Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.mft
File:                     JwxC_ewuIuDX2a7TU6t-t6bPjdg.mft (raw, json)
Hash identifier:          xtk5ecSJKXON4uxVC54pakbRMj/ZhkN5sLVOeVY3uRU=
Subject key identifier:   F7:5D:AE:63:AA:3A:8F:57:97:4F:15:67:39:53:C4:B5:B7:63:2B:A1
Authority key identifier: 27:0C:42:FD:EC:2E:22:E0:D7:D9:AE:D3:53:AB:7E:B7:A6:CF:8D:D8
Certificate issuer:       /CN=270c42fdec2e22e0d7d9aed353ab7eb7a6cf8dd8
Certificate serial:       01A1DF1571C1FAF2C9FFE995B24E79604AC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.mft
Manifest number:          15
Signing time:             Sun 15 Nov 2026 12:01:26 +0000
Manifest this update:     Sun 15 Nov 2026 12:01:26 +0000
Manifest next update:     Mon 16 Nov 2026 12:01:26 +0000
Files and hashes:         1: 1-z2fetIPu1VaV8GE36vNHvshYVw.roa (hash: nrP8RizGc9JlHyD3dZElD5Sw02Rg+wEMsPLi8FUzgis=)
                          2: 4-Ip7QAeO5DbzLi7xCx8NrQCGNk.roa (hash: SmvAG1LBI9XlkOkAEtoZgMUo0nZeY5y37fjl8LXUBnE=)
                          3: Hjl5vdumoNhROzMggtwmtKDYgls.roa (hash: tPziZSEl8WSuje2S/md4Q9dyHwZ2ujrAQpjKvdyVGlc=)
                          4: ItWNSfCHSVAN0dTilCZVnJhPMGw.roa (hash: A4+CciXKf3W7Tne3s+bNjaE1I7vWeLnz+nxq5iDux3U=)
                          5: JwxC_ewuIuDX2a7TU6t-t6bPjdg.crl (hash: /902nTS1yTAgDXoi7oq5rglRu3hSE6oXuXif0begB58=)
                          6: OJXhng0RVoQXHxYifr0pqnzmJIs.roa (hash: E18ZQWO0g3n5HRSFboU1ax82L7qjEN5/sIWui73HYK8=)
                          7: gO0a5FDZod4Jet6G6YYJr_EtnDI.roa (hash: PnnZ1H5Rz6I7wFohxglAVGkiq7nttb4OpkbD/Vecin0=)
                          8: nkuhCf7ZOJK9wCVmXZDy9auJKlk.roa (hash: w3+IdH43ju+gA9MjciewtzxYFynkSBVVSWNqnPjtzPM=)
                          9: pWLBkz1iufEVOMitYEK948ero7k.roa (hash: AUSHovmcangqjrc7dz+mTZWIZ6G5O+nqqETB66pEfN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:15:71:c1:fa:f2:c9:ff:e9:95:b2:4e:79:60:4a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=270c42fdec2e22e0d7d9aed353ab7eb7a6cf8dd8
        Validity
            Not Before: Nov 15 12:01:26 2026 GMT
            Not After : Nov 16 12:01:26 2026 GMT
        Subject: CN=f75dae63aa3a8f57974f15673953c4b5b7632ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2b:dd:41:97:06:a7:ab:7d:ed:46:2e:35:ab:
                    e0:c3:10:f0:ee:ab:5b:65:e1:9f:80:58:c3:39:f1:
                    ab:d6:dd:8d:85:4b:3e:68:e2:b1:7e:d2:6b:74:06:
                    6f:49:94:2c:07:6b:9c:3e:14:b6:84:de:f4:55:a9:
                    bc:be:06:e4:54:17:a6:4a:70:b1:8e:a8:3b:cf:9b:
                    6c:ee:f8:27:2c:c6:7c:19:17:15:64:ea:28:b9:6e:
                    24:c8:d9:23:96:c9:80:c9:2e:81:67:cd:45:a3:3e:
                    47:56:05:55:e4:d8:87:e1:31:cc:bd:79:cd:80:56:
                    cf:87:a5:d2:44:32:70:2e:7f:b9:30:46:4e:23:68:
                    85:39:e7:08:91:8a:56:7e:b5:74:c3:d3:b8:de:77:
                    87:37:2a:91:7b:85:1d:dd:9d:fd:ff:5b:11:d8:b4:
                    6d:4a:dd:29:2b:60:c4:2b:cd:40:a3:c2:03:b0:83:
                    b7:e4:cc:30:ec:f6:7d:1a:dc:ac:df:8b:ee:24:df:
                    d9:bf:6e:a4:52:cd:90:07:70:39:a1:83:f4:5b:2f:
                    ec:c0:51:c9:7d:b1:79:05:62:b8:1c:96:76:ee:31:
                    fa:37:77:a0:f9:15:c5:3d:b7:15:42:ee:47:23:40:
                    63:e7:6a:f7:f8:6e:a7:99:7a:97:b6:20:4e:8a:50:
                    4d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5D:AE:63:AA:3A:8F:57:97:4F:15:67:39:53:C4:B5:B7:63:2B:A1
            X509v3 Authority Key Identifier:
                keyid:27:0C:42:FD:EC:2E:22:E0:D7:D9:AE:D3:53:AB:7E:B7:A6:CF:8D:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:98:70:cf:db:38:86:e7:1f:11:99:b0:cf:ce:d8:db:77:9d:
         62:84:39:e4:3e:bf:d1:e6:c3:5e:60:87:68:4a:a3:db:b7:97:
         2f:49:be:bf:2e:3b:7b:b1:84:89:23:76:3b:5b:af:80:35:4d:
         f8:8a:ab:c1:e7:9d:72:76:0b:ba:8d:5b:6f:29:56:62:a0:c5:
         d4:53:11:15:80:fb:f6:53:6c:3b:fc:b7:12:a1:69:e7:5f:99:
         14:c0:5e:f0:79:67:1a:3c:f1:42:6a:5c:08:65:eb:70:c1:d7:
         e8:37:34:7a:41:e4:cf:86:5f:b0:fa:bc:f1:07:dd:13:28:d2:
         d8:c2:1b:fc:ac:6c:9f:1f:04:a9:85:c9:40:23:cf:c6:bb:a5:
         7f:21:a5:5b:dd:46:94:cd:16:f8:8a:ee:27:f5:70:c6:fa:d0:
         38:57:14:1b:f5:ec:2a:04:d2:57:4e:ef:90:40:ed:2f:d8:27:
         a6:02:91:62:52:cc:e4:04:77:f0:fd:6d:0e:5b:ce:72:01:39:
         ce:a1:c5:8b:8b:75:5e:57:13:1d:5a:ed:0a:88:6a:5a:c0:4a:
         aa:b5:0b:35:49:25:cf:d4:0a:84:13:ac:94:b5:b4:cd:64:1e:
         9e:60:23:2e:7e:f0:12:ac:1d:c3:31:9c:3c:88:7a:ee:b2:47:
         38:70:ce:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:06:52 2026 by rpki-client