Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
File:                     SbJERkTEM0jXxQ9OUOdDVumJbb8.mft (raw, json)
Hash identifier:          KR5MZQ96oX6YAMwO1Cqjqnq3glF6I3odai25frZNmrs=
Subject key identifier:   17:C1:76:FC:3D:F4:52:DE:8D:28:C8:84:03:71:D0:B1:3E:39:A6:35
Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
Certificate issuer:       /CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Certificate serial:       019CE63609CF9F155F67FB4FC093C8C05FD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
Manifest number:          15BB
Signing time:             Fri 13 Mar 2026 08:00:26 +0000
Manifest this update:     Fri 13 Mar 2026 08:00:26 +0000
Manifest next update:     Sat 14 Mar 2026 08:00:26 +0000
Files and hashes:         1: 1y38PR10Vv3q34i9joY2RmqK9ws.roa (hash: WeX7D0CbRCituwqc2ZHAm4HR95Ee3JW1/xIonHquU3w=)
                          2: Py-y3i4hM_niS2FAlbK-g-CG53U.roa (hash: XmwAKXCN1UVsid2Ow64xLKVGJOuuu5RfqZ+9WMGZctw=)
                          3: SbJERkTEM0jXxQ9OUOdDVumJbb8.crl (hash: JU9h/pNSUtbb9dUeNy70xtMka37u7jBaQn8H87pwoGQ=)
                          4: yXa8XbTaH683GFEjkOW8VCRIjpE.roa (hash: l5nJIcq0a2VDJfhrhqSb9wFUsKAsvOaRuHeId15ZhA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:36:09:cf:9f:15:5f:67:fb:4f:c0:93:c8:c0:5f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf
        Validity
            Not Before: Mar 13 08:00:26 2026 GMT
            Not After : Mar 14 08:00:26 2026 GMT
        Subject: CN=17c176fc3df452de8d28c8840371d0b13e39a635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3f:79:ef:dd:3e:87:50:cd:ff:33:5b:ee:01:
                    50:62:ee:40:1b:c1:14:ac:be:5e:7e:7e:31:64:e1:
                    44:a5:47:d9:1b:9b:b7:b7:d5:b2:12:cd:17:11:a3:
                    a1:1a:1f:19:e9:54:07:35:76:f8:8c:81:e0:9b:b9:
                    db:e8:e2:f6:29:79:f1:df:a8:b0:f6:2e:99:d7:cc:
                    fa:fc:67:9d:52:bd:c8:61:f7:d7:56:93:a8:56:64:
                    2b:fa:da:9e:a2:1e:c8:2f:1b:0e:15:76:ee:7a:f5:
                    e5:5e:21:f4:70:6e:d3:92:a4:85:79:77:da:fa:6a:
                    98:f6:e9:c9:3c:b4:09:1b:78:9d:6d:32:48:4a:e1:
                    6b:f0:cd:58:24:b4:89:9f:ad:4f:29:af:7b:a9:b9:
                    01:d9:6a:d3:54:0f:09:7e:29:2c:1d:d9:5f:98:1f:
                    ec:67:b1:24:8a:2b:66:42:5f:36:07:af:a7:dc:c6:
                    60:48:51:a6:9f:fd:25:7b:1b:5e:ab:e7:cb:8a:00:
                    78:1d:28:8a:ac:0b:cc:6d:2e:b8:ba:49:07:88:05:
                    25:d7:b2:fc:59:30:a8:35:8a:5b:46:c2:37:e2:d7:
                    db:97:d4:28:e5:d2:82:89:68:1b:ba:32:f7:66:b1:
                    22:18:7b:41:6b:d8:55:d4:a4:e0:54:48:2c:75:54:
                    1c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C1:76:FC:3D:F4:52:DE:8D:28:C8:84:03:71:D0:B1:3E:39:A6:35
            X509v3 Authority Key Identifier:
                keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:59:ac:6d:28:69:f1:55:11:c1:cb:5a:de:65:01:86:7b:dc:
         26:7a:70:df:29:08:6a:ab:5b:59:97:53:cd:5c:5b:d9:87:9e:
         bd:6b:bf:6a:b7:f4:b4:c4:2f:74:7e:b8:a3:1f:00:de:2c:21:
         05:95:96:2b:49:0d:f4:42:e0:57:5e:4d:85:f2:3c:bc:c3:43:
         75:ab:50:f3:e1:14:c0:ed:be:37:59:07:1f:31:d6:ed:94:db:
         2c:fa:3d:5f:8e:11:e6:32:70:3b:e2:08:f4:5f:f5:67:87:6e:
         7c:87:23:63:f1:53:68:39:fd:55:b3:05:d3:af:84:e9:82:fc:
         96:81:6d:4c:19:1e:91:71:99:34:73:42:a5:f1:05:66:62:24:
         1b:ae:31:0c:eb:83:1c:17:49:bd:8b:ad:88:d3:03:9a:e3:22:
         13:c2:16:a9:15:2b:79:59:9c:df:24:68:68:d9:a7:c9:f0:2d:
         9f:01:f9:c3:fc:11:aa:29:61:0d:c6:1d:bc:bb:2c:44:17:81:
         c0:93:0b:8f:fb:1b:6a:ba:df:33:14:a8:af:d2:a5:00:f3:0c:
         bd:c3:2e:53:0d:f7:41:90:40:f5:f6:25:1a:fc:49:46:e8:91:
         08:f0:15:89:da:fd:7b:45:23:09:ea:37:07:94:28:6a:04:d4:
         21:5a:a2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:38:52 2026 by rpki-client