Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
File:                     jSmNY5cKsDzfv1FPoOjtITEJhfE.mft (raw, json)
Hash identifier:          SWUPD3qmlnt/N0UfVXMyE9bsVmLJsCq4nZf3nLq+D8Y=
Subject key identifier:   E8:19:A3:24:9C:B2:DB:B1:5C:70:85:8E:D4:2F:3D:D8:E3:C1:D6:82
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Certificate issuer:       /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial:       019D27A885D03A9FCD3D021F5F592E5EB30A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
Manifest number:          02E7
Signing time:             Thu 26 Mar 2026 01:00:48 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:48 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:48 +0000
Files and hashes:         1: Av7Tod1G7bVf0RLE6AF_1uspRQ4.roa (hash: PKJbe7R30nXLIKZVxr4PxR3DgHe3p9fuHQbiz5PGfP0=)
                          2: MZF_p3jMKGfUhISu7itbGm8fVPc.roa (hash: 1+Bei67+jd9KSPOgvA1EOkdwYvs4YCuptX/4MdFdYpM=)
                          3: Yf20QMXkj8GFJGSLeIPw0rNOpPU.roa (hash: aWACKntsxHH3Va6cTR9cG1/KJpBjS153dDHspJ2qJ94=)
                          4: eeoFWs0EeMzDNXzBgME3-Q7Zi40.roa (hash: Ym0Iu/9+fRHj5itQ0uhzHv3jsEKnG3SriEsKFuazFW4=)
                          5: jSmNY5cKsDzfv1FPoOjtITEJhfE.crl (hash: XdNHB3LmHljskBYTrqvjmRyXzflTc/2J9umZPst7NXM=)
                          6: jwB4zN15Dz0mBSEVC3TVgEW9Zpo.roa (hash: 5Pt3Ize/q+a+7aO+hYglfsfYUPua8ySbTiwN+zIbslM=)
                          7: ty6QDaVODiYQLRspH3UycajMk0A.roa (hash: FtWFx0VsvTm7b4c9sjAieCXjIjfYkBipIpfvr2217ZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:85:d0:3a:9f:cd:3d:02:1f:5f:59:2e:5e:b3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
        Validity
            Not Before: Mar 26 01:00:48 2026 GMT
            Not After : Mar 27 01:00:48 2026 GMT
        Subject: CN=e819a3249cb2dbb15c70858ed42f3dd8e3c1d682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:74:b0:fd:e6:a2:f9:2c:f5:2e:48:72:9d:86:
                    c6:8b:1f:26:23:ef:a9:8c:af:f1:6f:e4:81:2d:a0:
                    8e:a7:68:b1:8e:de:1d:e3:e1:e2:2c:de:0c:33:66:
                    8f:2f:f5:eb:35:c7:a6:2e:6c:c9:6c:b9:32:ae:c0:
                    d2:b3:e7:00:1b:52:4b:4c:a6:80:b2:fc:94:c8:22:
                    46:68:73:fa:87:a4:19:c8:c7:97:b4:60:d7:a2:12:
                    0b:ae:30:43:ac:3e:83:1f:1f:61:7c:97:53:fa:ca:
                    dd:59:1e:87:c2:f6:dc:d1:c3:dd:4f:32:f4:d7:7c:
                    ea:87:37:3c:a4:d3:ae:1b:53:9e:bb:52:8f:ef:68:
                    0d:82:2f:cc:f3:56:74:6f:f8:6c:d0:c4:e9:c6:8f:
                    7c:eb:ae:70:26:38:aa:7e:67:6c:71:70:44:2a:7b:
                    03:e2:81:42:91:d5:d7:19:23:45:4e:c0:66:16:5f:
                    64:36:28:0e:30:ad:84:49:ab:83:e8:95:2f:4b:e2:
                    11:b3:0b:7e:f6:98:8c:1e:89:b9:cf:6b:3d:ab:0f:
                    24:02:37:f4:ff:69:9c:7d:0d:cb:8a:c4:33:f4:16:
                    a7:14:fa:3a:36:7d:5c:18:8a:0c:99:9e:16:04:8e:
                    84:e9:1b:ca:02:ce:a7:10:76:88:93:1c:21:46:ee:
                    dd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:19:A3:24:9C:B2:DB:B1:5C:70:85:8E:D4:2F:3D:D8:E3:C1:D6:82
            X509v3 Authority Key Identifier:
                keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c2:5d:00:47:19:65:57:fa:a7:84:69:6b:de:48:8e:0a:41:
         4e:cf:f0:e7:47:6e:d3:a3:15:03:43:51:2c:40:9e:f6:2d:14:
         3e:dc:d2:0d:66:fc:13:2c:e2:82:06:4b:b8:e0:14:dd:06:6f:
         5e:56:2c:06:4d:dc:db:bf:74:38:4c:2f:c5:9d:d6:1a:93:07:
         c7:cb:66:d6:1e:af:2e:4c:bd:a9:c5:e1:bf:fc:bb:44:54:a5:
         d0:e6:c8:48:b5:91:91:0c:00:f4:57:fe:cb:01:42:be:78:9b:
         e1:ee:be:36:07:00:36:59:ea:c3:78:fd:a1:3d:70:9a:7f:0a:
         e5:8b:53:b2:93:9a:11:d1:bb:27:25:28:76:de:45:bc:c0:d7:
         38:b9:db:ea:67:d5:35:ee:4d:0c:50:c9:e2:46:92:ad:0f:e8:
         be:13:fc:fc:51:92:7c:7e:5e:25:54:19:54:dc:cf:1e:26:f9:
         26:e3:80:ef:5f:7f:ae:da:8a:b0:4e:b5:74:3e:a3:38:bb:95:
         e6:e8:9f:69:c4:da:aa:c8:14:a5:d6:76:87:7a:c4:ac:a5:48:
         cc:21:c9:f5:a3:db:75:ff:e2:c3:3b:d4:af:19:b3:f2:8c:c3:
         b7:d5:d6:11:57:27:0e:9a:6f:c3:3f:14:49:01:96:14:aa:40:
         0a:68:12:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:13:25 2026 by rpki-client