Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
File:                     SjQVWNugttuUxVzgbjBv9lGdbvE.mft (raw, json)
Hash identifier:          g1PHGl+cx+HWzEHDcP6INVI9uQgQI/QrD+lwyArM7/Q=
Subject key identifier:   6D:C0:76:6D:98:D5:5C:62:47:E0:D5:3F:89:28:96:78:2E:F5:77:ED
Authority key identifier: 4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1
Certificate issuer:       /CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
Certificate serial:       019D39E5CD6A2567330A97CEF3F39A78D9EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
Manifest number:          0AC8
Signing time:             Sun 29 Mar 2026 14:00:54 +0000
Manifest this update:     Sun 29 Mar 2026 14:00:54 +0000
Manifest next update:     Mon 30 Mar 2026 14:00:54 +0000
Files and hashes:         1: RS_ewMX54hVbpRD6ei0HJL0oRHE.roa (hash: I5QkBNTE69fpfHSb13XFTFHNBBve1NDU9UJ/JapJNdQ=)
                          2: SjQVWNugttuUxVzgbjBv9lGdbvE.crl (hash: 6wvQAHODVRiCSDJF/qj55isXr9mdenUzqJQDqbZmVIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:cd:6a:25:67:33:0a:97:ce:f3:f3:9a:78:d9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
        Validity
            Not Before: Mar 29 14:00:54 2026 GMT
            Not After : Mar 30 14:00:54 2026 GMT
        Subject: CN=6dc0766d98d55c6247e0d53f892896782ef577ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:f5:ea:bf:b1:f7:a1:ba:9f:4e:ad:fa:16:
                    bc:9e:0e:76:84:95:94:db:e9:45:51:db:0f:26:04:
                    d4:23:ff:fe:0f:20:ab:46:2e:15:32:0b:7c:d1:b4:
                    61:5f:78:85:f8:40:70:f2:16:55:b1:51:37:e5:82:
                    4b:14:fc:7f:7f:b9:1d:5d:51:4a:c9:32:19:cf:ae:
                    c7:7c:a2:25:50:c8:a6:48:ce:ab:45:3f:29:17:9e:
                    68:2a:74:16:ff:8b:74:cc:63:46:bf:75:c7:f4:ed:
                    bb:e2:e4:88:fb:1d:68:f2:b9:22:43:01:a6:a7:f7:
                    19:e7:2e:61:50:97:7d:b3:2e:0d:f9:63:39:a7:81:
                    35:6e:46:37:3c:ba:f8:4b:b2:ea:2e:90:d8:f3:bd:
                    89:51:ff:c8:02:dc:3d:5e:40:6a:0a:0c:b1:fa:15:
                    d7:bb:eb:e8:4a:3d:46:e4:1a:31:15:b0:d9:d2:ad:
                    ef:8e:76:74:db:c5:12:8e:dd:48:21:7d:5a:96:ca:
                    41:b3:0b:dc:3d:b5:6c:0f:5e:82:07:eb:70:5b:bc:
                    af:85:d1:0b:41:2a:fb:5f:f3:59:96:3a:26:db:b8:
                    39:79:ff:50:94:f6:9f:c1:69:d2:86:77:76:04:12:
                    ba:38:42:4d:18:89:c2:bc:23:55:ed:f8:bb:9b:a4:
                    93:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C0:76:6D:98:D5:5C:62:47:E0:D5:3F:89:28:96:78:2E:F5:77:ED
            X509v3 Authority Key Identifier:
                keyid:4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:5d:38:bb:5a:b4:8f:1c:51:73:af:bb:23:be:03:bc:48:2d:
         c7:d7:7f:ef:24:f6:aa:aa:d0:f5:16:97:69:94:c0:80:c5:a5:
         99:2f:9a:69:18:6a:82:6d:d1:4e:29:fc:71:b2:8e:ca:68:3c:
         a8:d2:e1:b6:29:c6:0f:51:bd:76:16:6b:df:74:32:18:1c:df:
         b0:62:90:54:b1:96:67:67:d6:78:a4:26:e6:05:f7:cb:90:99:
         4b:86:ee:5e:0c:71:4a:6a:88:5a:69:0a:d8:1b:d8:7e:4f:c9:
         43:f3:62:cd:56:a6:48:7d:52:e2:f7:95:96:1f:cc:6f:07:3d:
         02:f2:3b:45:74:05:58:aa:52:89:fb:f1:7e:52:d7:74:9d:b3:
         a2:c6:22:10:33:c2:0a:c4:33:34:34:30:fd:c1:c3:f1:4c:8d:
         23:b5:c5:46:7f:d7:11:15:f4:da:b7:c4:9f:de:5e:24:ff:63:
         ed:82:6d:0d:32:b3:27:fb:a2:f4:7c:8b:40:61:ce:f1:98:f5:
         33:3d:97:57:72:f6:b1:dd:f7:7b:f2:21:59:cb:3e:ee:27:14:
         09:c9:72:ea:b6:8f:92:a2:2d:83:1b:75:ef:a0:26:3a:4c:be:
         f7:63:14:a8:f2:92:5a:29:de:ca:e9:24:5f:24:fd:e5:df:8e:
         de:af:99:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:34 2026 by rpki-client