Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
File:                     JiNBtDPh-Py3ljItL9kmQJOW560.mft (raw, json)
Hash identifier:          zmc6zaSpLo5socnIKXcf7w/2FzLKkjh6U6tcgGNjPoU=
Subject key identifier:   BC:34:13:4C:E4:3E:FA:B5:49:15:C3:A7:BD:75:18:EF:E6:77:0E:C4
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Certificate issuer:       /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial:       019D39418FDF2BAB98AC8D0AEDD117F9245F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
Manifest number:          1225
Signing time:             Sun 29 Mar 2026 11:01:31 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:31 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:31 +0000
Files and hashes:         1: EDI4hBfvhmhntt7hYvBIEgLQOJA.roa (hash: 2bxpLwvyVSXEk8/vuBLJpeiNYeHTrUFQCELrB9BRYW4=)
                          2: Fqol7Ql1lTnQ1pbIdCZcxbCF39k.roa (hash: +R5PirogobghNFmFq7p4/kohSnTc74mKrNVHXJGdCQg=)
                          3: JiNBtDPh-Py3ljItL9kmQJOW560.crl (hash: 9BpqtdyAYxEIh3uJWKmGwfVMcc7pUnwUwL1zR620WRs=)
                          4: tbK1AbVereS_NngI45L11SaPIkg.roa (hash: pGphgE8cOkuzyKQJOlm5N3l9aQFRIzUTSTIpMJ4LzH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:8f:df:2b:ab:98:ac:8d:0a:ed:d1:17:f9:24:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
        Validity
            Not Before: Mar 29 11:01:31 2026 GMT
            Not After : Mar 30 11:01:31 2026 GMT
        Subject: CN=bc34134ce43efab54915c3a7bd7518efe6770ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9e:79:bd:a4:7e:e7:bc:1e:40:fb:c2:12:9a:
                    6c:75:4a:59:df:0f:f2:bd:e4:16:1f:3d:79:e5:d5:
                    48:e4:3c:ff:0c:de:b3:b9:43:ec:eb:2c:2e:fd:d8:
                    4d:62:2a:42:27:ff:c6:1e:1e:93:0a:a7:f3:b1:c6:
                    f8:37:fd:13:9b:df:60:9b:df:93:1c:a4:54:ac:99:
                    dc:bb:48:ba:3d:b1:ff:c1:ea:2b:a0:0f:3f:d2:38:
                    25:17:8d:e7:b3:f8:1e:83:38:5f:85:bc:08:df:54:
                    c3:71:04:fd:d0:ec:07:3a:ee:6b:dd:5b:84:d5:3a:
                    2d:c8:d1:a9:a3:4c:00:75:b2:50:b8:4d:88:ab:d7:
                    ab:23:95:ba:b0:9a:27:5c:02:03:6e:81:1a:47:81:
                    30:e8:d0:d1:99:d4:e7:c1:b8:e6:19:94:3a:b0:59:
                    3e:a8:a8:1f:e5:fb:3f:81:45:94:04:56:a6:36:52:
                    c4:40:4e:93:62:a4:58:87:c3:df:ba:69:56:c0:46:
                    e7:99:20:5c:dc:e7:15:f8:4b:d9:bf:ed:70:ba:8b:
                    93:f1:ac:bc:07:61:49:4c:5e:3e:57:b3:69:30:04:
                    78:5b:42:ce:f5:27:12:32:0b:a7:c8:6d:4b:98:52:
                    d7:52:0e:6a:70:ac:62:3c:b2:12:f3:e0:85:98:f0:
                    cd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:34:13:4C:E4:3E:FA:B5:49:15:C3:A7:BD:75:18:EF:E6:77:0E:C4
