Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
File:                     raJar-Ophw6VJK-gJlmH7VpaTaM.mft (raw, json)
Hash identifier:          rxisYaZSeQt9hGTBhOz/FqShmafuFGGFrVcIB+nLX0I=
Subject key identifier:   2B:E1:E9:01:DB:23:2C:7E:C6:67:16:8A:6D:A9:F4:22:34:FB:BF:BF
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Certificate issuer:       /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial:       019CE6A3DFF02B081D04DF7591F9AB8359F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
Manifest number:          18A2
Signing time:             Fri 13 Mar 2026 10:00:25 +0000
Manifest this update:     Fri 13 Mar 2026 10:00:25 +0000
Manifest next update:     Sat 14 Mar 2026 10:00:25 +0000
Files and hashes:         1: 6g2jAj3wPlnIocB3gv_q01JRNMI.roa (hash: BoIPgQYmO7xfoT6Wc1Gklqbq8ldWVr0gxcD6FGVAfrw=)
                          2: J78VM0qajB7rh9yu3sFqYPoFQ5E.roa (hash: +P584eQDqt5VMIbzVnH+2JMF7g7sBvRvoJsnsuzsctc=)
                          3: LCiiiyNl3fmiTu2hqQ6fBJ-TTbU.roa (hash: sFqRolKm0Znj/M6WIHuOprIWndPgzew2UV2ZOuaE3Bo=)
                          4: Mg5spav-Aj8VvIh1-2RHRBIttEU.roa (hash: SH1KuCQgQ4RFoHS3pbRrLNbrSAXCyG9eS+C3l6//Hf8=)
                          5: Oz2typdgzDQc0ctUseKKMFhx06Q.roa (hash: syifUOQ+Jq/Hybnjzbf9hzjzGqX0Taf7r/ZLA0VrpP0=)
                          6: fMF9qnlP4WB5LHh5V8LwNwc9f4Q.roa (hash: fmzVayjcNIPJoq0/A+Ybi5cj066xRm3fDk6Fawjmxcg=)
                          7: hMCrIUKHXGHOtkHZ8Y6eI3UIeCw.roa (hash: rMGJFYfVplpRpoCAdt4v/1BCKdLOOcSLzsmFWHhqGnQ=)
                          8: lPiHeORLKEKfujHMYKmMKgjplak.roa (hash: jBAhlOJ7x1dzG58s1VItmsDLFO+pFQTxwtJmgsn2S2o=)
                          9: q0e2mOxIUzAfYPRIbushYUqYPEk.roa (hash: mjQc3SMPF6rvuC90lgX5o3Yun+cCb8geikGE6fcJ2cw=)
                          10: raJar-Ophw6VJK-gJlmH7VpaTaM.crl (hash: COKWU/RRB3n5Nk7GOojXMXzGYjKuajPcV40MOkR9xQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:a3:df:f0:2b:08:1d:04:df:75:91:f9:ab:83:59:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
        Validity
            Not Before: Mar 13 10:00:25 2026 GMT
            Not After : Mar 14 10:00:25 2026 GMT
        Subject: CN=2be1e901db232c7ec667168a6da9f42234fbbfbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:1e:6a:7a:63:3e:ec:2f:4e:ed:56:ec:c6:
                    fc:a5:28:78:fd:38:a6:3d:0e:ef:0c:42:39:30:38:
                    84:af:b8:e9:67:a6:c4:a4:1b:d6:dd:13:f9:e7:c2:
                    90:cb:f3:32:73:04:e9:2c:52:ba:a6:ef:0a:d9:2c:
                    8b:b4:f5:22:46:8d:1e:10:58:68:55:f6:b3:a2:28:
                    f9:b6:fe:4b:e2:e5:1d:c5:fd:62:99:b9:8c:d4:22:
                    69:98:6d:57:40:2b:86:f0:ae:ac:89:61:e7:e8:4f:
                    43:bb:50:04:1d:98:08:5f:16:30:b1:f7:84:ec:0a:
                    95:63:ab:06:bc:59:23:06:b9:d8:dc:a0:de:d4:8e:
                    de:2e:6b:1a:5b:f6:24:92:11:23:f9:f7:fa:63:bd:
                    3a:25:ac:68:5a:85:64:81:e0:ac:b5:14:6e:92:96:
                    ca:cd:0c:71:d1:30:6f:27:f0:d7:00:64:4a:80:d1:
                    08:48:ab:77:7b:25:e6:52:7d:76:c1:16:24:ae:a6:
                    4e:b1:74:d4:76:fe:f4:73:8f:50:1e:5c:5e:90:2b:
                    50:e3:a5:0e:ee:32:0e:a8:f0:c9:bc:69:59:4e:1e:
                    ff:51:fc:f0:05:bd:73:13:fc:55:b5:77:80:69:f7:
                    1c:57:7d:75:7e:43:be:00:62:3f:ad:d4:99:43:78:
                    16:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E1:E9:01:DB:23:2C:7E:C6:67:16:8A:6D:A9:F4:22:34:FB:BF:BF
            X509v3 Authority Key Identifier:
                keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:dd:6d:c9:d4:5a:72:50:f5:9f:96:c2:ac:05:b9:28:95:a7:
         cc:4c:fd:ee:fb:5f:65:19:d5:40:0e:fa:87:99:53:4f:55:4d:
         be:bb:12:46:73:da:d3:e4:30:8e:1f:9a:48:fd:17:61:5a:3b:
         d9:47:df:eb:0c:53:bb:c1:79:d1:ae:f6:fc:42:d6:37:20:e5:
         e7:60:2a:34:9b:74:b3:83:e9:f8:66:04:6d:d6:94:59:ac:6d:
         21:54:01:14:1b:8e:e9:da:56:4d:a3:01:5c:2e:2d:9d:bc:04:
         72:e7:80:3f:55:51:21:d6:70:bc:59:d1:eb:90:a1:13:83:7e:
         c3:1a:28:dc:73:19:33:0b:ac:37:d5:aa:1e:87:f7:e7:cc:7f:
         4c:28:bd:ca:c5:99:e0:50:b8:98:66:fb:fb:a8:bf:65:95:62:
         d8:8c:e6:e5:6c:41:64:b3:14:d1:d7:a8:04:9b:b4:e2:34:34:
         19:76:ca:ed:2f:0a:39:27:35:03:33:d7:6e:96:4d:e7:c0:ee:
         cc:64:9f:6b:64:0b:b5:16:38:63:ad:21:8b:8f:72:b8:bc:61:
         fd:ad:0f:de:51:14:1a:9c:b3:a8:cd:7b:8e:1b:d0:d5:5d:eb:
         10:66:bc:6c:5a:a5:e8:93:61:89:b1:29:10:82:46:ee:b4:2d:
         ca:82:55:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 17:57:45 2026 by rpki-client