Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
File:                     JMltOG189ZqZDTmU8N-Ek9_KSbM.mft (raw, json)
Hash identifier:          M3COzlXkolWFB/le0efgtQkivEnyi+NXDwxUiqYef34=
Subject key identifier:   89:F8:FB:0F:E9:E0:2F:CF:33:25:36:82:06:8C:2A:02:76:28:17:97
Authority key identifier: 24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
Certificate issuer:       /CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Certificate serial:       019E1D59C96DEF1F0E41B2D117548ACD1722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
Manifest number:          0380
Signing time:             Tue 12 May 2026 18:01:23 +0000
Manifest this update:     Tue 12 May 2026 18:01:23 +0000
Manifest next update:     Wed 13 May 2026 18:01:23 +0000
Files and hashes:         1: 4C9QDlBnnXSHpJEM9ANlWAaSyEs.roa (hash: v92PqB+zER9mvZgRziC74aTu4c1aP8hKbPOOfRE55tQ=)
                          2: JMltOG189ZqZDTmU8N-Ek9_KSbM.crl (hash: 4bCcxM1yfAalGoqa5op+yPPi0+pMImapbB7UtaumRiI=)
                          3: MkwV_p4ZiOf8Ia5ZHOPhoW4eKIU.roa (hash: JMKNPRf6e5NpGat9TNpevi/2X+CTiPo4/6Chd3GgN+E=)
                          4: oJUrlPiGpThaOu9GEMzKstl67oY.roa (hash: ZAsmCmye4OXdSzraVVSyaiBbg3Yr1OAE/9LISAwEOHg=)
                          5: s6R6PJpd-Myk3vNL1YiMPF0NHiY.roa (hash: 82ptaySXeh8vuN3858KZJT3/tNdBNq1pDFzQMH65GpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:c9:6d:ef:1f:0e:41:b2:d1:17:54:8a:cd:17:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
        Validity
            Not Before: May 12 18:01:23 2026 GMT
            Not After : May 13 18:01:23 2026 GMT
        Subject: CN=89f8fb0fe9e02fcf33253682068c2a0276281797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:74:ea:0c:90:f3:a9:6a:ae:4e:1b:9f:cb:
                    1a:af:a4:84:3b:4c:d3:e6:09:ed:c8:95:1b:73:f1:
                    ac:31:e4:a4:10:b9:60:14:40:5d:45:6a:f3:83:27:
                    e1:d3:89:73:10:e6:14:81:f6:fa:83:d7:7b:7f:a9:
                    20:cf:4c:7e:d4:6f:83:34:3c:64:b6:09:8c:39:e8:
                    c7:a8:ba:0b:55:37:cc:95:42:be:1e:29:3b:41:ee:
                    79:b8:52:2f:22:0b:cf:41:ae:48:08:42:1f:df:fd:
                    1a:89:3b:55:da:a6:6d:ae:b5:7e:b4:a5:7b:8a:af:
                    1e:77:4d:16:ff:9d:ec:76:3e:3d:8a:05:38:96:21:
                    82:92:04:13:9d:e4:68:9f:a2:8f:ba:ce:b6:30:bb:
                    7e:4c:6e:00:14:67:71:77:e6:1d:c6:73:80:de:23:
                    f9:bc:50:94:fc:81:5e:6f:ed:60:cf:76:2c:cf:10:
                    ea:16:92:09:7e:ea:a4:33:1e:74:08:60:9f:df:10:
                    b9:e6:40:e5:da:c9:fe:1b:f9:5a:f9:c7:f6:f5:6c:
                    c5:c8:01:89:9a:f9:57:5d:b8:31:9c:8b:d5:22:5b:
                    ba:a5:6c:6f:59:0d:af:51:00:e7:28:35:b4:c6:da:
                    ce:15:50:f2:6c:8a:97:33:d3:f2:8f:19:84:b7:10:
                    a6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F8:FB:0F:E9:E0:2F:CF:33:25:36:82:06:8C:2A:02:76:28:17:97
            X509v3 Authority Key Identifier:
                keyid:24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ad:9d:4d:48:68:a3:47:a4:27:77:9e:a7:cb:ca:10:bd:ac:
         0b:24:04:a3:7d:3a:59:06:51:7f:88:f3:d3:dc:d2:57:0e:d0:
         85:71:b4:5c:96:fc:27:a7:6a:c2:13:78:71:ff:d5:a6:9e:9f:
         d0:df:c6:ff:1c:62:66:0c:9a:a3:aa:a8:c0:c8:a1:1b:8d:db:
         e8:55:79:a3:f3:6c:ed:32:8b:f5:08:c9:b4:cd:6f:30:7a:91:
         b8:85:bf:17:de:5c:76:48:f1:22:10:79:56:fd:64:75:f4:1b:
         26:df:7a:c9:04:3b:36:a5:02:21:42:9f:14:61:b0:b1:52:14:
         79:40:7b:8b:c0:70:03:89:89:f1:71:d1:1c:da:b6:44:3d:a1:
         96:cf:e2:bb:69:42:0c:27:46:a8:c0:ea:13:63:e7:f7:0f:e0:
         5c:79:7c:ae:bf:98:fc:b3:93:ca:32:da:f9:6c:ed:d4:20:aa:
         f7:64:c9:d3:b7:ee:fb:a7:6d:ed:17:d3:f9:0c:e8:2c:b0:2f:
         8a:23:5c:2d:d9:da:c3:0c:63:23:b0:3b:52:6f:4f:25:f3:89:
         db:4d:f4:df:b8:ef:0e:67:68:1b:c0:5d:62:33:d9:1d:a6:62:
         ae:e8:0a:1f:12:e0:b8:f4:d5:b4:46:ca:e8:7f:c5:43:0e:a1:
         78:8a:51:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:20 2026 by rpki-client