            X509v3 Authority Key Identifier:
                keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:01:ee:46:12:7a:54:c3:de:66:6f:6f:ff:45:31:95:88:88:
         7e:1f:9e:52:bd:6d:48:7d:93:c7:e3:69:73:dc:8d:42:5b:be:
         09:28:19:94:a4:44:15:a1:af:b3:2f:4e:97:45:0f:98:20:a4:
         a5:c2:3f:ff:d0:28:59:84:4b:6b:06:91:a5:59:92:db:7c:3e:
         59:1a:22:3e:cb:fa:58:02:5a:3a:06:76:2f:ab:4f:90:2b:d0:
         1d:45:1c:78:b0:99:fb:53:fc:b4:67:08:75:d2:50:f2:ba:0d:
         51:6c:25:19:79:72:ca:33:1d:89:99:d2:aa:58:02:b1:da:d3:
         49:2b:ea:e4:03:8d:fe:2d:bf:d6:7a:36:f3:66:84:95:66:ea:
         89:b1:a5:4e:1d:5c:2e:d4:c9:a7:9a:92:45:e0:21:b8:d5:55:
         f1:5f:f5:bb:7e:87:3d:29:23:ba:28:ca:4d:e3:72:c9:fd:fa:
         14:75:bc:dd:6a:19:cf:20:10:3b:b1:1b:d5:09:71:5e:0b:29:
         9d:d9:9b:d6:cc:ab:d4:2a:c9:78:4e:5c:9b:b4:5e:99:f1:df:
         aa:e9:cd:cc:cd:ff:01:bd:e4:c7:9a:1f:bb:32:0c:45:31:4e:
         95:e4:a4:8d:3b:6b:bb:19:ed:29:68:ad:6b:ff:d8:a7:0f:ad:
         87:0d:0e:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QY/fK6uYrI0K7dEX+SRfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MjM0MWI0MzNlMWY4ZmNiNzk2MzIyZDJmZDkyNjQwOTM5
NmU3YWQwHhcNMjYwMzI5MTEwMTMxWhcNMjYwMzMwMTEwMTMxWjAzMTEwLwYDVQQD
EyhiYzM0MTM0Y2U0M2VmYWI1NDkxNWMzYTdiZDc1MThlZmU2NzcwZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk555vaR+57weQPvCEppsdUpZ3w/y
veQWHz155dVI5Dz/DN6zuUPs6ywu/dhNYipCJ//GHh6TCqfzscb4N/0Tm99gm9+T
HKRUrJncu0i6PbH/weoroA8/0jglF43ns/gegzhfhbwI31TDcQT90OwHOu5r3VuE
1TotyNGpo0wAdbJQuE2Iq9erI5W6sJonXAIDboEaR4Ew6NDRmdTnwbjmGZQ6sFk+
qKgf5fs/gUWUBFamNlLEQE6TYqRYh8PfumlWwEbnmSBc3OcV+EvZv+1wuouT8ay8
B2FJTF4+V7NpMAR4W0LO9ScSMgunyG1LmFLXUg5qcKxiPLIS8+CFmPDNnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLw0E0zkPvq1SRXDp711GO/mdw7EMB8GA1UdIwQY
MBaAFCYjQbQz4fj8t5YyLS/ZJkCTluetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmlOQnREUGgtUHkzbGpJdEw5a21RSk9XNTYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81NjhlMjEtNTNhNC00ZTU1LTljNTct
OTgyODJjODlmNTE2LzEvSmlOQnREUGgtUHkzbGpJdEw5a21RSk9XNTYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81NjhlMjEtNTNhNC00ZTU1LTljNTctOTgyODJjODlmNTE2
LzEvSmlOQnREUGgtUHkzbGpJdEw5a21RSk9XNTYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewHuRhJ6
VMPeZm9v/0UxlYiIfh+eUr1tSH2Tx+Npc9yNQlu+CSgZlKREFaGvsy9Ol0UPmCCk
pcI//9AoWYRLawaRpVmS23w+WRoiPsv6WAJaOgZ2L6tPkCvQHUUceLCZ+1P8tGcI
ddJQ8roNUWwlGXlyyjMdiZnSqlgCsdrTSSvq5AON/i2/1no282aElWbqibGlTh1c
LtTJp5qSReAhuNVV8V/1u36HPSkjuijKTeNyyf36FHW83WoZzyAQO7Eb1QlxXgsp
ndmb1syr1CrJeE5cm7RemfHfqunNzM3/Ab3kx5ofuzIMRTFOleSkjTtruxntKWit
a//Ypw+thw0OgA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:36 2026 by rpki-client