Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
File:                     J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft (raw, json)
Hash identifier:          25p3+89WZbxN7pzUL4MCZe9fgxZaVidJ8yIcvk7MfEk=
Subject key identifier:   48:32:13:D4:A7:C3:43:A8:AE:4E:4E:2F:C0:64:06:F8:A2:88:2E:22
Authority key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
Certificate issuer:       /CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Certificate serial:       019D37F74D1F8C2AD69513C0963F6EC077A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 05:00:47 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:47 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:47 +0000
Files and hashes:         1: J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl (hash: ulkUBdIZW95rRES4/LpID6AvNdotFpbByZlIi02aSvU=)
                          2: opETjfO6mWFYsmS6JQzzGRH9WxI.roa (hash: 7PPELYdKKburZhJ6qtTeTQUYG9VrfTnWioCBqvymRAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:4d:1f:8c:2a:d6:95:13:c0:96:3f:6e:c0:77:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
        Validity
            Not Before: Mar 29 05:00:47 2026 GMT
            Not After : Mar 30 05:00:47 2026 GMT
        Subject: CN=483213d4a7c343a8ae4e4e2fc06406f8a2882e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:35:5f:59:f2:ce:3a:22:6a:5e:1b:fb:c8:
                    79:c4:03:c7:22:6d:b2:19:ae:4f:d4:ae:da:cf:89:
                    cd:bd:5e:71:5c:6c:0c:03:78:9d:4e:59:d6:1a:94:
                    b4:f6:8f:3f:a9:2d:48:c4:1b:2e:47:dc:e3:90:9e:
                    71:c4:f2:70:e2:9d:77:ec:99:3b:7a:e6:f1:04:01:
                    fd:8b:39:36:d4:bb:4e:bd:5c:d9:5f:75:de:a1:18:
                    da:18:67:47:0e:b0:91:10:ab:1f:11:62:30:a8:1b:
                    ce:73:a7:7c:a2:52:a3:5f:0c:f9:80:3c:dc:36:bb:
                    87:4f:ed:cf:f0:ce:4a:ed:d2:e2:37:85:20:dd:af:
                    ff:7d:40:df:1e:22:aa:de:49:10:71:d1:98:56:87:
                    89:3c:54:83:64:db:e9:6b:b1:8a:35:12:4f:45:01:
                    41:1d:c9:11:b9:62:ad:4a:11:2e:8a:be:92:a7:d6:
                    38:72:1b:00:0b:ba:93:33:5a:9a:59:c7:c0:9f:a2:
                    15:c8:7c:ea:72:f8:2d:d5:92:c2:86:0c:2b:4d:ab:
                    40:0f:ec:d0:91:41:d6:62:53:84:50:93:0f:a6:0f:
                    1c:fa:9e:7c:aa:02:9b:e1:69:2b:7b:59:56:0f:d8:
                    28:34:e6:df:05:49:48:ea:ca:f4:f9:26:53:91:3e:
                    d5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:32:13:D4:A7:C3:43:A8:AE:4E:4E:2F:C0:64:06:F8:A2:88:2E:22
            X509v3 Authority Key Identifier:
                keyid:27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:7d:13:f0:02:da:a9:e3:82:59:cd:10:3e:02:3e:74:7a:42:
         16:af:cf:72:43:98:97:cb:19:ea:12:f2:dc:e6:7f:3c:4c:25:
         3b:a7:e9:6c:cd:06:c4:cc:4d:62:b9:9b:d9:7e:34:1c:82:b7:
         9c:10:19:fd:41:3a:28:f3:75:1d:2e:c7:7a:ff:22:39:48:45:
         de:83:86:f3:0e:ed:db:64:9d:bc:fa:db:99:a6:b6:be:6d:eb:
         f3:33:7a:8c:58:d3:26:6f:08:97:f1:05:bf:9c:70:e7:5a:83:
         02:c4:ba:dc:b4:b3:c2:c4:05:cf:58:76:77:c7:24:23:1c:0c:
         a8:49:81:0b:14:d9:28:21:2d:5b:af:8b:0a:e8:b5:c1:cf:7a:
         fe:2e:f8:1b:8a:9d:2a:a1:7e:d9:65:b4:60:ad:a3:7e:d7:f7:
         34:86:de:d1:42:fb:57:03:b1:2f:25:7b:b5:bc:21:90:13:d1:
         72:cc:c7:2f:89:36:b1:78:ee:98:48:3e:0a:25:78:1e:34:65:
         e2:80:e6:cd:23:18:b3:86:ae:d9:5a:e5:a5:c0:98:db:4e:bf:
         c2:9b:d4:fb:25:96:33:fc:6d:41:43:a5:f6:58:69:f6:a1:29:
         a8:0b:76:b5:e6:06:71:52:37:8a:18:08:fb:3a:13:8e:91:05:
         c4:09:6d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:30 2026 by rpki-client