Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
File:                     Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft (raw, json)
Hash identifier:          j+r8SxmC0hm5p9G4otENhsBVXon+Qp5wxEiyYU6emA4=
Subject key identifier:   ED:23:FB:9C:2C:BD:E3:BD:22:5D:9D:DE:BE:51:93:47:0B:FF:E3:0F
Authority key identifier: 26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
Certificate issuer:       /CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Certificate serial:       019D390A0967A9D8F8DF443747D88AAB6147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 10:00:52 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:52 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:52 +0000
Files and hashes:         1: Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl (hash: RVv/+xtI+v4RF7CYDJpLO/n+MJXJONSxhZBoDzyavYI=)
                          2: b7PnGwkHoYONbOXWGIYl79niYLE.roa (hash: St4yEXp9JdHRtTcY6I3db8+uCdXOV22vIrFtZfg9uY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:09:67:a9:d8:f8:df:44:37:47:d8:8a:ab:61:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
        Validity
            Not Before: Mar 29 10:00:52 2026 GMT
            Not After : Mar 30 10:00:52 2026 GMT
        Subject: CN=ed23fb9c2cbde3bd225d9ddebe5193470bffe30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:e7:f9:4b:20:3a:00:bb:f7:1b:fa:b5:06:
                    9e:17:04:e2:f1:c5:42:35:7f:d7:6a:d3:b1:20:d3:
                    bc:23:be:b6:3e:00:77:d6:54:51:12:81:8e:b2:04:
                    e6:f5:4c:40:94:19:c1:93:c0:3f:41:a9:55:70:9a:
                    7b:b4:d6:d9:62:ed:56:7e:47:12:4b:15:c3:c8:94:
                    fc:b8:4c:18:7d:70:f3:76:1c:2e:b2:48:1b:f9:3c:
                    16:41:91:92:78:09:39:cd:a8:e5:60:13:00:bd:e3:
                    44:53:9b:40:ab:8f:36:37:ee:94:10:9c:fa:e8:9a:
                    db:2f:67:43:4d:86:61:b5:e9:f1:dd:bf:da:ff:bc:
                    1d:50:56:74:b4:da:d5:c9:50:a5:08:ea:da:5f:34:
                    a9:79:80:cd:7b:d9:79:68:8b:33:66:9f:19:54:dc:
                    0d:3d:1d:48:1c:70:1f:1d:a0:2e:b4:e9:ed:a5:02:
                    66:7a:61:a5:03:18:83:6f:1a:b8:df:f8:b1:eb:ce:
                    de:9d:6a:f6:67:a0:af:3d:fb:ad:11:0a:42:b4:79:
                    cf:f8:a0:a6:49:fd:8e:b5:b8:93:9a:5a:93:ec:49:
                    ed:d9:d5:e3:b1:f6:11:48:1a:2c:c5:cd:62:d7:d7:
                    83:4b:18:93:7f:8a:57:cb:45:8f:f0:ae:09:dc:fd:
                    64:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:23:FB:9C:2C:BD:E3:BD:22:5D:9D:DE:BE:51:93:47:0B:FF:E3:0F
            X509v3 Authority Key Identifier:
                keyid:26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:bf:57:01:fe:25:80:54:35:0a:21:4a:ac:fd:77:2f:58:b3:
         f4:9c:ee:ce:3b:58:d6:68:57:c0:cc:23:62:20:81:d1:62:a5:
         59:95:4e:dc:e3:33:29:4e:8c:dd:2a:e3:32:6d:e1:7f:ac:cf:
         93:b4:e5:24:74:c7:af:ff:c4:2a:a4:84:ba:d4:83:e2:bb:b6:
         24:17:c5:00:5f:71:67:1f:60:38:60:50:de:c7:70:e3:9b:62:
         52:35:6f:36:1a:10:f0:b0:98:aa:a4:62:4e:f8:9a:0a:09:94:
         72:82:b1:96:c5:5e:73:50:2b:86:c8:1c:72:93:b4:9c:67:70:
         2f:f6:03:48:f2:1f:12:89:a0:d3:8c:b9:86:83:3d:1b:d3:0a:
         f0:2c:98:a6:bd:5f:53:d3:6c:59:74:ec:8a:5d:fa:ad:e6:0e:
         48:33:78:c6:f5:58:d0:b6:ac:28:dc:0b:65:b2:37:41:33:c6:
         c3:e4:d8:39:c0:de:7c:86:ca:4b:07:8e:7a:9e:5c:0a:09:9e:
         84:1c:f2:cc:d6:b7:26:7c:67:b5:e1:5d:18:82:69:d5:4d:1e:
         02:8d:21:15:ec:fc:b1:ad:76:36:82:b7:69:48:fb:2f:43:a3:
         ab:65:c6:ff:19:47:07:38:50:5e:80:ae:9d:6c:1b:44:87:99:
         b1:5f:d6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:29 2026 by rpki-client