Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.mft
File:                     JW-mc9s74eLrq_uZbQfPSSJevAg.mft (raw, json)
Hash identifier:          H60kiIJFWLt/3OaArCjMgw2uHZO36IXptuEsXBOm3U8=
Subject key identifier:   A1:03:8C:C9:44:B5:6A:5E:B1:65:95:F9:9B:28:4F:AA:B8:13:9A:E4
Authority key identifier: 25:6F:A6:73:DB:3B:E1:E2:EB:AB:FB:99:6D:07:CF:49:22:5E:BC:08
Certificate issuer:       /CN=256fa673db3be1e2ebabfb996d07cf49225ebc08
Certificate serial:       01A0DE72D1DE3D290CB51B0470460153D12F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JW-mc9s74eLrq_uZbQfPSSJevAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.mft
Manifest number:          010C
Signing time:             Sat 26 Sep 2026 16:01:01 +0000
Manifest this update:     Sat 26 Sep 2026 16:01:01 +0000
Manifest next update:     Sun 27 Sep 2026 16:01:01 +0000
Files and hashes:         1: 1w7jxh2aEyNaIYWXC_VHPbHo1oc.roa (hash: gsx85QJ2WG90A2G8uFzj2SzVBAenv+NakL2t0df+a+8=)
                          2: JW-mc9s74eLrq_uZbQfPSSJevAg.crl (hash: 4zyeALEK7AmrKFA3gymzrKFiciW69enqMcHOlFERw+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JW-mc9s74eLrq_uZbQfPSSJevAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:72:d1:de:3d:29:0c:b5:1b:04:70:46:01:53:d1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256fa673db3be1e2ebabfb996d07cf49225ebc08
        Validity
            Not Before: Sep 26 16:01:01 2026 GMT
            Not After : Sep 27 16:01:01 2026 GMT
        Subject: CN=a1038cc944b56a5eb16595f99b284faab8139ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:dc:ea:14:5d:16:b4:95:71:41:0f:f3:26:4c:
                    39:4d:e0:db:b5:ff:59:6b:96:f7:14:e2:fd:60:71:
                    42:7d:dd:c7:53:53:1a:f8:19:b9:8c:5c:fb:1e:d9:
                    94:f7:c9:d6:90:f1:a1:bf:8d:81:04:3e:5e:36:ae:
                    f5:b9:f6:61:86:43:8a:0b:7f:b8:55:df:c7:47:c4:
                    6e:c2:3c:30:9b:58:dd:b4:7e:20:5a:41:b6:ab:54:
                    d4:8e:e9:70:52:5c:2f:01:ac:53:68:fa:61:59:a4:
                    a2:da:18:0a:58:1f:08:4e:3b:44:9d:c9:14:0a:45:
                    54:a1:02:dc:93:ce:fc:93:ba:97:e1:7b:ab:7e:9f:
                    a6:e3:5e:6f:3e:7b:d3:74:ac:db:59:98:3e:ff:04:
                    2f:24:d5:70:9b:5d:49:71:77:26:8e:51:ae:7a:0d:
                    ec:49:60:1a:1e:4a:52:a6:95:ec:6a:ae:d2:57:b2:
                    39:01:61:9e:70:f2:eb:a7:6a:7d:ae:99:bb:04:96:
                    92:eb:ab:da:98:b2:81:47:25:4b:63:cb:15:d6:b4:
                    fb:40:7a:7f:c1:ae:7f:f1:63:8d:e9:37:c5:e0:48:
                    82:e8:fc:87:90:f4:c3:dd:d7:e6:0a:17:b0:00:74:
                    fb:5d:d4:14:9f:cf:ca:00:9a:45:e2:81:87:b1:1f:
                    54:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:03:8C:C9:44:B5:6A:5E:B1:65:95:F9:9B:28:4F:AA:B8:13:9A:E4
            X509v3 Authority Key Identifier:
                keyid:25:6F:A6:73:DB:3B:E1:E2:EB:AB:FB:99:6D:07:CF:49:22:5E:BC:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JW-mc9s74eLrq_uZbQfPSSJevAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:64:c0:0f:fb:7c:c9:3e:ec:be:5c:ea:5e:6f:6a:f1:c1:4a:
         73:7f:ec:cc:37:15:9f:46:37:4f:83:77:81:f0:1c:6d:13:fe:
         d0:fc:26:0c:3a:d0:a8:be:d9:cd:8c:00:6f:35:6a:53:42:75:
         62:38:a8:cd:82:2e:b1:46:21:fb:96:2b:27:3d:84:84:f4:09:
         67:c4:64:6e:d0:9f:02:33:6a:d5:bc:c5:af:59:69:bd:69:c3:
         1a:9f:4f:f4:dc:05:b2:8c:74:69:be:a3:01:d0:6c:79:01:c0:
         b1:54:06:52:bd:16:2f:5e:2d:e3:51:f4:bb:ae:ce:36:08:84:
         73:b2:ff:07:1f:33:84:b9:4d:72:0c:4f:32:c1:e3:a0:89:7f:
         50:b9:aa:36:6e:cd:4f:63:7e:46:83:88:8b:3c:8b:64:34:ed:
         d8:43:d1:a5:eb:26:7d:dd:5c:84:4c:39:8f:98:93:23:44:da:
         eb:a2:ac:8d:a8:0a:79:cc:7b:76:cc:be:5b:22:8f:68:b4:6c:
         07:01:42:0e:0e:20:ba:df:28:d0:96:bb:44:66:22:24:b8:35:
         0b:5e:91:f4:d3:8e:59:b3:ef:01:fc:a9:41:c2:f4:b2:59:d1:
         69:29:37:49:16:c3:79:81:de:82:99:b5:5e:1f:2c:99:a8:aa:
         12:8c:14:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:27:50 2026 by rpki-client