Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
File:                     J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json)
Hash identifier:          fyLUaZvlrLFNswGFSjVAxaLeud5d2McF3/BvtM56gXs=
Subject key identifier:   4A:45:69:D4:9A:A2:68:E2:48:82:F3:42:F8:DA:C5:4F:16:89:C6:18
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Certificate issuer:       /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial:       019E29948882E28C2910C6AB0482F5CB1169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
Manifest number:          1372
Signing time:             Fri 15 May 2026 03:01:00 +0000
Manifest this update:     Fri 15 May 2026 03:01:00 +0000
Manifest next update:     Sat 16 May 2026 03:01:00 +0000
Files and hashes:         1: BgYFyQZlOVoVNE_xGRhrUlUnKkE.roa (hash: iTNaRaBxLjNxBBzzpY+C9jdK8pNm57Hs3Z5CDJ3xboY=)
                          2: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: 4On8iBqXvs6T3la8AFkuIDHC+4pUYWhW10oSsP+O0t0=)
                          3: olxc0wwaCx3ZS0IyubnBirv7nJc.asa (hash: gFjGd2p/+A4+aazMMxaIfHxnVYFhIuYNkCD+v7nOd/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:94:88:82:e2:8c:29:10:c6:ab:04:82:f5:cb:11:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
        Validity
            Not Before: May 15 03:01:00 2026 GMT
            Not After : May 16 03:01:00 2026 GMT
        Subject: CN=4a4569d49aa268e24882f342f8dac54f1689c618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7d:23:b0:ba:bd:04:ba:11:0a:86:db:ce:1b:
                    6c:88:97:d7:3f:d6:91:52:91:98:f0:ec:07:eb:17:
                    68:50:17:c8:ad:86:ad:7c:55:13:ec:a7:79:b8:23:
                    28:5e:7a:1e:35:6d:ea:9c:3e:8a:6e:bc:64:43:d9:
                    13:ec:e0:c5:69:f3:40:bd:02:bb:ab:fc:60:c4:46:
                    74:9a:23:26:b0:9f:ad:a3:bc:b1:e4:f3:7d:15:9e:
                    31:3e:d1:da:0b:72:cf:2e:5d:11:9f:84:da:53:b7:
                    a9:e4:f0:5c:f8:7a:dc:1d:01:02:d3:30:19:b7:98:
                    02:60:a8:f5:a3:2e:64:2d:c5:ba:15:81:b2:6a:2a:
                    26:90:60:66:3f:1f:fe:64:0d:7b:e6:9a:95:89:31:
                    90:9f:39:21:5b:5e:13:29:18:e2:6f:38:bd:6b:61:
                    65:e7:19:83:c2:0f:71:d1:14:da:bb:f9:94:68:78:
                    2c:04:94:a0:c0:0b:95:23:83:44:c9:e5:13:3b:fb:
                    5b:9e:83:14:2e:59:f9:74:45:f4:a7:16:a4:2c:82:
                    90:79:0d:a5:de:7c:f7:bf:35:12:a1:b0:65:c5:8a:
                    6b:0a:ec:77:2d:2f:ae:26:97:5c:43:82:4f:0c:c4:
                    19:41:0b:94:7b:41:2a:2d:fd:fb:2c:47:1e:7f:22:
                    ec:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:45:69:D4:9A:A2:68:E2:48:82:F3:42:F8:DA:C5:4F:16:89:C6:18
            X509v3 Authority Key Identifier:
                keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:60:dc:b4:c6:08:de:b2:78:52:d7:b9:32:a3:f3:14:a4:30:
         78:b4:2b:b0:9c:cc:27:ac:b5:e3:85:99:cd:ce:e4:7c:9a:1f:
         c1:81:87:3c:7d:5a:6a:eb:36:2d:ab:6d:ce:7e:9f:17:84:bd:
         1e:0b:0b:ce:d3:37:1d:e6:fe:38:7e:62:66:c3:71:af:c1:5b:
         b9:8d:79:4a:62:e3:cc:5f:fd:2b:04:52:95:3f:97:cb:16:bb:
         cf:6a:fb:1a:27:d9:36:65:88:9a:9a:68:ad:4c:5c:e7:bd:cd:
         8a:cd:3b:b3:03:ce:27:fe:85:e9:c7:ab:b8:8d:96:12:0f:9e:
         17:a8:2d:27:02:46:b7:33:27:99:68:ea:b7:10:d5:7c:50:97:
         79:91:e5:1d:49:87:1d:87:e2:71:63:00:88:33:9d:13:91:39:
         6e:52:a3:3c:d0:3f:34:f9:72:bd:41:47:88:dc:e5:c2:a5:28:
         76:0e:cb:1c:23:45:e9:9f:4c:a4:67:c6:33:6b:38:fc:70:13:
         12:e4:0b:31:c3:86:1d:bb:8b:87:f4:cf:ee:4a:d9:46:b9:47:
         ec:0d:f7:79:44:76:b8:e7:0f:09:41:23:bd:10:ec:16:54:73:
         6e:9e:11:13:03:19:a9:1b:99:80:bc:01:3b:80:54:95:d7:72:
         a7:90:48:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:39 2026 by rpki-client