Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/1J1wg4j_AyhokxHaGdp_739W2LY.mft
File:                     1J1wg4j_AyhokxHaGdp_739W2LY.mft (raw, json)
Hash identifier:          KsWeeNylHN+/1IFfqEl5YrJxB8Y/GOy3ySqn+rYfLLU=
Subject key identifier:   FF:87:F2:AB:2C:F8:55:AA:45:20:93:71:57:15:E3:E7:BF:33:BC:D6
Authority key identifier: D4:9D:70:83:88:FF:03:28:68:93:11:DA:19:DA:7F:EF:7F:56:D8:B6
Certificate issuer:       /CN=d49d708388ff0328689311da19da7fef7f56d8b6
Certificate serial:       01A0D9BB4F89EE8B4042111609BFB7586A4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1J1wg4j_AyhokxHaGdp_739W2LY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/1J1wg4j_AyhokxHaGdp_739W2LY.mft
Manifest number:          EA
Signing time:             Fri 25 Sep 2026 18:02:06 +0000
Manifest this update:     Fri 25 Sep 2026 18:02:06 +0000
Manifest next update:     Sat 26 Sep 2026 18:02:06 +0000
Files and hashes:         1: 1J1wg4j_AyhokxHaGdp_739W2LY.crl (hash: rbHvHGMqGRhOFHj0a+w8PV0id1nNiI7WW3EyXRyjiAs=)
                          2: jvM4PnIsoK-M1fMYfByGiC5thx0.roa (hash: 8SuPOUTpaRe3fwMYlvBgvK2dTEPcw/0mWRCq/h+2VGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/1J1wg4j_AyhokxHaGdp_739W2LY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/1J1wg4j_AyhokxHaGdp_739W2LY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1J1wg4j_AyhokxHaGdp_739W2LY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:bb:4f:89:ee:8b:40:42:11:16:09:bf:b7:58:6a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49d708388ff0328689311da19da7fef7f56d8b6
        Validity
            Not Before: Sep 25 18:02:06 2026 GMT
            Not After : Sep 26 18:02:06 2026 GMT
        Subject: CN=ff87f2ab2cf855aa452093715715e3e7bf33bcd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9d:97:41:fc:86:64:0d:5a:f2:4f:66:8d:2b:
                    86:50:a7:a8:0b:00:36:69:74:d2:7f:f2:67:e6:ad:
                    e6:4b:b3:cc:23:6d:b7:88:ff:fe:a1:35:6d:28:05:
                    b6:04:47:9e:36:66:9c:63:19:bf:34:c3:ff:52:09:
                    ae:21:f6:79:74:7a:fe:ee:73:fa:e2:a1:8b:d5:78:
                    9a:fb:ea:18:6f:35:c9:06:93:e0:e7:41:1b:f9:df:
                    f7:49:5d:2d:54:1c:fd:74:4f:c1:9a:a3:9f:18:bd:
                    b0:56:da:2a:a8:d6:17:82:cb:71:81:b5:aa:b9:16:
                    57:37:a6:6d:ef:a9:90:af:95:bd:6b:f9:7f:8e:f3:
                    57:61:af:63:1d:26:8e:e5:d0:6a:c2:b5:75:77:20:
                    e0:fa:8d:ca:cd:40:03:fd:85:a6:65:ed:5d:80:ff:
                    c5:f0:32:80:cd:8c:d2:89:7e:75:f7:a7:61:b0:3d:
                    4a:e6:1f:4b:cb:71:63:87:5e:29:39:84:67:a5:65:
                    83:e0:dd:e3:74:a6:f5:9d:6f:4c:38:82:2b:40:7a:
                    a7:cf:8f:10:83:64:a2:ee:c2:e4:bf:63:71:e4:a6:
                    74:a2:f4:08:25:d4:d5:51:b4:9d:5e:96:8c:ca:eb:
                    b3:10:d5:5b:b9:9b:02:29:17:29:35:21:70:46:88:
                    9f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:87:F2:AB:2C:F8:55:AA:45:20:93:71:57:15:E3:E7:BF:33:BC:D6
            X509v3 Authority Key Identifier:
                keyid:D4:9D:70:83:88:FF:03:28:68:93:11:DA:19:DA:7F:EF:7F:56:D8:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1J1wg4j_AyhokxHaGdp_739W2LY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/1J1wg4j_AyhokxHaGdp_739W2LY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/1J1wg4j_AyhokxHaGdp_739W2LY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d1:6c:c4:79:d0:fe:88:60:c3:d3:7a:f7:1d:36:3a:eb:ae:
         a4:32:80:f4:99:81:93:32:cb:fa:b5:e7:b6:93:a2:be:01:d9:
         fb:fd:86:7d:48:0b:1f:c6:0a:43:0f:41:d2:84:7b:75:20:1e:
         a4:2c:7f:77:03:4e:3c:73:62:36:ea:15:46:8d:58:80:94:59:
         3c:a8:a2:ba:55:99:16:71:e4:72:85:f7:87:db:75:78:b1:bc:
         b2:84:98:bb:ed:cc:f4:a7:61:e4:94:3e:38:9f:66:df:50:df:
         5c:59:a8:9a:53:ad:76:53:37:37:e1:8b:e9:f9:db:50:53:e0:
         f8:3a:15:e7:e6:9a:ac:48:f1:9f:89:db:fd:27:f7:96:ad:08:
         78:50:48:0a:a7:3f:db:7b:9d:8b:18:76:e0:e2:dd:75:ee:d5:
         dc:c6:49:1f:34:e3:96:14:ca:3f:b0:e2:80:d3:3d:d0:f7:40:
         7c:e1:b1:be:7c:8a:12:e2:83:f6:0f:a3:49:91:03:47:80:fb:
         d3:0e:df:05:ac:2a:42:5f:09:08:1b:9f:37:ec:2c:da:92:f3:
         13:3e:e3:af:a8:62:60:c7:ca:19:df:ef:b0:51:42:90:87:1b:
         84:9a:be:27:2b:38:b0:98:0e:31:32:40:4a:25:36:bb:8a:65:
         6f:36:66:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:24:44 2026 by rpki-client