Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
File:                     j1Gq0OQUir4_KouNQxjzS0VrZfE.mft (raw, json)
Hash identifier:          Pn5WAzM3I4MyaOGOZ70Hk9zTnZ+evjkfwVDItTeZdpc=
Subject key identifier:   8B:31:83:13:8C:45:9E:C7:56:84:E3:BC:9E:D2:24:4C:00:12:FA:8A
Authority key identifier: 8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1
Certificate issuer:       /CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
Certificate serial:       019D05C1989EC777DE52D5827D8B41D2674E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
Manifest number:          013D
Signing time:             Thu 19 Mar 2026 11:01:06 +0000
Manifest this update:     Thu 19 Mar 2026 11:01:06 +0000
Manifest next update:     Fri 20 Mar 2026 11:01:06 +0000
Files and hashes:         1: 17JRT-eliiqD0ZudhQwcd-RHoCY.roa (hash: rsCaM5usnSELR3Hid5CN2oWYMmohcr2pCEMxJm1TSn4=)
                          2: 5CYe2w6R8bIP53LSediQOkU8X6Y.roa (hash: 62hxmbI0Pt2Gc+kE97Qd4+IWL8YV1uOGUoBpSifMc4g=)
                          3: AiyDVffautqfmFw0-sHwLnrdi94.roa (hash: NqMMGxy1WwFAXktdmGqyVpQBfDu1vxm8tC/DWTYXqCg=)
                          4: KTAAuRsqmRld1n4ZdiqcKLG_hbI.roa (hash: Z/rqoZBNVfDm70QTbYQ7hfqHZXGsKtZpgexuaPzb1M4=)
                          5: j1Gq0OQUir4_KouNQxjzS0VrZfE.crl (hash: Z3Z5K+ot4uT3iTU99sHfZt68Qek/ZKXN9N3ibapnGeE=)
                          6: lXUAxU6WVwpNoYD3PNJupX0IdnQ.roa (hash: 1IXDFDpAZ7cDUUd7sdHkzjt07vGwbPC7cOUCYW3+UFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 08:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:05:c1:98:9e:c7:77:de:52:d5:82:7d:8b:41:d2:67:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
        Validity
            Not Before: Mar 19 11:01:06 2026 GMT
            Not After : Mar 20 11:01:06 2026 GMT
        Subject: CN=8b3183138c459ec75684e3bc9ed2244c0012fa8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:7c:90:4c:d0:f0:7c:bd:47:6f:87:46:c5:
                    c1:a5:65:72:15:0f:a4:c5:3a:aa:f9:79:58:b3:dd:
                    7b:73:9d:79:f5:c1:ff:41:8f:54:56:d3:30:cd:37:
                    8e:5d:66:6b:65:2e:a5:07:e7:c3:dd:2d:87:34:c2:
                    82:a1:d3:49:33:35:3b:14:aa:47:58:cb:a8:63:4b:
                    d0:d3:54:d4:f8:dc:d7:73:55:e9:79:1d:90:e6:76:
                    10:a5:cf:46:20:33:a8:84:e0:2e:65:14:95:07:bd:
                    09:15:0d:6c:50:0f:28:20:34:b9:e7:5b:2d:86:0b:
                    e7:52:8a:f2:b8:49:bb:44:5d:bd:5f:2e:4a:cc:07:
                    bb:3e:4d:b5:e5:e5:87:36:00:25:c7:a5:b0:0b:b6:
                    fb:35:83:94:00:13:3e:a6:ca:cb:ec:1f:82:16:1a:
                    02:c0:e2:59:96:2d:cf:8d:80:33:db:8e:b0:cc:3a:
                    0c:77:f3:28:0f:6f:fb:92:9f:3b:18:b3:71:d1:5d:
                    64:83:3a:54:2c:20:28:b7:a2:6f:51:b4:7c:74:8e:
                    2b:83:6a:0a:76:8f:9d:93:69:41:3f:6d:82:44:18:
                    06:70:d1:44:c0:2b:0c:9c:3d:7a:a1:fc:e0:00:8c:
                    8b:1c:86:4d:01:56:07:11:4d:6f:df:bd:f5:1c:8d:
                    e9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:31:83:13:8C:45:9E:C7:56:84:E3:BC:9E:D2:24:4C:00:12:FA:8A
            X509v3 Authority Key Identifier:
                keyid:8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:3e:23:84:79:13:9e:d8:cd:cf:ac:08:e4:e4:fa:76:3c:b5:
         31:08:1f:42:85:0e:c7:e8:51:e9:00:07:d3:cd:fd:0b:1c:4e:
         1b:5e:26:52:0b:89:a6:5a:7b:46:b5:52:3f:53:a2:14:4a:92:
         3f:9e:f0:17:47:94:50:78:da:b9:17:49:bc:3c:22:4d:b1:40:
         b6:73:54:fd:40:34:f4:aa:5c:74:b2:55:cf:8b:a2:32:4c:14:
         fd:7f:86:78:6c:48:e4:1c:b0:04:c9:5f:27:d6:1c:fe:5f:5a:
         38:ff:4b:d0:fc:31:51:9a:44:68:d2:29:b6:5f:b3:e6:c3:60:
         18:5d:67:26:d4:48:d7:c6:43:09:15:6c:53:58:c1:03:79:9c:
         07:cb:cd:0b:fc:64:3a:0c:42:8f:8c:b4:81:c7:bb:7c:89:c4:
         66:1d:e2:e6:3d:b3:26:02:67:d3:50:fb:e3:5d:60:6b:e6:7d:
         de:84:07:60:6e:2c:84:6c:71:76:04:9f:cf:44:c6:f5:59:4b:
         6a:70:d0:5e:70:e9:26:6d:da:0e:dd:3c:9b:27:d5:28:e8:23:
         df:8b:c4:0b:e6:6a:bc:e2:80:d2:f0:6f:79:34:9b:db:b6:44:
         f1:73:5f:ec:f2:d8:fe:11:bd:57:07:75:41:ca:45:86:0a:e0:
         9c:c2:0b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:55:49 2026 by rpki-client