Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
File:                     jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft (raw, json)
Hash identifier:          Z15UPpiaYkQHkMmDG+sjuqTpXtjF3m5hBOUaRnp+OMc=
Subject key identifier:   27:0E:18:7D:30:C1:80:A9:74:29:05:11:DA:6C:E1:2C:D0:0C:5B:B7
Authority key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
Certificate issuer:       /CN=8e79cef458de50392e3c02b69182f34c60148d24
Certificate serial:       01A0DB720170D6BAE1C9FA492DCF322677A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
Manifest number:          0441
Signing time:             Sat 26 Sep 2026 02:01:16 +0000
Manifest this update:     Sat 26 Sep 2026 02:01:16 +0000
Manifest next update:     Sun 27 Sep 2026 02:01:16 +0000
Files and hashes:         1: _c6xx4G9gRqlWT599mmQOoWoW50.roa (hash: c/9VJ4HKTN9Q4dyySRrDW6GfcNhn9tZLqvs7ju71Tx8=)
                          2: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl (hash: LcPa8kiLrhAn05g+CzT31FQBoE+08Jp80qXYW6EqJhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:72:01:70:d6:ba:e1:c9:fa:49:2d:cf:32:26:77:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e79cef458de50392e3c02b69182f34c60148d24
        Validity
            Not Before: Sep 26 02:01:16 2026 GMT
            Not After : Sep 27 02:01:16 2026 GMT
        Subject: CN=270e187d30c180a974290511da6ce12cd00c5bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:00:45:d1:7a:12:26:ec:05:0b:9c:8a:01:
                    32:c3:1a:f9:3d:1d:35:01:99:2f:9b:55:12:c8:69:
                    24:4c:3f:6e:6f:0a:84:21:ea:45:31:e7:09:ba:35:
                    2e:48:f0:ba:9d:3c:73:62:09:7a:ef:3b:fe:8f:e1:
                    65:95:f8:9f:2b:02:9c:cd:38:6a:ff:a2:8a:d8:61:
                    7c:cc:fb:b0:2d:e4:e6:18:8a:b2:c4:82:41:fa:1d:
                    2d:18:ff:f6:8e:74:78:13:6f:9d:f5:2d:39:e1:62:
                    1d:3a:f0:c8:34:cd:52:64:62:ac:f4:fc:ec:77:24:
                    61:e8:df:6b:14:79:37:9e:67:28:fe:06:0f:3d:f9:
                    de:f1:44:01:9c:a5:6f:bb:dc:3f:4b:a1:5a:a9:66:
                    65:55:ed:18:94:2e:db:fa:19:18:e6:fd:e8:e7:80:
                    57:46:a4:7f:cf:16:69:1e:f9:6b:05:01:98:56:76:
                    5c:14:6a:c6:b3:a9:ac:ff:8f:9f:9d:39:56:13:97:
                    0d:52:a4:e7:1f:7f:b6:00:ae:a0:89:19:b2:19:29:
                    15:e8:32:dc:55:9b:04:1e:2a:1d:f6:70:4d:9b:c1:
                    8e:01:04:cb:92:37:81:b7:3f:08:4d:38:4a:fd:38:
                    69:f2:e9:51:73:13:7e:e0:7d:02:0e:75:39:95:d3:
                    b5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0E:18:7D:30:C1:80:A9:74:29:05:11:DA:6C:E1:2C:D0:0C:5B:B7
            X509v3 Authority Key Identifier:
                keyid:8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9d:55:a8:9d:56:75:ab:5d:2d:ff:31:93:29:b4:20:2e:96:
         8e:13:9b:a7:62:77:b3:84:e0:53:34:da:54:8e:8e:ab:10:3f:
         0b:df:b4:78:b3:74:31:83:0a:2a:09:46:9e:9f:16:eb:44:ab:
         05:6c:0a:e3:c6:22:90:d2:66:7e:1e:5d:b5:2e:92:8f:14:66:
         9e:bd:46:a3:51:af:04:e7:d0:98:a0:0b:be:24:0e:b1:dd:cb:
         a9:69:90:f4:c0:cc:e8:23:e6:da:55:82:0b:e8:2e:c0:ec:fd:
         8a:11:ff:eb:69:eb:ac:86:c5:89:5a:62:e6:29:89:91:dd:04:
         16:d3:63:0f:3b:ad:06:68:00:7c:c2:48:56:06:4f:cf:8c:c5:
         08:85:32:78:64:64:d9:96:bb:fe:2f:54:b5:c5:28:91:b2:1a:
         7b:da:54:08:05:b5:66:03:67:45:d8:94:34:b9:98:21:54:93:
         15:71:81:8d:8d:ab:27:c8:8c:7b:3a:3a:0b:1f:68:09:20:d7:
         3e:fc:d1:0b:6e:06:13:01:d4:a7:02:80:a5:bb:6b:91:0b:e1:
         b7:81:89:eb:a4:5b:aa:9c:08:5c:1a:51:a8:dd:a9:f5:f4:a7:
         d7:82:1a:d8:3d:2e:be:3e:34:03:e2:d7:f0:e9:26:e2:88:2e:
         bb:06:08:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:32:23 2026 by rpki-client