Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
File:                     JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft (raw, json)
Hash identifier:          8WLuzV3pNami2vXMfqEwpLgNz17CfkuVi1RHWPuLwjQ=
Subject key identifier:   30:02:E4:41:2F:90:AC:96:8D:B5:08:F8:1C:FE:2F:EA:70:88:AE:B2
Authority key identifier: 27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F
Certificate issuer:       /CN=27032f79023052100c4393c9e690f97d7896926f
Certificate serial:       019D38D3A602369A52C683872E5C3C40CFE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
Manifest number:          1887
Signing time:             Sun 29 Mar 2026 09:01:27 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:27 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:27 +0000
Files and hashes:         1: JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl (hash: Qwsn7S9yad9T/gh5tqSlCFHp1JQItw3Baek819Xu5Oo=)
                          2: ab1j8vmXT-iepoMXRKGjy1AqKo4.roa (hash: wT+zH55Scsxtj7EikVPJdyvlsIYfKiDk1ASmaNWU5OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:a6:02:36:9a:52:c6:83:87:2e:5c:3c:40:cf:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27032f79023052100c4393c9e690f97d7896926f
        Validity
            Not Before: Mar 29 09:01:27 2026 GMT
            Not After : Mar 30 09:01:27 2026 GMT
        Subject: CN=3002e4412f90ac968db508f81cfe2fea7088aeb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:64:a9:37:f7:83:32:7d:19:f2:8c:3d:44:44:
                    d8:cf:b5:fe:0d:c4:74:61:2f:d5:b9:35:09:a6:d9:
                    16:15:fb:22:d3:44:15:9f:ef:e0:46:b3:87:82:36:
                    65:45:d6:06:71:e1:ef:e3:31:7f:f5:5f:72:bd:cc:
                    af:53:f4:37:8e:44:93:df:0d:03:0a:62:3d:7b:42:
                    1b:6b:dd:d6:ad:26:34:28:1d:45:bf:92:da:e7:4a:
                    58:c9:c3:dd:05:24:d5:40:30:8d:79:f9:1c:0c:2e:
                    3b:92:e2:c7:24:98:4c:7d:ce:90:d2:f6:70:f5:64:
                    bf:3c:2e:fc:83:1b:7b:34:28:e7:df:81:20:4e:53:
                    dd:c5:ce:84:cf:59:4d:da:5e:64:85:0b:97:cf:f6:
                    13:94:15:52:e3:1f:08:fb:68:44:6e:16:27:e0:48:
                    fa:22:ba:22:1b:c9:44:3d:a5:9c:6b:13:3e:ae:b1:
                    1b:0f:11:f2:fb:8e:09:b7:b2:ae:00:cb:d5:77:6d:
                    c7:49:4c:0a:bd:48:13:2b:1e:e6:6e:9a:56:b9:48:
                    ca:8a:7c:fd:24:7a:79:88:00:80:91:c1:f7:ac:01:
                    80:e2:a5:52:22:5e:36:e0:9f:a5:31:ba:18:a2:8f:
                    58:5a:d5:12:50:31:d8:97:ea:dc:db:78:0a:9b:0b:
                    34:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:02:E4:41:2F:90:AC:96:8D:B5:08:F8:1C:FE:2F:EA:70:88:AE:B2
