Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
File:                     J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft (raw, json)
Hash identifier:          jJjiLxOPpFPBKTPYMU89MeDXjKmLUniPEWxn2Ou7/GA=
Subject key identifier:   53:F6:72:67:32:39:4B:B0:4D:C0:95:96:70:C6:5A:89:B1:91:0D:E9
Authority key identifier: 27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67
Certificate issuer:       /CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
Certificate serial:       019D3977D25FD81AFFC35928C5EBE2DBC006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
Manifest number:          0746
Signing time:             Sun 29 Mar 2026 12:00:47 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:47 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:47 +0000
Files and hashes:         1: J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl (hash: lBJa9NrXofgV731f9QXkAGsgsxUQdjKlO00pUXuEGGc=)
                          2: TXmMg_cVGGk-yivLwEZ_LHOJtUg.roa (hash: KzTtxObtY7uoA3X0JGw/wlnL+/oSWFkTWIaUDbFQNwU=)
                          3: xGoEQ-XLcYuijW75iCI-8tjQ4xo.roa (hash: ofd7JGKtpdCEdXZRbmpugNgp3/OQr42VxnyOfLFTUsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:d2:5f:d8:1a:ff:c3:59:28:c5:eb:e2:db:c0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
        Validity
            Not Before: Mar 29 12:00:47 2026 GMT
            Not After : Mar 30 12:00:47 2026 GMT
        Subject: CN=53f6726732394bb04dc0959670c65a89b1910de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:24:24:c5:55:a6:e0:f8:ae:71:50:75:5e:
                    6c:f8:4d:bc:da:42:89:2f:be:43:91:84:9d:a0:77:
                    44:86:e2:ba:f2:c7:3e:48:d6:15:7f:c7:8e:e2:ba:
                    63:42:ca:98:05:da:cb:eb:7c:9e:06:6f:8f:b8:0d:
                    9d:0a:7d:86:d9:b6:cf:08:ed:7a:6b:9d:84:8d:66:
                    48:8c:7c:69:d1:f4:4f:b5:63:24:0d:29:ec:8e:9b:
                    36:f1:a3:13:fe:71:24:98:e2:76:d7:cb:c9:19:5b:
                    e7:09:b3:c6:df:a8:8a:9f:48:fe:af:ed:dc:a3:db:
                    3d:2c:c4:b7:47:71:30:b6:04:cb:4b:5b:3a:96:d6:
                    2a:be:13:b6:c4:27:2f:36:fa:a9:76:97:63:09:f2:
                    fd:d1:67:62:02:12:9c:e5:48:ff:22:15:8f:6b:37:
                    72:59:81:32:65:17:47:32:b9:42:63:e4:16:2d:12:
                    9c:d8:c1:3a:59:46:61:23:05:d4:1a:35:d0:b4:cb:
                    ea:03:50:2b:48:3b:f1:ad:85:cc:a3:a8:63:21:6d:
                    17:e1:a6:f1:b8:17:52:35:00:d3:33:de:f8:bd:63:
                    3b:3a:4f:42:11:09:13:53:5a:48:33:06:8c:e9:07:
                    bb:74:6a:13:c7:a3:31:fb:ab:b6:59:52:c9:8c:b1:
                    1b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F6:72:67:32:39:4B:B0:4D:C0:95:96:70:C6:5A:89:B1:91:0D:E9
            X509v3 Authority Key Identifier:
                keyid:27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:5d:92:ea:e3:a2:f4:64:95:f5:c9:01:79:6d:ee:20:35:7c:
         61:df:fb:a4:50:e5:e0:a0:0f:5a:3d:87:66:6a:1f:b9:5b:7c:
         25:59:4a:67:e0:2c:d4:14:cd:f4:e6:ac:ae:ca:ed:f7:43:fe:
         be:19:a8:80:7f:47:29:c3:c9:ff:4a:d0:40:17:da:70:02:8a:
         33:57:82:72:c8:47:db:c9:59:ee:32:9a:6c:e2:a9:cc:1b:b5:
         ab:15:31:8d:85:19:6d:a9:84:50:66:72:06:5f:00:a6:92:da:
         2f:00:44:ed:d7:46:7d:4c:8a:6d:89:f1:64:fd:47:44:07:9d:
         87:4c:c6:49:0b:1a:bd:53:8a:06:27:c0:64:63:fa:59:c5:2a:
         6d:51:4c:4f:5f:20:94:b5:d6:fc:c2:04:7d:15:9c:18:ce:7d:
         6d:b2:b5:92:eb:40:8c:ef:3b:fa:a0:0a:22:3f:d1:4d:8b:a1:
         a6:7b:36:51:18:9f:d3:74:b0:12:1b:71:ae:3f:12:5f:88:ac:
         24:c3:dd:05:86:89:5a:44:08:dc:32:7b:49:8d:f4:55:69:70:
         f1:d6:3c:5b:6f:d6:d3:ef:5a:ef:f2:dc:26:de:ac:77:48:d7:
         ef:3e:48:25:8c:54:fd:15:6c:23:a5:94:ae:4e:30:96:06:f5:
         88:cb:22:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:15:28 2026 by rpki-client