Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
File:                     jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json)
Hash identifier:          1NSarHs7YShnJXjnoy0R4vpw28yOEno817q5eeJRtvE=
Subject key identifier:   6C:94:C3:78:4F:78:AE:5B:A9:37:D7:68:A3:DA:BD:50:A6:64:9D:41
Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
Certificate issuer:       /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Certificate serial:       019D34BF70F723626A3129211E5C66B40C79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
Manifest number:          1893
Signing time:             Sat 28 Mar 2026 14:00:54 +0000
Manifest this update:     Sat 28 Mar 2026 14:00:54 +0000
Manifest next update:     Sun 29 Mar 2026 14:00:54 +0000
Files and hashes:         1: AR0snb2WiBVjty2iEPK8q39KPZo.roa (hash: LRggRbjFzoUTOK1TTVfP+3KeKjujfqsLku1ZGYI58wk=)
                          2: F13pIjKslpUrOUGbjMV17CmkLWk.roa (hash: szqGRHA6NM3mWFGyDMMW+gpH0BvtN2cqf2OUgq/zN28=)
                          3: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: kyMBRZ7kWf1VMkAitFKfHE29z6zGvEq6rfRafMG80RU=)
                          4: olmoqfzN7VFo-bxr_cK8ARodjJ4.asa (hash: DUkoDNJ/61GCLycft48nLmtAR70B8+qDz8ujkdLUM/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:34:bf:70:f7:23:62:6a:31:29:21:1e:5c:66:b4:0c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
        Validity
            Not Before: Mar 28 14:00:54 2026 GMT
            Not After : Mar 29 14:00:54 2026 GMT
        Subject: CN=6c94c3784f78ae5ba937d768a3dabd50a6649d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f8:26:4f:2d:bb:9e:94:11:99:8f:9a:fa:b5:
                    b8:c8:74:e7:82:8e:7f:08:7c:dc:eb:4a:5d:11:54:
                    ab:34:1d:30:dc:1a:39:f0:03:c2:f6:e3:57:43:82:
                    03:6a:65:a8:fc:24:44:77:14:4e:48:a4:09:db:80:
                    b4:0e:da:8f:d1:05:2f:7f:d4:11:08:4f:3a:55:10:
                    25:8a:b5:16:b5:3b:67:4f:82:b0:92:62:7b:af:98:
                    13:6b:51:ca:41:8b:45:a2:ff:d6:5f:15:9a:8d:b5:
                    10:03:88:00:83:63:91:e5:29:75:e5:a6:5a:ec:e8:
                    bb:99:d1:2f:6d:23:86:da:68:fb:8e:15:ae:80:93:
                    d4:a1:37:b3:09:13:c9:22:bc:c0:81:9d:95:46:ca:
                    c0:a9:e1:6a:20:77:ca:89:93:77:d2:2a:1e:dd:8b:
                    ca:2e:0e:b2:d2:5b:fd:ec:06:79:73:79:5a:fc:c0:
                    d4:8e:76:1b:4d:6f:dd:ed:43:11:1e:6c:c0:8c:d8:
                    8a:52:c5:09:97:01:0a:38:20:bc:38:69:f7:77:b0:
                    08:18:e5:80:01:f6:67:4e:4f:c0:06:c3:12:54:ef:
                    dd:50:e0:ef:84:1c:5c:cf:4f:6c:2f:30:a5:b3:c6:
                    2e:c5:69:97:7b:ff:8c:3a:bb:ad:13:0f:85:9e:93:
                    54:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:94:C3:78:4F:78:AE:5B:A9:37:D7:68:A3:DA:BD:50:A6:64:9D:41
            X509v3 Authority Key Identifier:
                keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a4:f6:04:28:90:d0:aa:29:92:da:4b:0a:49:b9:c5:b9:b0:
         56:4d:18:11:a0:27:4b:0c:af:7b:9d:8a:2c:54:d6:ea:e7:8b:
         de:d8:3b:af:7d:79:16:c2:2a:03:18:75:a1:d1:19:d2:f3:00:
         ad:8e:13:fb:70:0d:d6:df:3c:0f:3b:b7:8e:56:5c:fc:a5:10:
         8e:ec:c4:df:fb:22:74:03:79:59:da:e2:2c:ad:06:8c:be:9d:
         4d:d0:6e:41:e4:ac:2d:47:6c:13:ce:bf:58:88:f0:a0:53:f0:
         37:93:e4:d5:aa:55:9b:46:ef:d5:bd:ed:9a:7c:c3:d0:a6:6c:
         88:f5:26:a5:05:e9:63:cf:70:19:b7:c2:f5:30:30:98:b6:ce:
         2b:ff:42:a6:e4:d3:2e:5a:d5:9b:45:af:de:c7:9a:8b:dc:f4:
         3b:64:d5:d1:8e:81:c8:2f:63:fe:ba:98:39:ec:01:0c:2e:8e:
         11:4b:d3:43:93:a3:8d:cf:31:32:aa:e6:ca:a4:bc:0a:90:2c:
         07:82:f4:06:5f:96:e4:2f:43:40:74:93:59:7a:5f:a3:e3:ee:
         99:6a:84:15:64:d6:fc:2f:c1:38:fa:c9:89:3f:b3:a6:10:0d:
         e8:26:70:6e:6a:17:0e:64:79:bd:52:29:bd:02:b7:87:f4:43:
         5a:04:61:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 18:24:13 2026 by rpki-client