Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File:                     jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier:          l3+5u0YP6M9paStYmibRtkklUBkNLF/q/VGLu8tCu60=
Subject key identifier:   57:9D:6A:0A:9F:2E:71:F1:1E:DB:AB:BF:FF:07:F1:EB:DA:B7:90:84
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer:       /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial:       01A13A80469D1CE9B11ED6DE889C10F7CAA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number:          1555
Signing time:             Wed 14 Oct 2026 13:00:47 +0000
Manifest this update:     Wed 14 Oct 2026 13:00:47 +0000
Manifest next update:     Thu 15 Oct 2026 13:00:47 +0000
Files and hashes:         1: 70JHdnkKgsjKCsL3ulG1wQpZGp4.roa (hash: +7UX7nSd4wTkbsTAwwas6oJrJFj4JuJ4qtAQ6S+C8Y8=)
                          2: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: 2aa+LZdnQmDugWr++/HBtjRZeGLwSDwfCWHOzZm53DQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3a:80:46:9d:1c:e9:b1:1e:d6:de:88:9c:10:f7:ca:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
        Validity
            Not Before: Oct 14 13:00:47 2026 GMT
            Not After : Oct 15 13:00:47 2026 GMT
        Subject: CN=579d6a0a9f2e71f11edbabbfff07f1ebdab79084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b1:d9:11:5c:92:30:a2:53:ba:90:6b:83:1f:
                    72:7f:00:61:ec:26:84:5b:a1:1c:66:cc:ac:78:89:
                    0f:cd:b3:c6:0f:73:b0:10:92:d3:bb:8d:fb:31:09:
                    5a:5e:15:4d:4d:33:be:43:52:dd:30:9b:79:4a:2a:
                    ef:cc:30:c5:32:77:eb:6b:bb:3c:55:f3:a1:32:22:
                    dd:d3:be:3d:a9:1d:8e:ba:84:4b:06:fd:3f:d8:d5:
                    29:99:20:8c:a4:b1:b3:4f:4b:fd:18:73:a8:b4:84:
                    52:56:c6:bd:d6:4e:c8:cd:43:45:fa:c0:9c:ec:93:
                    79:87:57:e3:30:75:6b:0a:1f:7f:a8:b3:2a:2c:5d:
                    a8:b6:06:02:e1:c2:79:72:42:57:41:f3:49:fb:c1:
                    11:2a:fc:20:34:ea:b3:e2:07:c3:13:74:39:d2:c2:
                    24:a9:5a:b3:6f:ba:ce:dd:03:34:3e:d2:85:77:05:
                    24:a0:77:ab:7f:ce:cb:3f:9e:4c:7f:0b:49:0d:54:
                    f1:d6:fa:9e:d5:4a:e9:3b:8b:b0:05:4e:ed:93:23:
                    56:a2:dc:08:6b:53:6f:14:d1:c7:e0:6c:a0:db:45:
                    36:05:3f:f9:32:c0:ee:7b:15:0b:c2:aa:ab:1a:0e:
                    b6:d3:16:9f:ae:33:e9:78:1a:30:fd:47:69:17:63:
                    d0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9D:6A:0A:9F:2E:71:F1:1E:DB:AB:BF:FF:07:F1:EB:DA:B7:90:84
            X509v3 Authority Key Identifier:
                keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:28:b6:c8:f8:21:16:3c:4e:9b:ba:d8:28:70:54:44:08:78:
         e0:60:31:9a:16:ac:05:ce:ec:fc:86:63:05:ca:8b:cc:e6:bd:
         2e:80:55:f6:5d:df:b3:81:b7:51:7e:f7:5e:26:e6:2b:2e:28:
         7b:1a:cb:86:02:4d:1b:63:a3:72:81:a3:6b:db:be:d3:aa:ad:
         ae:e9:4f:5f:e1:2d:c4:36:9c:a3:60:bf:8d:e8:05:2b:2b:21:
         fe:22:a4:89:aa:e4:3d:84:b4:82:fd:bf:6b:b8:79:8a:da:df:
         88:61:a6:cb:9c:d2:61:78:26:1b:65:20:44:a9:ae:c0:84:0d:
         10:67:02:7e:b9:41:e2:46:80:91:c6:15:2e:ec:ad:3a:3d:17:
         17:a3:b9:76:e3:c7:0c:e8:fd:1f:4d:34:9e:a5:0f:a3:b0:6e:
         c9:e1:a5:fd:05:f6:a1:43:33:14:e1:3e:49:d6:4f:11:ac:02:
         6b:a4:8f:03:e9:1f:04:d3:c8:13:34:29:a1:0c:a2:d5:ef:cd:
         17:29:48:f1:94:9f:6b:23:3e:5f:9b:bf:30:aa:27:5e:f3:00:
         f8:21:95:43:85:99:23:04:78:72:2a:97:65:bd:c1:18:19:b0:
         3f:79:69:74:fc:95:5b:b2:3b:7d:2b:ef:52:59:b9:13:90:9f:
         ff:e8:43:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:00:31 2026 by rpki-client