Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
File:                     J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft (raw, json)
Hash identifier:          OcM7Mb6lekHyBRESrzBfivTIX83d4VxswXBlD7vkGVA=
Subject key identifier:   E2:D7:F7:A6:55:A5:73:B4:AB:95:88:2F:01:DB:CA:2A:91:AA:9C:BD
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Certificate issuer:       /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial:       019CBEBAB75C1A1937EB939697312DC299EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
Manifest number:          1866
Signing time:             Thu 05 Mar 2026 16:00:33 +0000
Manifest this update:     Thu 05 Mar 2026 16:00:33 +0000
Manifest next update:     Fri 06 Mar 2026 16:00:33 +0000
Files and hashes:         1: 0T_OaQCbJNCqGeMPQhOWXxsxGm4.roa (hash: Ft44EkrKyKsAFbkVxuqQXqMtrjyV/ZdKGwAAf8PGKYI=)
                          2: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl (hash: 3nQXDrGGOkSctmuAgbWNp4WuWtN6ipyiShllIj7YE6g=)
                          3: j54P9E7HJNxXnzx0c4ZlhgLNrmk.roa (hash: 9KgP+vcQVnAWqyQznz1mnI6dtjZmqs2SRf03m1FIUiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 16:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:be:ba:b7:5c:1a:19:37:eb:93:96:97:31:2d:c2:99:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
        Validity
            Not Before: Mar  5 16:00:33 2026 GMT
            Not After : Mar  6 16:00:33 2026 GMT
        Subject: CN=e2d7f7a655a573b4ab95882f01dbca2a91aa9cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b9:25:d3:ac:72:c5:0e:1d:eb:0e:51:45:8b:
                    7a:58:9b:18:22:94:bf:91:51:8e:78:93:59:67:a7:
                    88:f5:1f:50:fc:b2:9a:c4:53:d4:7b:9d:84:30:f3:
                    a5:fa:75:bf:a4:bc:c4:4a:a8:41:20:9d:7f:a8:4c:
                    68:c5:ce:17:1b:6a:c3:8c:37:28:93:c7:44:ab:6b:
                    df:c2:27:1b:17:aa:33:f5:7c:1b:52:46:c3:49:88:
                    c4:9a:22:b2:f8:9e:05:d1:77:80:f7:e1:59:1e:9c:
                    3b:d2:f7:2c:6d:8c:ed:6f:47:0c:d7:c6:d9:14:73:
                    fe:de:8a:26:c2:7c:8c:8a:45:67:35:9f:d2:b5:58:
                    9a:69:7f:24:4e:29:61:82:02:3a:b4:70:32:88:79:
                    e1:d0:fe:92:eb:9a:2f:81:7d:6f:dd:ba:7a:54:8a:
                    57:30:01:c6:e6:a7:28:a7:51:97:db:ba:bc:ae:bf:
                    a9:a0:89:26:16:2f:88:07:a0:41:b0:9c:ac:c5:61:
                    2e:71:4b:cf:a3:d1:2d:6e:66:6f:f0:66:33:b2:3a:
                    ce:2b:55:90:d2:3a:5d:03:88:2c:21:a0:18:c0:3c:
                    73:dd:7d:e8:c1:5b:1c:30:2f:c2:88:d9:eb:0d:2c:
                    1a:64:3d:3c:f4:5d:bb:c5:22:9c:33:e3:63:3c:73:
                    de:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D7:F7:A6:55:A5:73:B4:AB:95:88:2F:01:DB:CA:2A:91:AA:9C:BD
            X509v3 Authority Key Identifier:
                keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:90:41:5b:e6:f1:8e:42:99:2e:1b:ae:14:f6:03:fb:7f:0f:
         5f:6f:43:12:5e:69:4b:b6:db:42:da:43:76:11:c3:32:c5:67:
         5b:49:0d:b8:ab:ee:33:e1:6b:f5:ff:08:a2:eb:b0:16:f0:67:
         f1:a6:c4:4e:df:97:3a:fe:04:58:6c:50:01:b3:5b:79:ba:17:
         01:01:e7:03:d3:8b:74:6f:8e:27:10:3a:5f:94:82:e7:6a:a0:
         bd:cd:0d:08:55:c2:75:c0:28:30:f7:c3:30:f4:92:f3:fe:3b:
         95:95:4f:f8:a2:65:48:dd:1f:27:7b:6c:36:af:95:ea:5c:37:
         86:e3:7b:07:4d:9c:b6:cd:1e:cb:39:e8:9f:53:c3:36:9b:5b:
         2e:e5:db:83:cf:42:06:b6:22:86:88:a2:1d:65:03:7b:0b:70:
         6d:e0:ed:08:3f:c5:6d:5d:3d:98:e2:b1:d3:d6:24:09:8f:dc:
         32:56:60:97:0f:5a:a0:da:35:84:ad:cb:4b:1e:10:f6:bc:05:
         69:6e:7e:03:fe:4c:4c:70:39:f9:54:ae:ac:15:5b:4f:c7:65:
         e2:62:1a:ee:2d:20:44:a2:85:8b:66:37:2e:f5:1a:7c:1a:bb:
         33:98:b9:f3:a4:9f:b3:67:6f:86:86:b0:21:14:da:88:77:0b:
         29:e2:e6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:27:35 2026 by rpki-client