            X509v3 Authority Key Identifier:
                keyid:27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:14:34:b4:d3:78:6e:45:3d:d4:92:21:36:e9:4c:7b:1d:87:
         e6:bd:dd:eb:75:4f:c5:84:df:ac:8c:d4:97:26:01:e1:5d:c2:
         9f:a6:4b:85:c6:ab:f5:16:8b:86:77:fa:aa:85:b5:70:5f:d7:
         d0:31:07:3e:05:dc:22:65:3a:32:53:40:12:1b:1b:8b:b2:e8:
         05:13:2a:bb:d4:57:72:f0:85:ff:1e:a9:ad:4f:de:22:c9:4d:
         b2:9a:5c:0b:bf:6a:fe:75:f7:14:2f:7c:f2:d8:87:a9:1e:45:
         16:a0:88:0b:c4:dc:89:c1:8a:53:99:41:5d:cd:4a:79:9d:ff:
         07:ef:b7:6f:bd:29:68:45:8f:22:eb:7a:9e:4c:eb:1d:60:ce:
         51:d3:33:bb:25:02:75:50:b3:b7:66:37:db:52:26:30:74:f3:
         df:da:8a:a0:d8:2d:5d:ce:c2:89:09:63:66:82:05:da:d3:97:
         eb:3a:31:1f:ae:d4:f2:a4:ca:31:df:1f:6c:77:f3:fa:e1:a1:
         f6:4a:13:f8:40:41:ed:88:48:e2:f3:7d:d5:a9:e0:3a:9b:c4:
         2b:45:bb:fa:71:a1:8b:90:0e:e7:0e:2b:2d:78:54:03:7a:91:
         0b:a2:94:9a:ee:d9:bb:76:e4:8c:53:0f:aa:5d:0f:d9:b7:ee:
         57:76:f9:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0406YCNppSxoOHLlw8QM/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MDMyZjc5MDIzMDUyMTAwYzQzOTNjOWU2OTBmOTdkNzg5
NjkyNmYwHhcNMjYwMzI5MDkwMTI3WhcNMjYwMzMwMDkwMTI3WjAzMTEwLwYDVQQD
EygzMDAyZTQ0MTJmOTBhYzk2OGRiNTA4ZjgxY2ZlMmZlYTcwODhhZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmSpN/eDMn0Z8ow9RETYz7X+DcR0
YS/VuTUJptkWFfsi00QVn+/gRrOHgjZlRdYGceHv4zF/9V9yvcyvU/Q3jkST3w0D
CmI9e0Iba93WrSY0KB1Fv5La50pYycPdBSTVQDCNefkcDC47kuLHJJhMfc6Q0vZw
9WS/PC78gxt7NCjn34EgTlPdxc6Ez1lN2l5khQuXz/YTlBVS4x8I+2hEbhYn4Ej6
IroiG8lEPaWcaxM+rrEbDxHy+44Jt7KuAMvVd23HSUwKvUgTKx7mbppWuUjKinz9
JHp5iACAkcH3rAGA4qVSIl424J+lMboYoo9YWtUSUDHYl+rc23gKmws0TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAC5EEvkKyWjbUI+Bz+L+pwiK6yMB8GA1UdIwQY
MBaAFCcDL3kCMFIQDEOTyeaQ+X14lpJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndNdmVRSXdVaEFNUTVQSjVwRDVmWGlXa204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mNGZmNTItNjRiYS00MjBiLWJmZjQt
ZjA3ZGQyNjA2MjY3LzEvSndNdmVRSXdVaEFNUTVQSjVwRDVmWGlXa204Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9mNGZmNTItNjRiYS00MjBiLWJmZjQtZjA3ZGQyNjA2MjY3
LzEvSndNdmVRSXdVaEFNUTVQSjVwRDVmWGlXa204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxQ0tNN4
bkU91JIhNulMex2H5r3d63VPxYTfrIzUlyYB4V3Cn6ZLhcar9RaLhnf6qoW1cF/X
0DEHPgXcImU6MlNAEhsbi7LoBRMqu9RXcvCF/x6prU/eIslNsppcC79q/nX3FC98
8tiHqR5FFqCIC8TcicGKU5lBXc1KeZ3/B++3b70paEWPIut6nkzrHWDOUdMzuyUC
dVCzt2Y321ImMHTz39qKoNgtXc7CiQljZoIF2tOX6zoxH67U8qTKMd8fbHfz+uGh
9koT+EBB7YhI4vN91angOpvEK0W7+nGhi5AO5w4rLXhUA3qRC6KUmu7Zu3bkjFMP
ql0P2bfuV3b5kw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:05 2026 by rpki-client