Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
File:                     J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft (raw, json)
Hash identifier:          /vMCDmYM9fCToqbCt30puFc8iDmxdkn/+PzXllKm1qo=
Subject key identifier:   C8:34:7F:FE:1D:47:D7:13:3D:F6:C7:5E:64:87:79:9A:23:78:5C:1A
Authority key identifier: 27:F4:8C:85:A4:2B:00:B3:9D:18:03:E6:3C:9F:D5:AD:EB:F7:F9:5E
Certificate issuer:       /CN=27f48c85a42b00b39d1803e63c9fd5adebf7f95e
Certificate serial:       019D3865C0C99F1AE94A7DB75232FE033255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
Manifest number:          156D
Signing time:             Sun 29 Mar 2026 07:01:25 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:25 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:25 +0000
Files and hashes:         1: J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl (hash: Ce4/qfRbYM9FHBiC+4SmHIUlrGUhtuTBWlvzoIlffTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:c0:c9:9f:1a:e9:4a:7d:b7:52:32:fe:03:32:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f48c85a42b00b39d1803e63c9fd5adebf7f95e
        Validity
            Not Before: Mar 29 07:01:25 2026 GMT
            Not After : Mar 30 07:01:25 2026 GMT
        Subject: CN=c8347ffe1d47d7133df6c75e6487799a23785c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:5d:6f:67:bf:b5:85:67:5a:40:58:15:07:
                    e2:fb:2d:34:73:c1:24:5d:60:61:89:ce:3a:b0:da:
                    35:90:91:94:10:2f:ba:37:28:7e:73:93:45:bb:b5:
                    e5:e2:48:cc:3b:27:98:52:91:10:2b:eb:bf:bc:ea:
                    07:d8:eb:d0:64:c9:a4:a8:a3:6d:db:fc:42:51:68:
                    57:07:db:68:8c:1e:4d:37:68:28:54:16:59:59:9d:
                    0a:b8:8e:dd:1f:7d:23:e6:b9:d8:43:9e:5c:3b:fa:
                    9f:d0:f7:7b:53:cf:ef:15:a1:7d:ec:df:d6:e5:2a:
                    f9:7d:33:f0:9d:2d:8c:67:00:a9:70:a7:19:d6:86:
                    e5:ab:44:57:75:ac:a2:cc:d5:95:c4:8f:54:3a:11:
                    c8:13:21:a5:cf:52:ad:26:41:5c:4c:1b:0f:9d:47:
                    6f:af:91:df:2d:0e:da:b5:ba:3a:bb:57:8f:a7:09:
                    64:db:58:4c:eb:e0:ae:b8:52:ad:e4:2d:89:39:68:
                    21:d6:e1:23:e8:8e:ef:a9:91:35:00:e7:5b:fe:d8:
                    2f:1a:d0:d4:3e:fa:ea:f9:1e:8d:0e:1c:1a:ad:80:
                    81:d7:47:73:7d:33:3f:26:74:8b:a6:78:23:07:c1:
                    b6:88:01:a8:96:c0:a5:b3:39:62:06:22:5c:d1:a5:
                    fb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:34:7F:FE:1D:47:D7:13:3D:F6:C7:5E:64:87:79:9A:23:78:5C:1A
            X509v3 Authority Key Identifier:
                keyid:27:F4:8C:85:A4:2B:00:B3:9D:18:03:E6:3C:9F:D5:AD:EB:F7:F9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:aa:96:2f:ff:79:63:15:c9:39:e1:e8:f4:5d:b0:6e:49:24:
         d9:7b:89:99:ff:57:a8:c3:c4:ce:ec:43:22:5d:68:53:1d:06:
         af:93:53:25:98:dc:14:23:3e:a8:c9:79:94:ce:a7:7e:e2:59:
         fe:ae:ca:2c:40:b7:19:9f:ca:f6:e0:84:dd:30:54:97:4b:20:
         ca:1d:1f:e4:12:bb:72:da:c0:c2:32:84:a7:57:c3:c6:58:c8:
         7e:ec:28:ae:86:ff:60:df:2d:9d:70:a4:3c:65:6f:69:bf:4f:
         4f:d0:06:3b:36:ed:ed:db:50:13:b8:98:e4:38:49:7f:29:d7:
         03:ac:3d:54:6d:c6:fb:2d:98:e0:77:8a:85:de:0d:b0:da:eb:
         46:1c:a5:cd:1b:54:be:fe:d7:d2:9d:a7:33:0a:ce:46:3f:33:
         63:e5:07:17:d0:fd:4e:c1:10:b2:48:91:12:8d:8f:48:29:02:
         40:b4:cb:79:aa:10:f9:92:38:d2:14:3b:7b:37:7a:35:d0:51:
         e6:75:8a:8b:73:fa:07:90:72:84:61:0c:91:57:1d:ef:d3:e1:
         86:89:fc:94:ac:54:38:fa:ca:1c:36:20:e1:ee:66:61:de:72:
         25:5e:73:fa:7f:55:a8:79:0b:ed:a6:af:d5:0f:ec:b2:2d:79:
         5d:35:ef:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:31 2026 by rpki-client