Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
File:                     Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft (raw, json)
Hash identifier:          nhIu7yx6mP0D8hu/WCit94zgqoXUZHR0tZDR8boy56M=
Subject key identifier:   C4:02:41:42:06:27:45:B3:61:7B:8F:0D:15:58:13:41:1D:83:17:33
Authority key identifier: 26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
Certificate issuer:       /CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Certificate serial:       019D38D2CD4351B866B2BF85A20961C56DF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
Manifest number:          128B
Signing time:             Sun 29 Mar 2026 09:00:32 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:32 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:32 +0000
Files and hashes:         1: Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl (hash: 1RThytKE0umr+2BkcUyrZ468GRWeNcaHjD8vuzFlxGk=)
                          2: YB2rJph3jtykrU245nJwP-cGOQE.roa (hash: aIiLHbCrLpw92COeGL73Eh5jy1guo4i8Y4Mb82Pormc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:cd:43:51:b8:66:b2:bf:85:a2:09:61:c5:6d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262f7322fbe9743eb471383a090b35b5296a2a8a
        Validity
            Not Before: Mar 29 09:00:32 2026 GMT
            Not After : Mar 30 09:00:32 2026 GMT
        Subject: CN=c4024142062745b3617b8f0d155813411d831733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a2:5b:43:9c:ee:6f:a7:0c:11:60:f2:83:31:
                    3c:f5:c2:cc:aa:44:93:2c:73:1a:f1:08:90:23:2e:
                    24:67:08:ae:b5:26:ce:4a:77:52:28:18:7b:b0:f6:
                    3c:bc:54:03:5e:14:19:7a:73:54:33:0c:00:96:98:
                    f3:f7:c4:ac:91:35:ab:57:5b:ba:de:b1:c2:95:a7:
                    ea:26:af:09:97:0d:c2:80:56:3b:59:fc:b8:8c:44:
                    ab:09:a2:fe:24:66:41:a4:d7:f0:b6:25:f2:17:8e:
                    fe:9e:ff:55:a5:2c:6c:c6:95:f9:db:2d:55:c5:47:
                    5e:cc:b1:80:cb:79:6d:85:e6:34:23:ee:97:7b:55:
                    69:f8:16:a2:16:0d:7d:66:0c:a0:7d:f5:99:e6:4d:
                    1b:82:e4:d9:d0:d6:07:6e:c3:b0:90:55:84:89:ee:
                    2e:a9:ac:b4:b9:9f:c7:02:72:f1:2b:6e:3b:51:0e:
                    cf:2a:4e:45:a5:ef:77:cd:90:54:f2:e8:32:7e:4a:
                    44:fb:d3:87:c6:d3:5d:56:dd:c0:ff:11:5c:b6:4a:
                    2c:c6:4d:cc:f2:40:e3:98:9e:aa:98:16:c4:71:8a:
                    29:8b:16:eb:53:16:a5:47:ab:85:c0:3f:0e:7f:29:
                    51:41:4a:74:13:aa:cb:fb:d9:72:df:d0:e1:1b:a9:
                    b5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:02:41:42:06:27:45:B3:61:7B:8F:0D:15:58:13:41:1D:83:17:33
