Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.mft
File:                     pjsH69N0fmAPjCZNl5LeNE-Kp60.mft (raw, json)
Hash identifier:          FvaLNG4APzMxVp3zYjstdXH686vC6vIelOHfYbZjlmc=
Subject key identifier:   99:F0:23:B8:27:3A:6C:FD:A3:E6:87:1F:3A:21:A2:00:A7:E3:90:BF
Authority key identifier: A6:3B:07:EB:D3:74:7E:60:0F:8C:26:4D:97:92:DE:34:4F:8A:A7:AD
Certificate issuer:       /CN=a63b07ebd3747e600f8c264d9792de344f8aa7ad
Certificate serial:       019D6687D3AED09000E4DB3C44D8BC429723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.mft
Manifest number:          84
Signing time:             Tue 07 Apr 2026 06:01:10 +0000
Manifest this update:     Tue 07 Apr 2026 06:01:10 +0000
Manifest next update:     Wed 08 Apr 2026 06:01:10 +0000
Files and hashes:         1: 1-KW9dhrWw78GJs49J1yGVUSTg5o.roa (hash: vBAp/5vp+WoUxyxTLhu9j+1f9k0nwh1G4TQpd54SJ4E=)
                          2: DdwiTnVe_gHYJdCJIEPlLB30T9Y.roa (hash: 2WHjEkehzyIY1Nql2UGpjFGbX6oy4qVHNlnSkH/UcUk=)
                          3: Icyf-d0jWAqbVPgT3Gkt0wMpnFo.roa (hash: vaMTX6MtsNb86w0hbuVy7Fy/w/HNrgsjpE8nNXBtDyA=)
                          4: pjsH69N0fmAPjCZNl5LeNE-Kp60.crl (hash: 9uZczZdtyJKbR83FPEQbiG+luGj3z14TxvVx5yN7pLk=)
                          5: qD_Lfu0Qfim8QaOIYmvsrnukeJc.roa (hash: HwH6i2/tEXH1ubKY1rdPdOsEVv3NWdDVMoqbm6AqtO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Apr 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:66:87:d3:ae:d0:90:00:e4:db:3c:44:d8:bc:42:97:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63b07ebd3747e600f8c264d9792de344f8aa7ad
        Validity
            Not Before: Apr  7 06:01:10 2026 GMT
            Not After : Apr  8 06:01:10 2026 GMT
        Subject: CN=99f023b8273a6cfda3e6871f3a21a200a7e390bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8b:9d:61:7d:e6:83:ef:c4:ed:07:a0:f1:a0:
                    05:2a:25:81:72:8d:f5:ab:88:94:b0:b9:74:41:06:
                    f3:35:8b:1e:c2:97:9f:f9:fe:58:e7:67:1c:5a:e1:
                    98:70:ef:16:a7:05:cc:9c:ec:53:c4:43:b0:08:6c:
                    9e:d2:c6:a0:18:0c:cd:54:8b:47:4f:31:3d:2d:b8:
                    d4:77:32:dd:8d:f4:20:11:e3:fa:2f:77:bb:7c:1f:
                    4f:f3:c3:41:61:2b:12:8d:fc:b1:cd:27:99:3c:fb:
                    99:db:df:36:3a:67:a7:ec:dc:3b:6b:99:ff:d8:f3:
                    0e:d1:f1:01:5c:ca:a0:38:2b:26:f8:a4:df:c9:ee:
                    36:bb:ea:86:13:40:ee:77:d9:f1:c8:3d:b3:01:95:
                    8e:30:cd:cf:00:52:5d:87:53:87:b1:54:b2:6e:75:
                    fe:3b:b4:c5:cb:22:2b:ba:89:f6:11:92:7e:36:b0:
                    22:f5:3e:17:6e:36:6e:8d:f0:c6:3e:98:44:8a:4b:
                    52:00:c5:3e:4a:60:45:b7:e3:f6:f5:c2:f8:d1:5a:
                    68:77:d8:72:76:80:85:98:3b:0f:e2:f0:58:c9:c2:
                    67:e9:b9:24:71:49:c8:70:33:a7:1c:eb:af:24:1b:
                    a4:8d:6f:45:c6:c3:59:a9:19:55:ba:ef:b0:42:5e:
                    f5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F0:23:B8:27:3A:6C:FD:A3:E6:87:1F:3A:21:A2:00:A7:E3:90:BF
            X509v3 Authority Key Identifier:
                keyid:A6:3B:07:EB:D3:74:7E:60:0F:8C:26:4D:97:92:DE:34:4F:8A:A7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:7a:09:d9:35:54:5e:af:3a:e7:32:51:8b:30:65:b0:e9:0d:
         bc:55:ce:70:d7:27:e2:9c:05:37:3d:6b:77:dc:16:fc:02:6c:
         f2:b5:2e:68:d0:f2:88:a0:78:60:03:b5:03:55:56:f0:33:c2:
         66:97:4f:43:9a:f9:ef:58:2f:fe:42:cc:e7:57:c5:12:b9:26:
         98:4c:5a:27:cb:27:66:1a:5b:42:e8:b9:99:69:9b:4f:03:74:
         c8:cc:26:8a:80:f2:27:f2:b0:ea:88:b2:72:5b:10:b0:bd:d5:
         84:97:16:16:85:15:9c:0d:e2:d7:99:c9:4f:9a:53:e1:6d:9c:
         88:8e:e8:2f:84:e3:25:0a:97:72:17:30:50:6c:a5:f6:b5:9d:
         c8:77:77:e1:18:66:e6:5d:9a:c6:4a:c7:a0:72:76:9e:2e:de:
         5e:8e:73:4f:56:10:5e:f2:98:0c:d0:b8:71:c3:e1:d6:c7:76:
         e8:60:52:39:f0:c5:8b:59:90:0f:fa:a6:39:0f:a2:55:5e:71:
         3d:0c:a9:a6:2f:b5:17:0a:ed:79:59:c6:4d:f1:13:62:76:2c:
         73:0a:94:4c:67:ba:a4:24:e5:5e:c6:3c:67:6d:fd:d2:74:1b:
         87:af:5c:50:28:b1:f7:ce:94:b0:5a:f1:b5:51:2d:bb:42:d4:
         7a:a5:01:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:07:33 2026 by rpki-client