Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
File:                     J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft (raw, json)
Hash identifier:          8rS2pxjsh5zQcXNA4hz6yeIuccDtfn4Soksnt+CjEzw=
Subject key identifier:   5F:19:EF:10:07:27:02:9A:1B:EA:3A:64:A7:DC:8C:56:E7:BB:5D:D0
Authority key identifier: 27:A1:10:45:23:84:64:9D:05:C1:E9:8F:B9:7B:49:AE:11:60:09:73
Certificate issuer:       /CN=27a110452384649d05c1e98fb97b49ae11600973
Certificate serial:       019D37BFFBEE8FC70FA7A587C3BBFA30D4D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
Manifest number:          10A9
Signing time:             Sun 29 Mar 2026 04:00:21 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:21 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:21 +0000
Files and hashes:         1: J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl (hash: 8+aVVMk3QQ6txzrzWutRzwFYmL5c9xJSYg9KLjWpk1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:bf:fb:ee:8f:c7:0f:a7:a5:87:c3:bb:fa:30:d4:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a110452384649d05c1e98fb97b49ae11600973
        Validity
            Not Before: Mar 29 04:00:21 2026 GMT
            Not After : Mar 30 04:00:21 2026 GMT
        Subject: CN=5f19ef100727029a1bea3a64a7dc8c56e7bb5dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:aa:c6:22:38:77:32:b3:6b:d5:5e:ab:c0:03:
                    75:be:87:d7:50:73:68:2b:72:a4:36:2c:da:bd:27:
                    12:b6:20:10:4f:b9:84:67:d5:c4:99:09:75:15:70:
                    87:19:bb:32:b1:a4:26:e8:ca:ba:2d:eb:2d:01:08:
                    b2:39:d0:07:be:97:b9:6b:88:55:d6:07:20:c3:9f:
                    60:7e:15:91:7b:fd:e2:17:ac:c5:ce:5f:f4:de:e2:
                    62:8c:25:cf:cc:94:64:43:73:47:d7:7e:f2:eb:94:
                    0e:77:b6:d3:69:ea:30:5e:30:f5:67:e6:14:e5:80:
                    9e:17:02:02:51:f1:d3:d6:69:2d:f0:db:6d:d5:b2:
                    27:50:a7:09:89:12:3c:27:8f:8a:ee:a9:a2:fd:0f:
                    1f:fd:0d:ad:1e:4e:03:8d:f6:90:7d:7f:ca:bc:18:
                    91:98:06:34:9d:6a:39:d0:b6:38:a3:28:a6:65:18:
                    3b:47:6a:36:51:94:d8:dc:be:69:3d:6a:8c:f7:1d:
                    49:50:86:f8:83:2b:a1:bb:06:a1:04:fa:a3:bb:99:
                    ae:09:23:7b:cb:96:94:cc:f1:12:3b:46:19:08:39:
                    37:ff:24:19:21:2b:bf:cf:24:46:24:42:b3:e4:55:
                    cf:ba:d3:c7:6c:32:cf:5d:3a:ea:4f:1a:ed:dd:63:
                    3e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:19:EF:10:07:27:02:9A:1B:EA:3A:64:A7:DC:8C:56:E7:BB:5D:D0
            X509v3 Authority Key Identifier:
                keyid:27:A1:10:45:23:84:64:9D:05:C1:E9:8F:B9:7B:49:AE:11:60:09:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d9:5c:91:65:18:9e:ae:72:6a:d0:5a:18:e8:d3:3f:e4:73:
         8a:0f:de:c9:3c:14:1a:66:e8:44:72:0e:5c:c9:bd:64:9d:95:
         53:1f:19:1f:77:be:ff:15:a7:af:74:56:01:41:ff:b1:8e:2c:
         1e:b7:f2:6d:9a:77:ac:03:3f:be:4e:bc:36:4a:af:79:c6:47:
         a6:51:8d:0d:7b:40:50:57:17:8c:96:46:66:81:5a:58:10:b2:
         50:0d:7f:b9:89:3e:95:cb:18:94:72:b0:87:c1:b0:a5:7f:06:
         ec:cd:1e:a8:ed:c2:be:66:75:ff:d9:7c:88:10:08:1a:c9:01:
         5f:ed:6f:56:3d:63:30:40:00:77:8b:63:0a:96:38:07:9a:5d:
         0a:83:a7:4a:91:ab:4e:a7:4b:b6:51:2f:3f:ae:cc:63:88:43:
         f1:2c:a0:0d:8b:fd:12:60:d5:3e:c2:37:93:38:02:55:07:b8:
         d8:b3:fd:4f:a0:86:e7:5e:04:bb:11:e4:ce:27:ca:9a:66:8d:
         68:a2:9c:c6:5a:7f:4d:4f:89:b1:9d:68:9f:eb:d3:e2:83:6b:
         88:b7:62:d7:a1:b6:b7:76:a9:92:51:e3:71:0d:72:2f:e9:48:
         a7:87:0e:c8:48:fe:52:17:18:e5:a8:82:08:d4:ba:e2:b7:be:
         f3:c9:80:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:45 2026 by rpki-client