            X509v3 Authority Key Identifier:
                keyid:26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f7:82:2b:05:b9:16:dd:32:48:8e:df:8f:45:e1:fc:08:37:
         04:db:8a:3d:6f:e7:b2:d9:41:05:6c:9a:4c:63:70:8d:53:2f:
         81:66:40:e5:a5:b9:9c:58:21:d7:11:17:39:c7:72:54:bf:ea:
         29:69:b0:f2:36:ea:01:59:1a:95:03:d3:7b:89:0c:12:75:0f:
         5a:39:e8:d4:eb:70:50:69:eb:83:68:4c:1c:7a:c7:bd:0b:44:
         7e:7e:9b:f2:8a:83:8a:dd:dc:a3:a1:c8:81:8b:0b:53:0f:c5:
         3e:8c:74:76:01:91:a0:b8:fa:3b:cb:8e:f1:49:8c:8d:30:10:
         14:09:6c:b6:00:61:bf:37:ad:e2:9e:a1:8d:c4:83:2a:84:cf:
         3d:eb:b2:33:43:72:01:64:55:b9:bd:32:df:65:a6:99:bb:e2:
         2e:36:16:f5:41:4c:8f:8e:21:f9:14:38:de:42:70:06:4f:87:
         69:99:9b:03:1c:68:b6:15:9f:f4:5c:2c:ce:af:c7:20:a8:e0:
         b1:8a:c4:93:4d:63:10:d1:ae:d4:ae:1d:f0:b7:4e:04:69:60:
         2e:9e:b0:3e:33:9b:5c:5c:ed:f5:97:42:30:a3:52:61:de:e3:
         66:e7:5b:5e:a1:c6:1e:09:50:24:63:1d:8c:7c:d0:95:a3:26:
         39:aa:64:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040s1DUbhmsr+FoglhxW33MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MmY3MzIyZmJlOTc0M2ViNDcxMzgzYTA5MGIzNWI1Mjk2
YTJhOGEwHhcNMjYwMzI5MDkwMDMyWhcNMjYwMzMwMDkwMDMyWjAzMTEwLwYDVQQD
EyhjNDAyNDE0MjA2Mjc0NWIzNjE3YjhmMGQxNTU4MTM0MTFkODMxNzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KJbQ5zub6cMEWDygzE89cLMqkST
LHMa8QiQIy4kZwiutSbOSndSKBh7sPY8vFQDXhQZenNUMwwAlpjz98SskTWrV1u6
3rHClafqJq8Jlw3CgFY7Wfy4jESrCaL+JGZBpNfwtiXyF47+nv9VpSxsxpX52y1V
xUdezLGAy3ltheY0I+6Xe1Vp+BaiFg19ZgygffWZ5k0bguTZ0NYHbsOwkFWEie4u
qay0uZ/HAnLxK247UQ7PKk5Fpe93zZBU8ugyfkpE+9OHxtNdVt3A/xFctkosxk3M
8kDjmJ6qmBbEcYopixbrUxalR6uFwD8OfylRQUp0E6rL+9ly39DhG6m1UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQCQUIGJ0WzYXuPDRVYE0EdgxczMB8GA1UdIwQY
MBaAFCYvcyL76XQ+tHE4OgkLNbUpaiqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmk5ekl2dnBkRDYwY1RnNkNRczF0U2xxS29vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kMDdiMTUtMjg1NS00Mzg4LWJjYjMt
NTBlMTI5YzhhMzZjLzEvSmk5ekl2dnBkRDYwY1RnNkNRczF0U2xxS29vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kMDdiMTUtMjg1NS00Mzg4LWJjYjMtNTBlMTI5YzhhMzZj
LzEvSmk5ekl2dnBkRDYwY1RnNkNRczF0U2xxS29vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPeCKwW5
Ft0ySI7fj0Xh/Ag3BNuKPW/nstlBBWyaTGNwjVMvgWZA5aW5nFgh1xEXOcdyVL/q
KWmw8jbqAVkalQPTe4kMEnUPWjno1OtwUGnrg2hMHHrHvQtEfn6b8oqDit3co6HI
gYsLUw/FPox0dgGRoLj6O8uO8UmMjTAQFAlstgBhvzet4p6hjcSDKoTPPeuyM0Ny
AWRVub0y32WmmbviLjYW9UFMj44h+RQ43kJwBk+HaZmbAxxothWf9Fwszq/HIKjg
sYrEk01jENGu1K4d8LdOBGlgLp6wPjObXFzt9ZdCMKNSYd7jZudbXqHGHglQJGMd
jHzQlaMmOapkVg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:20 2026 by rpki-client