Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
File:                     jjvz0Ldl8upCRh0SN85-reQ7aK8.mft (raw, json)
Hash identifier:          BDbxMiI/RzqAxawI+HLEuemLqrX+J0HfP9AIHifPKgc=
Subject key identifier:   85:55:60:72:A9:07:D1:C6:6A:1E:0A:54:76:19:A4:6C:B4:A8:0F:8E
Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
Certificate issuer:       /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Certificate serial:       01A12955A09ADB3647A4899A9FDD9153C277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
Manifest number:          10C2
Signing time:             Sun 11 Oct 2026 05:00:39 +0000
Manifest this update:     Sun 11 Oct 2026 05:00:39 +0000
Manifest next update:     Mon 12 Oct 2026 05:00:39 +0000
Files and hashes:         1: K4KaGgPmLYRO5soG4eqjbkAncaI.roa (hash: +VJK/j11hj/8ZaPbxR19b24TkZkYatUXvpZgb0IWSzc=)
                          2: jjvz0Ldl8upCRh0SN85-reQ7aK8.crl (hash: BP0V8NCRf4SKJy+0wMnUqjxNXr0HaaRnDFyIIaD8HXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:55:a0:9a:db:36:47:a4:89:9a:9f:dd:91:53:c2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
        Validity
            Not Before: Oct 11 05:00:39 2026 GMT
            Not After : Oct 12 05:00:39 2026 GMT
        Subject: CN=85556072a907d1c66a1e0a547619a46cb4a80f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:e6:a6:48:c4:47:eb:19:01:15:da:89:c1:
                    13:83:eb:7b:ce:a8:ac:e7:2b:50:7a:bd:8d:40:fe:
                    97:75:cf:ba:8e:5a:d1:29:32:bd:0f:4e:b1:b1:80:
                    41:d9:82:48:a6:cc:65:6b:85:7c:a2:b2:05:96:13:
                    d3:09:93:e8:f0:b8:e1:a2:4e:b3:85:d2:27:63:d5:
                    86:bb:d7:f4:e6:45:fe:49:35:6a:7e:62:fd:38:d7:
                    ed:84:dd:4d:c2:81:42:2f:f8:ce:2b:e1:6a:21:b4:
                    fe:62:21:96:0e:59:01:cf:26:1a:29:a2:f9:cc:d9:
                    9b:ca:6b:00:74:08:cb:98:86:87:ed:0d:a9:94:0f:
                    a3:b5:8b:19:79:87:78:8a:26:0f:60:35:1f:35:1c:
                    e1:65:7c:69:31:e2:60:ac:70:eb:b8:fb:53:aa:af:
                    59:d8:98:e9:da:72:20:03:d7:9e:9e:61:b9:d7:69:
                    d7:68:31:63:09:cd:60:bb:37:21:3d:09:a6:99:79:
                    da:d8:86:a6:c3:ea:b8:ea:a0:d7:cc:8f:74:58:70:
                    2e:4f:d1:fc:a9:7f:11:16:82:bd:17:26:2b:3d:90:
                    3f:a9:24:fb:56:f5:46:97:35:3f:0f:1a:8b:4d:09:
                    67:c7:a6:e1:f6:de:1e:1f:2d:18:e8:6d:5b:04:81:
                    4e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:55:60:72:A9:07:D1:C6:6A:1E:0A:54:76:19:A4:6C:B4:A8:0F:8E
            X509v3 Authority Key Identifier:
                keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1d:a5:d4:36:36:c6:91:f1:74:93:79:48:b5:de:5a:e4:ff:
         7e:f9:7f:7f:31:42:38:e1:c5:7b:db:61:72:7f:a8:36:ad:dc:
         67:d4:1e:dd:35:23:1e:6e:81:42:30:64:a3:fd:2a:df:58:be:
         66:f9:a0:cb:7b:31:c2:ef:40:cf:f7:ba:76:a9:ba:7f:6b:3b:
         e6:09:13:2a:cc:48:47:75:99:f5:eb:fa:18:a3:e8:d7:f7:3b:
         97:f3:de:29:4c:60:6b:58:3c:72:fc:99:6d:e4:80:1f:73:a0:
         87:b7:1f:a0:0a:6e:39:f5:bd:3a:a2:62:78:08:ea:28:ee:16:
         5f:c3:2b:ca:66:9c:b2:89:69:a5:a8:dd:08:62:f4:d2:fe:06:
         23:49:52:a2:51:03:29:25:c4:01:37:ba:10:10:c5:a7:02:13:
         97:5e:49:5a:97:dc:4f:1f:00:29:50:2a:36:1d:22:23:5d:0f:
         3f:68:a0:c8:09:77:93:f8:0f:c3:04:4d:fe:d1:c4:d0:79:0f:
         7f:9b:1e:fc:4c:96:7a:75:9a:a7:5a:f4:e0:26:69:23:40:a1:
         87:c2:fb:2b:15:b8:5b:8a:14:10:8d:b3:c5:e0:48:5c:c7:bf:
         c5:99:a8:b6:2e:e4:e5:26:51:fe:03:fb:4e:79:95:9a:e2:ea:
         81:e6:ec:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:26:37 2026 by rpki-client