Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
File:                     j6mutCbCijSAh3b5Vok107nsngg.mft (raw, json)
Hash identifier:          CKBCcZOAYeJa/dIOQXXd/8+9rmjF17x1Kwt7yvW8FSs=
Subject key identifier:   DA:3C:92:2C:BB:6C:6D:37:E9:40:1E:96:95:50:BB:25:FC:5A:70:84
Authority key identifier: 8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08
Certificate issuer:       /CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
Certificate serial:       019D3187486125FED62BDD6FB184E6ECDB55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
Manifest number:          131B
Signing time:             Fri 27 Mar 2026 23:00:42 +0000
Manifest this update:     Fri 27 Mar 2026 23:00:42 +0000
Manifest next update:     Sat 28 Mar 2026 23:00:42 +0000
Files and hashes:         1: 9Jh_HKzAuSnv77A4D--WJcenWJk.roa (hash: 1jniHAv+TqLat97OntRtBXGUV1Fdi2TS9uabmrOi/mo=)
                          2: j6mutCbCijSAh3b5Vok107nsngg.crl (hash: EUUZ1+YwVIFEBQZxS6wIUF9JoIukArqLd2hoyrcoEJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:31:87:48:61:25:fe:d6:2b:dd:6f:b1:84:e6:ec:db:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
        Validity
            Not Before: Mar 27 23:00:42 2026 GMT
            Not After : Mar 28 23:00:42 2026 GMT
        Subject: CN=da3c922cbb6c6d37e9401e969550bb25fc5a7084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:98:17:3e:28:79:3f:ab:f7:4a:26:6f:f5:
                    ad:fc:f6:9d:8d:fc:95:12:14:cf:b0:96:c1:5b:ec:
                    3a:aa:18:b7:8d:57:e1:1a:fa:8d:48:ac:df:84:0c:
                    ff:dd:ae:90:aa:b0:aa:20:15:be:64:9d:37:a0:13:
                    7f:fe:ca:94:9d:8d:97:b3:3a:7a:95:45:4c:05:e0:
                    9d:8f:3a:fe:da:e3:52:8b:a2:54:3d:d6:15:1f:fb:
                    a9:ce:ac:91:49:fd:4c:65:4d:fa:5e:38:e1:e0:a5:
                    01:6a:53:a1:d0:0e:14:ad:3d:49:21:a7:70:2e:1e:
                    de:32:f4:d7:7c:18:64:c6:7b:f6:13:96:61:27:0e:
                    db:b4:0e:3f:91:87:b9:e0:b3:28:66:4c:f3:c2:cd:
                    05:b6:d0:aa:af:f9:fb:58:c8:6e:8b:3e:3a:64:41:
                    56:21:59:71:7e:36:8e:d4:fa:be:b1:31:10:c5:12:
                    9a:71:7b:47:0a:9b:ba:44:b5:fe:13:5c:30:fa:7c:
                    1b:58:ef:1a:ff:7c:0b:b8:a9:1e:4b:14:4c:f2:ea:
                    7b:9b:00:d3:d3:cd:7a:ea:90:66:09:9e:eb:c6:a4:
                    ac:db:9c:2e:50:14:25:bf:ed:6f:2d:9e:fa:40:eb:
                    2d:14:94:c5:ab:b9:ab:01:fd:95:37:35:45:eb:39:
                    cf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3C:92:2C:BB:6C:6D:37:E9:40:1E:96:95:50:BB:25:FC:5A:70:84
            X509v3 Authority Key Identifier:
