Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
File:                     JzWxnbJ9Py131AgYhFO-JrNFUK0.mft (raw, json)
Hash identifier:          i4AfiTVAXWeFdSVGO4RpSqgJBT+Rz088fyro5fHX1T4=
Subject key identifier:   A6:C1:18:22:14:28:FE:4C:99:16:72:F2:94:F3:D3:AE:0C:6E:78:39
Authority key identifier: 27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
Certificate issuer:       /CN=2735b19db27d3f2d77d408188453be26b34550ad
Certificate serial:       019DD087E9084D362B8BC5258A62304B7096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
Manifest number:          0642
Signing time:             Mon 27 Apr 2026 20:01:00 +0000
Manifest this update:     Mon 27 Apr 2026 20:01:00 +0000
Manifest next update:     Tue 28 Apr 2026 20:01:00 +0000
Files and hashes:         1: JzWxnbJ9Py131AgYhFO-JrNFUK0.crl (hash: VkpkFk3XUoenakag2ygyincndTRx1hJ2JbWH9QZG354=)
                          2: g84cD1l0NIWiAh0qYxQZFWYbDew.roa (hash: 3YtnarT57s4PMZl4o0PMkx+Dnjlo0jMzpQu5PPXZZnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 20:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d0:87:e9:08:4d:36:2b:8b:c5:25:8a:62:30:4b:70:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2735b19db27d3f2d77d408188453be26b34550ad
        Validity
            Not Before: Apr 27 20:01:00 2026 GMT
            Not After : Apr 28 20:01:00 2026 GMT
        Subject: CN=a6c118221428fe4c991672f294f3d3ae0c6e7839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c6:fc:50:db:8f:d6:ad:73:44:d6:d7:bb:45:
                    ba:b0:5a:f5:d1:5e:1f:d0:b1:de:b2:01:e7:02:bf:
                    0e:00:41:b7:c7:15:88:aa:9d:72:e6:39:f0:3f:4b:
                    19:e4:28:65:df:d1:07:3b:dc:b8:1a:85:46:a5:87:
                    33:8b:74:4c:8b:14:85:ae:24:36:7e:a8:8b:6c:23:
                    34:cb:6b:d7:84:69:b3:f4:d3:51:45:5b:f7:b5:db:
                    09:74:ce:cd:e5:c3:ad:f8:ef:5b:c4:da:f4:b9:4a:
                    58:51:99:dd:1a:cc:93:e1:83:21:a0:2e:59:23:3d:
                    df:8f:33:15:97:bf:a0:8e:f9:a3:05:bb:e4:9e:48:
                    d8:d9:42:da:f2:07:ba:1d:af:3d:b8:52:8c:db:e4:
                    67:51:50:03:57:34:4b:1c:fb:ea:7f:96:85:37:c3:
                    f8:a2:e1:69:a3:dd:dd:e7:cc:bf:cc:63:ae:03:6e:
                    fc:a8:a0:8b:3d:0e:17:c4:44:ae:be:41:06:ff:46:
                    06:0b:75:37:ba:1a:4f:d5:3e:51:02:f7:68:d7:e7:
                    d8:2b:9e:a5:7b:d0:da:3e:5f:cf:4a:b2:32:1f:a7:
                    4c:49:e0:44:99:7b:fe:57:c9:91:91:50:39:e7:02:
                    05:10:aa:c8:ed:b9:dc:3e:ae:37:ea:dc:18:b5:79:
                    22:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C1:18:22:14:28:FE:4C:99:16:72:F2:94:F3:D3:AE:0C:6E:78:39
            X509v3 Authority Key Identifier:
                keyid:27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:de:b5:97:1a:cd:b1:4e:99:99:a4:e5:fc:14:ab:3f:f3:e9:
         83:b9:ec:9d:a7:01:80:bb:8e:97:d2:08:5b:fd:a9:13:84:6d:
         f9:65:5d:33:b4:18:8d:05:8d:55:5d:b4:1f:d6:56:f4:c8:8b:
         2a:b8:96:ca:4a:70:bd:44:1e:ca:0a:0f:d9:70:52:70:d8:78:
         09:2a:93:66:d0:c0:c6:3a:86:dd:be:00:0e:59:cb:da:4c:50:
         1f:7d:06:d4:71:cb:9f:2d:c7:76:36:50:ea:03:69:57:10:0e:
         94:d3:f7:b2:13:13:d8:0d:27:10:1c:be:61:04:b9:a6:fb:0f:
         bd:25:17:ac:3a:86:a3:cd:04:33:05:00:cb:31:b0:1b:b1:11:
         89:f8:8b:6e:25:c8:79:f5:1c:f2:d6:82:d5:38:8a:ee:45:61:
         00:54:94:f8:3a:49:f4:f9:3c:5d:e1:a2:e7:4c:24:83:af:7a:
         bb:bf:40:06:cb:c6:e7:bd:17:82:81:08:fb:6b:95:aa:35:1e:
         80:96:0f:d1:62:21:93:0e:3b:86:8f:3b:42:1c:95:85:ad:0a:
         f4:09:ec:27:c1:c6:fa:5e:e2:35:48:fe:dd:e1:6a:3d:62:45:
         39:db:55:eb:e5:4f:54:d5:b9:1d:53:44:79:ee:0e:f1:bf:ae:
         52:0c:2f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 06:06:47 2026 by rpki-client