb:76:0c:fb:03:73:3d:e4:9f:10:6b:b9:fb:75:
                    6a:0c:fb:ee:07:75:c9:b8:26:0d:ab:11:3d:6b:ee:
                    c3:b9:75:a6:32:d5:65:8b:1b:b6:68:9c:b7:3e:22:
                    43:37:f4:14:83:16:9d:30:fd:0e:9b:87:5b:45:ce:
                    2c:3b:e6:d5:50:25:76:11:31:3b:51:41:e8:98:ca:
                    01:be:4e:62:25:4d:8d:f8:f5:f2:94:1b:7f:2e:01:
                    d7:4f:0a:98:9a:ac:c4:de:37:0d:4a:09:d9:ce:80:
                    5d:df:b9:bc:d3:97:c3:d0:4c:17:68:1f:ba:b2:ff:
                    95:95:58:c3:cf:cb:e5:6d:37:67:f9:57:f6:f0:f4:
                    14:5e:d0:92:95:cb:a9:5b:43:af:07:b0:f7:0e:1b:
                    a2:79:6e:db:1c:a0:92:25:b8:6c:82:5e:01:27:ad:
                    3b:42:df:92:d9:e3:cd:50:88:93:ae:d5:f8:25:68:
                    6d:99:75:b6:11:b0:6d:84:ae:e1:09:c7:5b:f1:38:
                    9a:d3:3b:aa:64:5c:57:ed:b6:42:b5:9e:42:bf:6c:
                    ae:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C8:10:B9:6D:E3:80:CA:5D:8C:57:A6:2F:83:EF:8D:11:9C:B8:F3
            X509v3 Authority Key Identifier:
                keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:55:af:82:db:de:db:e3:60:7e:7e:76:db:a8:fc:b6:0c:76:
         eb:85:bc:82:e6:f5:42:14:37:48:ab:57:f5:77:da:7d:de:cd:
         91:d5:90:ca:23:14:ee:2a:b8:10:1e:9a:61:dd:2c:68:9f:60:
         e6:16:d4:eb:3c:97:df:9f:c2:2e:29:26:fa:c6:9e:0d:ff:e5:
         a6:38:0a:ab:64:a7:10:29:46:02:3e:01:97:77:45:fb:a0:1f:
         47:8f:12:ff:87:e8:fa:b9:9c:0d:86:9a:07:2f:93:d9:eb:a1:
         aa:f6:d2:1d:c9:6a:51:8a:a8:66:5e:d1:a2:16:86:09:d3:64:
         2d:ae:f7:a8:da:6e:c6:6b:1d:09:c8:73:5d:42:cf:f2:e9:54:
         7f:6c:3e:5a:44:e3:87:9d:e8:50:3c:9d:d9:65:51:85:c1:a4:
         15:87:7c:3c:0d:fc:7f:d0:18:8f:e2:a4:af:df:40:60:e3:1d:
         4c:fd:90:02:52:16:3c:94:91:76:1a:27:1d:26:33:39:2f:2c:
         75:1f:24:75:26:f0:2a:55:8c:94:01:94:65:d4:4a:77:36:5e:
         4e:88:a6:9f:8a:aa:65:75:4a:6f:b8:f7:82:59:5b:4a:c8:8d:
         9c:eb:e2:c2:6b:24:81:06:27:06:69:ef:44:16:5e:6e:6f:10:
         65:16:a0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:50:34 2026 by rpki-client