Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
File:                     Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft (raw, json)
Hash identifier:          ECww2+pC+O8ez5cGzWYw2ENiUr/l/5NFwlUUUvjzVcw=
Subject key identifier:   22:45:F3:6A:86:0A:1A:27:A4:D6:9C:D0:E5:18:85:01:32:BB:AE:D4
Authority key identifier: 26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4
Certificate issuer:       /CN=267d0cc5bd86d568366657aef0310d493a7176e4
Certificate serial:       019D389C2EA6EEAF90D751B936FE3275F8C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
Manifest number:          188B
Signing time:             Sun 29 Mar 2026 08:00:52 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:52 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:52 +0000
Files and hashes:         1: Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl (hash: bvkLve4+DdoGSUJTbJcLuvRE/VKEUWMeTz+m5H4flTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:2e:a6:ee:af:90:d7:51:b9:36:fe:32:75:f8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267d0cc5bd86d568366657aef0310d493a7176e4
        Validity
            Not Before: Mar 29 08:00:52 2026 GMT
            Not After : Mar 30 08:00:52 2026 GMT
        Subject: CN=2245f36a860a1a27a4d69cd0e518850132bbaed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:e1:fe:aa:d5:60:47:a9:41:01:7e:40:cb:
                    7b:11:97:c8:f2:ea:ed:da:75:ee:2b:ec:e3:e5:12:
                    5d:48:a6:03:31:82:35:58:16:ef:33:15:18:f5:4b:
                    43:c0:7b:52:01:59:89:1d:f7:fe:81:46:b0:01:b4:
                    7b:b7:2a:2c:ee:f2:7e:8b:d1:b4:6b:85:2f:e3:3e:
                    04:65:0f:50:21:83:ca:04:c8:4e:bf:81:26:01:cc:
                    96:5e:55:b0:ad:65:fc:8a:86:6f:55:ba:16:9e:2b:
                    6b:57:dc:51:33:2e:31:13:90:9b:57:f8:ef:0e:87:
                    d1:cb:32:a1:1a:ba:89:ff:7b:5d:76:82:5b:68:fd:
                    c9:5e:4e:95:8d:ae:a2:11:1f:15:63:33:5f:94:8d:
                    a6:6f:07:15:e1:78:e8:b7:c2:ee:c2:2e:4d:31:96:
                    e1:c5:8e:4d:07:e2:d3:17:46:1d:d2:66:4a:a1:0e:
                    64:e2:9b:77:eb:ed:17:14:06:d8:af:78:a7:69:4f:
                    f6:df:c3:8c:c6:16:2d:fd:95:a6:d3:cd:5f:06:10:
                    25:3f:17:d0:a2:41:ac:18:0a:56:d7:19:5f:fa:67:
                    5d:fe:47:68:f2:4e:cf:9a:88:a6:05:1f:85:c4:16:
                    5b:7e:c0:8b:e6:a8:21:45:cd:15:f6:aa:52:04:31:
                    56:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:45:F3:6A:86:0A:1A:27:A4:D6:9C:D0:E5:18:85:01:32:BB:AE:D4
            X509v3 Authority Key Identifier:
                keyid:26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:89:88:74:11:18:62:cc:9e:b7:5c:d5:49:79:b1:a4:70:7e:
         f3:ad:13:7d:3f:f8:53:56:9e:e0:dc:e5:69:56:b1:cc:a3:ea:
         b8:94:2b:ad:20:2f:6f:9b:2e:0c:1d:cb:59:0e:46:a1:2c:2f:
         8d:63:a8:5d:6e:86:de:a0:95:5f:37:f7:84:ba:12:2b:6a:d3:
         ef:c0:d6:9f:f0:ea:dc:ce:7c:a7:81:ea:b1:76:40:ac:df:79:
         e9:93:e7:a1:c5:56:f3:2e:01:d8:ac:6e:24:33:b1:3c:a3:3d:
         db:20:a8:61:aa:ad:29:f5:01:ac:18:63:2e:aa:ef:3d:1e:f3:
         c7:48:61:fd:a1:99:0a:fe:ec:d2:09:7c:f8:e6:d4:9c:e2:c2:
         8a:d1:48:86:e1:bc:dd:3d:ff:d3:20:3d:67:f8:f4:3b:8c:8d:
         12:71:97:c4:fe:df:91:37:63:69:63:bf:c2:5e:b2:f0:02:01:
         ea:64:a4:94:0a:b9:89:86:2d:18:95:5a:d8:26:94:6d:2b:7d:
         04:37:b3:26:77:9a:a5:29:26:fa:ae:df:bf:75:36:bb:76:65:
         c1:36:3f:ea:d8:41:e6:0a:5f:13:e1:e2:90:2a:12:13:a9:c3:
         ae:d7:63:3c:f7:d5:25:1f:46:17:86:3b:51:21:20:8a:64:a8:
         5d:00:48:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:54 2026 by rpki-client