Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
File:                     JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft (raw, json)
Hash identifier:          oU/eXy+41cfZ+LikP94JFvHW8kVVrfehrHe9mDZizmo=
Subject key identifier:   C4:A3:B6:4E:F0:52:21:25:FF:D5:FD:24:59:D9:77:9A:23:8B:6A:1A
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Certificate issuer:       /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial:       019D3865A067916E9C52F10181564DD86174
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
Manifest number:          1084
Signing time:             Sun 29 Mar 2026 07:01:17 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:17 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:17 +0000
Files and hashes:         1: 98ygSkK-1Ztw7Q-MRFc_SpdR9Co.roa (hash: 0au9RALDzOJkPfyVu6dInrBQ1yun08eIF9gTvZfdo5Y=)
                          2: JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl (hash: nyJEek85enEeh+2lJffDvgb35I5kKU2GkVQX6d6G5S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:a0:67:91:6e:9c:52:f1:01:81:56:4d:d8:61:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
        Validity
            Not Before: Mar 29 07:01:17 2026 GMT
            Not After : Mar 30 07:01:17 2026 GMT
        Subject: CN=c4a3b64ef0522125ffd5fd2459d9779a238b6a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8b:b6:92:40:fc:01:47:15:98:38:12:5e:ee:
                    82:c9:98:9e:21:80:68:2a:e1:b1:5e:7f:fc:8a:ce:
                    8c:3d:54:2a:7c:79:10:d4:52:ad:d9:86:7a:39:1c:
                    72:4b:25:c1:6b:67:d7:ef:a4:6b:86:3d:4b:c3:bf:
                    a9:f3:6c:ff:ec:3a:16:0b:4e:c5:15:49:88:91:10:
                    96:4e:de:a6:03:c6:31:ed:2c:b7:48:1e:a0:10:9f:
                    f1:1c:e3:40:f5:5d:61:92:34:d4:f0:34:60:0e:d6:
                    5e:d6:53:d4:54:0a:7e:b2:63:23:a0:d1:79:f2:bd:
                    85:88:89:e1:2b:34:43:89:95:77:5a:18:15:a9:92:
                    07:88:56:41:0d:5c:2d:65:5c:e1:0d:eb:68:c1:c3:
                    c1:73:ad:28:4a:50:0e:ef:a7:5f:34:6b:61:76:b9:
                    d9:0a:e9:ec:16:c6:2f:85:d5:5b:51:51:ee:54:1a:
                    55:e0:2d:ed:24:c0:5d:3c:fb:79:4d:40:80:a1:ac:
                    c2:67:ac:d9:6c:ab:e9:38:e1:e9:2d:16:96:46:9f:
                    12:2e:5b:87:2c:6f:54:ad:6a:ca:f7:2a:74:1d:f6:
                    08:c1:b1:7f:bc:19:c7:7b:da:ea:13:91:b1:58:1c:
                    01:87:5b:7e:f6:be:d0:35:53:b5:28:eb:9f:58:22:
                    49:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A3:B6:4E:F0:52:21:25:FF:D5:FD:24:59:D9:77:9A:23:8B:6A:1A
            X509v3 Authority Key Identifier:
                keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1c:de:df:9a:1c:d5:64:e1:61:47:ed:cd:58:47:d8:8b:c6:
         c7:f4:27:75:8b:f5:77:90:62:2a:d9:e3:72:84:86:43:86:7e:
         53:58:8a:03:9f:88:21:9e:ed:ab:cd:85:b9:d6:5d:f2:59:5b:
         80:32:82:07:1f:07:59:34:10:a2:74:7d:fe:44:e5:49:2f:ef:
         1f:94:b9:fe:b6:ee:95:0e:dc:b3:43:4c:62:84:ba:23:be:f9:
         16:cf:eb:b6:85:fa:81:6f:fb:18:86:c4:63:df:aa:e8:cb:2d:
         83:f9:ef:5a:43:99:a5:b2:e6:cc:dd:69:77:60:e1:de:48:24:
         02:eb:3f:d8:92:ff:58:9f:0e:e9:63:91:00:3f:0d:4f:c5:12:
         86:9b:3c:72:5a:38:57:6a:c4:3f:fd:b9:19:7b:76:1c:30:5d:
         3d:47:c3:4a:f1:52:6d:7c:17:3e:b5:2c:21:81:68:cd:72:ed:
         2e:21:56:f4:4b:cc:05:78:5e:5d:29:e3:e6:10:de:72:ff:d5:
         97:9a:0f:02:c4:a4:ba:2c:90:d0:62:20:06:0b:47:a4:9d:ac:
         7a:7d:83:bd:cf:c9:a2:42:89:3d:05:33:bd:90:a2:18:3b:15:
         74:41:1e:7b:d8:fe:ec:fa:06:e5:25:6b:0a:e0:5f:26:9b:81:
         01:54:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:08 2026 by rpki-client