                keyid:8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:8f:db:e5:26:13:2c:a7:a9:9f:c5:7d:c7:f5:08:d3:c2:48:
         8a:d7:ff:d3:cd:38:3a:ab:63:b1:27:f1:06:33:03:30:bc:3f:
         88:fe:22:01:54:6d:bc:af:da:60:69:26:d8:f5:5e:9f:b3:d2:
         2e:ed:cd:3c:1e:cc:45:e9:3d:5f:94:73:c0:3a:39:50:c8:0b:
         f1:c7:73:59:2f:46:94:a0:60:5f:ee:f0:e4:98:0d:12:b1:63:
         90:2d:13:a0:53:34:4f:fa:6e:27:03:87:8c:05:b3:be:7b:db:
         05:04:9d:24:7c:f3:40:28:a3:d7:f3:74:75:12:0b:94:33:4e:
         d6:82:3b:97:8b:e2:49:4c:8c:05:f0:7e:b2:02:0d:93:ce:13:
         85:1b:20:e7:04:42:38:3a:b8:93:1c:a5:68:46:d6:be:8a:c8:
         66:73:22:51:32:0c:b5:c4:50:5b:26:6f:c3:ef:b9:a9:70:ee:
         77:97:d8:ed:42:a1:27:db:d7:5a:e3:d3:d9:b9:b3:18:bc:75:
         2d:f8:a4:da:08:93:f7:c4:b4:ea:e2:90:33:6b:07:e6:b4:d7:
         05:bf:c0:e2:f3:98:b2:2e:2b:22:c4:19:ec:9b:52:c0:f8:c9:
         ce:1b:d1:75:87:24:76:82:65:12:c6:a2:9f:f7:33:53:40:c2:
         d3:8d:6a:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0xh0hhJf7WK91vsYTm7NtVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYTlhZWI0MjZjMjhhMzQ4MDg3NzZmOTU2ODkzNWQzYjll
YzllMDgwHhcNMjYwMzI3MjMwMDQyWhcNMjYwMzI4MjMwMDQyWjAzMTEwLwYDVQQD
EyhkYTNjOTIyY2JiNmM2ZDM3ZTk0MDFlOTY5NTUwYmIyNWZjNWE3MDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFGYFz4oeT+r90omb/Wt/PadjfyV
EhTPsJbBW+w6qhi3jVfhGvqNSKzfhAz/3a6QqrCqIBW+ZJ03oBN//sqUnY2Xszp6
lUVMBeCdjzr+2uNSi6JUPdYVH/upzqyRSf1MZU36Xjjh4KUBalOh0A4UrT1JIadw
Lh7eMvTXfBhkxnv2E5ZhJw7btA4/kYe54LMoZkzzws0FttCqr/n7WMhuiz46ZEFW
IVlxfjaO1Pq+sTEQxRKacXtHCpu6RLX+E1ww+nwbWO8a/3wLuKkeSxRM8up7mwDT
08166pBmCZ7rxqSs25wuUBQlv+1vLZ76QOstFJTFq7mrAf2VNzVF6znPQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNo8kiy7bG036UAelpVQuyX8WnCEMB8GA1UdIwQY
MBaAFI+prrQmwoo0gId2+VaJNdO57J4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajZtdXRDYkNpalNBaDNiNVZvazEwN25zbmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83Nzc5MmItZTIwZS00YmY3LWIxMjYt
MzU5Zjc5MzYxZTk5LzEvajZtdXRDYkNpalNBaDNiNVZvazEwN25zbmdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83Nzc5MmItZTIwZS00YmY3LWIxMjYtMzU5Zjc5MzYxZTk5
LzEvajZtdXRDYkNpalNBaDNiNVZvazEwN25zbmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbo/b5SYT
LKepn8V9x/UI08JIitf/0804OqtjsSfxBjMDMLw/iP4iAVRtvK/aYGkm2PVen7PS
Lu3NPB7MRek9X5RzwDo5UMgL8cdzWS9GlKBgX+7w5JgNErFjkC0ToFM0T/puJwOH
jAWzvnvbBQSdJHzzQCij1/N0dRILlDNO1oI7l4viSUyMBfB+sgINk84ThRsg5wRC
ODq4kxylaEbWvorIZnMiUTIMtcRQWyZvw++5qXDud5fY7UKhJ9vXWuPT2bmzGLx1
Lfik2giT98S06uKQM2sH5rTXBb/A4vOYsi4rIsQZ7JtSwPjJzhvRdYckdoJlEsai
n/czU0DC041qxw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:54 2026 by rpki-client