Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
File:                     jYkvTe2SJX5nunTxdiyLyRTr1hw.mft (raw, json)
Hash identifier:          V8rB68uyrEoXWoNb9LZw3KwFOZlBpURdthXK8T5WDT0=
Subject key identifier:   1D:F7:63:7C:55:5C:C1:34:A9:26:83:B0:FC:B7:79:35:2C:C4:59:CD
Authority key identifier: 8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
Certificate issuer:       /CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Certificate serial:       019D26CCE76EF6928407BDF6362B6955B778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
Manifest number:          188B
Signing time:             Wed 25 Mar 2026 21:00:55 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:55 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:55 +0000
Files and hashes:         1: 75-KqODx3w8CvM9m5Nq3kRsXyMo.roa (hash: A6bAUCVGwzASuTY5FNYElUtdHA4J3zfHfU7IL2XZWu0=)
                          2: jYkvTe2SJX5nunTxdiyLyRTr1hw.crl (hash: oLaeUNAlXE7h6CVvjzZ3aO2nGs9DMmSwJTXTvfkAWaI=)
                          3: kN8sJaIrd98steTWsu3vc7sEjKI.roa (hash: MkLW8K9XVhuTwi22jPlIAzX7VARe0fbKX4ZjMGnmNrI=)
                          4: tTnZl8uF6ADN5gv_dFCnGczPy10.roa (hash: yFxKga5LtYoglKO/yUWDlJacjL9nZm+MXR5rVDyXPDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:e7:6e:f6:92:84:07:bd:f6:36:2b:69:55:b7:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
        Validity
            Not Before: Mar 25 21:00:55 2026 GMT
            Not After : Mar 26 21:00:55 2026 GMT
        Subject: CN=1df7637c555cc134a92683b0fcb779352cc459cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2d:1b:56:fe:5c:4d:ba:3d:d8:6a:3e:3c:4f:
                    a3:35:f9:14:0e:fc:43:29:6e:89:3b:38:20:bd:be:
                    e0:d2:21:45:4c:b5:ad:2f:c6:70:be:27:2c:8a:10:
                    53:b1:ea:7b:0e:df:5f:8a:03:88:be:05:f4:3b:5d:
                    fc:6c:53:d4:41:54:fa:12:c7:9b:a9:a9:ed:53:fe:
                    17:40:fd:a8:da:ff:ba:8c:6d:1e:d7:cf:9f:db:2f:
                    30:60:2b:49:a3:a0:7c:6a:49:ef:0d:f5:35:f8:02:
                    13:6c:c3:d5:ba:73:b2:f1:1e:83:6e:78:10:82:f9:
                    50:9b:19:cf:2f:d4:8c:1f:ba:3c:40:bb:61:39:1d:
                    35:73:f1:a9:7f:4f:29:7c:27:a7:fc:73:40:37:19:
                    09:82:cf:a7:31:41:d6:b3:46:93:7f:af:38:78:b1:
                    fc:62:93:c4:89:e5:2a:44:1c:3c:4d:b2:80:5a:79:
                    e6:af:c7:70:2e:29:5f:dd:63:c1:86:2b:4c:1b:95:
                    a4:5f:13:a7:12:28:4c:57:ae:44:ff:d8:66:4b:32:
                    f8:3e:6e:fe:d1:58:34:6d:89:7e:ca:16:4c:bc:b9:
                    35:5d:e2:77:ed:8b:a7:5b:86:88:24:3d:79:6f:9b:
                    fb:fd:5f:0d:e3:c6:c2:d7:48:70:93:83:4f:2d:09:
                    7a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F7:63:7C:55:5C:C1:34:A9:26:83:B0:FC:B7:79:35:2C:C4:59:CD
            X509v3 Authority Key Identifier:
                keyid:8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d3:f1:57:0e:9c:fb:68:32:04:20:7a:42:6a:4c:f9:63:f9:
         3f:34:8c:1f:ac:fa:79:3c:a8:db:d6:dc:3c:a0:f6:2b:6a:ee:
         e2:96:e7:11:55:98:10:34:33:ae:45:06:b5:75:86:af:2b:b7:
         d8:71:ae:b8:93:a1:1e:e9:c4:a5:aa:c7:66:ba:ad:af:7f:55:
         ec:88:1d:af:94:35:89:32:b4:1e:63:1c:a8:e8:f7:17:01:b1:
         9c:ed:71:4d:cf:e4:9f:50:0e:b3:f3:5e:49:05:7b:97:54:e4:
         6f:09:9e:a3:1c:05:44:f5:be:ca:16:7f:ce:a6:d8:4d:6e:ed:
         21:49:93:9e:65:c7:1d:6b:11:aa:19:4d:06:96:b6:cb:ee:92:
         30:44:83:f5:37:bd:68:62:cb:5c:a9:ac:64:b5:f0:b2:cd:4c:
         c8:bd:99:6f:c1:10:7a:2c:da:83:09:77:8e:e5:48:a0:88:4d:
         23:3a:08:6c:08:e8:ab:96:73:c0:e7:5a:c2:4d:3f:4d:10:de:
         e3:f1:61:72:d6:54:c5:23:89:63:37:cb:38:9b:33:54:f6:1f:
         12:dc:14:b1:4c:98:f8:36:6a:c7:07:e8:ab:c3:58:ce:fd:c8:
         b5:dc:d7:81:81:2e:99:11:05:94:37:e8:0b:1c:2a:39:82:f9:
         95:04:01:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:49 2026 by rpki-client