Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
File:                     JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft (raw, json)
Hash identifier:          ALOzX2wAxo8fk2K0CEQXyaz3qpiXf3MeTBldSa927vs=
Subject key identifier:   4D:F2:E9:2A:12:9A:CF:AC:A1:03:68:24:0A:9F:6D:55:9C:B0:3C:85
Authority key identifier: 26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6
Certificate issuer:       /CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
Certificate serial:       019D37525038F725C47E0B990E7DE492DC71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 02:00:34 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:34 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:34 +0000
Files and hashes:         1: 1-etkEpJT5huTCkvp4nk0dydE9KA.roa (hash: eid4ChJhHIbdTu3ltYjDcXJHFhgZsYu7s5rAP/A4Ugo=)
                          2: JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl (hash: 7OCypiTzs7ChxXSjV67wjLmz0v1b4R1KoElHRQ9/XgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:50:38:f7:25:c4:7e:0b:99:0e:7d:e4:92:dc:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
        Validity
            Not Before: Mar 29 02:00:34 2026 GMT
            Not After : Mar 30 02:00:34 2026 GMT
        Subject: CN=4df2e92a129acfaca10368240a9f6d559cb03c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:14:95:64:70:0c:aa:2b:47:9b:46:cf:e9:b8:
                    51:f8:73:57:a4:ce:2a:4b:8b:91:f8:dd:79:64:bf:
                    2d:b4:cc:4e:76:3c:cb:cd:3e:c8:ee:e8:0f:eb:c0:
                    57:73:3c:56:ba:99:43:d3:f7:16:bf:3b:39:e8:1a:
                    87:fb:b5:50:da:d1:ac:2e:46:22:ac:ad:9a:2c:b5:
                    42:19:d5:7f:ce:90:d5:ad:d5:dd:2f:38:cd:48:88:
                    d4:bd:c8:36:07:2a:2b:2b:2d:46:d1:1a:f5:a3:eb:
                    83:eb:51:6a:87:74:95:16:e9:a2:7c:16:18:6d:08:
                    ac:5d:40:18:0e:8d:00:57:3e:71:6c:44:6d:60:33:
                    e1:ea:de:14:56:88:ac:65:04:ac:83:87:6a:71:35:
                    dc:01:aa:8b:0d:6e:3f:5a:5b:27:77:7b:b1:1c:04:
                    dc:f1:c9:e7:f4:56:64:de:e4:1f:a7:77:66:10:af:
                    2a:d0:32:e2:ff:cb:c8:89:e7:cf:41:db:f4:bc:cf:
                    84:4b:1c:bf:45:74:b5:77:d7:86:50:63:e3:93:e4:
                    6c:a7:56:b5:65:e0:a0:40:35:04:85:9a:2f:33:5e:
                    af:60:31:d4:20:28:e5:f8:79:00:f0:8b:31:60:d2:
                    6a:1a:8b:62:6e:08:09:a9:4e:2e:39:90:77:fa:8d:
                    77:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F2:E9:2A:12:9A:CF:AC:A1:03:68:24:0A:9F:6D:55:9C:B0:3C:85
            X509v3 Authority Key Identifier:
                keyid:26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:88:ca:7e:c5:40:4f:cb:db:6d:35:c5:34:8d:11:a9:1b:94:
         f1:ab:11:fa:2e:92:d9:3d:4f:b0:8d:59:73:90:df:b5:b4:89:
         00:13:2e:ec:34:8f:63:48:00:e5:49:47:f4:91:da:0e:be:06:
         28:36:53:5c:ee:cc:2b:49:eb:41:ad:e2:6c:72:0c:36:a7:dd:
         0a:6b:15:67:3d:27:e2:49:18:cc:59:d7:d2:fa:65:16:ae:29:
         ba:ef:76:59:79:9d:31:3e:1b:77:5e:30:ef:90:42:7b:b7:2c:
         91:58:3a:90:b3:fb:70:d3:94:78:ec:53:8f:06:91:3b:86:f8:
         3a:f6:f5:b6:66:61:1e:81:f1:45:c5:b5:f2:6c:ba:17:f1:f9:
         59:0d:33:8a:41:2c:71:57:d9:7f:50:43:e0:08:90:ef:4d:b4:
         7a:aa:ac:7c:d9:8f:3d:bf:74:5c:6d:dd:01:86:10:65:c4:9d:
         5d:33:f5:61:27:d6:0e:e8:37:5c:57:57:f8:17:25:0f:6b:bd:
         82:83:5c:4d:ab:c5:13:cf:a5:3c:7a:3d:49:41:0a:ce:48:00:
         28:d4:e5:35:e0:89:a8:2d:18:19:c4:15:8b:be:f0:c5:8b:32:
         27:f9:83:e0:49:7c:e0:f3:c1:7b:20:57:e4:dd:7f:e7:02:58:
         8e:2a:7c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:07 2026 by rpki-client