Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
File:                     JzWNbTPibSr4Q9WB3PacDREKneg.mft (raw, json)
Hash identifier:          AjQFzDaAswZoK0OCzgmzk1sKOke/5Kc3JKm9AkEeUZg=
Subject key identifier:   51:39:2B:40:F3:09:11:18:CF:5C:59:C4:6A:EF:87:E4:47:C0:C0:68
Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
Certificate issuer:       /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Certificate serial:       019CC1BBE4BE939B990481A291FB477552AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
Manifest number:          046C
Signing time:             Fri 06 Mar 2026 06:00:42 +0000
Manifest this update:     Fri 06 Mar 2026 06:00:42 +0000
Manifest next update:     Sat 07 Mar 2026 06:00:42 +0000
Files and hashes:         1: JzWNbTPibSr4Q9WB3PacDREKneg.crl (hash: ZG+l6kwkH4fskOE+lmtr0cae6KCkhZmmmBuR+xK0xr0=)
                          2: q9nb03LLGhEQgbaQ_RRS2Oti8mA.roa (hash: +gb3UnVeZl4+1DAMyjUb0CGvwvwAAF1A19rfF/kmb3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 06:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c1:bb:e4:be:93:9b:99:04:81:a2:91:fb:47:75:52:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
        Validity
            Not Before: Mar  6 06:00:42 2026 GMT
            Not After : Mar  7 06:00:42 2026 GMT
        Subject: CN=51392b40f3091118cf5c59c46aef87e447c0c068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e1:0b:e5:0e:99:97:cc:4c:31:f1:a8:88:c2:
                    f0:50:b0:ab:45:2c:7e:6e:cd:52:5d:1b:70:e0:87:
                    6d:b6:ca:80:c5:51:9f:09:85:ca:7d:32:21:94:32:
                    ce:c9:6d:0d:52:ed:34:11:0b:5c:eb:d5:12:45:88:
                    c0:0b:a0:4e:df:36:80:f7:7a:60:bd:ad:f0:45:6f:
                    84:33:d8:ca:9f:e2:d9:bf:f8:2f:8a:46:6f:33:90:
                    a5:60:63:cc:0b:98:66:db:55:7c:51:65:55:69:b1:
                    93:67:a0:40:b4:7c:9b:d1:84:bd:57:91:7f:29:53:
                    fb:c2:96:8a:b3:78:69:52:e9:3c:62:01:6b:dc:41:
                    c0:6a:af:b8:50:54:9a:89:33:fa:06:ff:72:68:e9:
                    db:16:08:e3:3f:07:e5:ec:f8:b6:f1:9b:47:20:43:
                    2f:fc:54:50:b8:2c:20:3e:cb:85:00:e6:d9:5c:ff:
                    8a:a2:8d:fd:2e:8e:50:71:a5:5a:4d:73:45:0d:9a:
                    ad:75:2a:eb:2d:dc:14:d4:3a:3c:1f:73:7a:2a:80:
                    6b:19:7e:64:94:25:7c:44:b3:30:3e:65:ef:f0:2a:
                    a3:6f:de:7d:ea:34:4c:8b:08:3d:a9:7a:e4:e3:a2:
                    08:67:7c:ba:5b:37:6b:0e:13:78:c1:26:d2:c0:bd:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:39:2B:40:F3:09:11:18:CF:5C:59:C4:6A:EF:87:E4:47:C0:C0:68
            X509v3 Authority Key Identifier:
                keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:87:df:1f:03:c4:e1:ae:74:bc:f3:f0:a4:3d:01:5b:89:65:
         19:55:c7:bd:2a:f2:82:e2:1c:41:1b:3b:35:76:05:df:fc:b2:
         20:53:df:0b:a0:ac:bc:18:f6:30:60:3a:c5:c1:3a:29:d3:9c:
         ec:75:69:9d:5a:d6:16:ee:09:1c:0b:ab:2c:07:df:af:81:09:
         cd:3b:dd:3e:a5:bf:d1:06:ee:a6:a0:82:2b:45:c9:89:62:7d:
         55:31:ee:0b:00:f1:6e:12:e1:aa:36:68:7c:57:66:04:48:42:
         f2:9c:53:62:4e:77:a0:cf:f6:29:d5:39:4c:38:02:90:31:52:
         a2:1b:0b:52:e2:5e:f3:59:49:a3:ea:62:82:3c:31:a9:cf:16:
         44:b0:db:13:8a:a9:56:36:68:b1:e3:82:17:4e:f9:5b:5d:d8:
         cc:36:67:75:94:fe:02:be:33:92:2c:02:ee:68:81:82:81:4e:
         4d:e1:52:f7:aa:fe:9e:52:d2:11:a6:9a:02:4e:5c:0d:c3:30:
         36:39:3d:f8:35:62:ed:5b:3d:e9:ac:fe:37:e0:75:ec:b7:bb:
         80:31:03:1b:49:8e:f7:37:6c:13:44:5b:99:5d:c8:fa:38:0b:
         11:99:ed:af:66:eb:78:5b:89:99:af:06:42:fd:a7:0e:1c:4d:
         ba:89:4e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 16:42:04 2026 by rpki-client