Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
File:                     jcayOVFjzkewNvrgKnH5SIBL9V8.mft (raw, json)
Hash identifier:          isfidUIOFoGTtUtpWYkELuUMvnrVZUIMmb+VY3OzYL8=
Subject key identifier:   F5:AB:21:E7:EE:EC:A9:65:06:71:40:14:62:85:83:7F:05:B2:AA:E8
Authority key identifier: 8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F
Certificate issuer:       /CN=8dc6b2395163ce47b036fae02a71f948804bf55f
Certificate serial:       01A1054A2DC66D34339EFB5717D78AA8C405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
Manifest number:          01F2
Signing time:             Sun 04 Oct 2026 05:01:49 +0000
Manifest this update:     Sun 04 Oct 2026 05:01:49 +0000
Manifest next update:     Mon 05 Oct 2026 05:01:49 +0000
Files and hashes:         1: UqSLybQPqtyf12w058GGJrCrwlE.roa (hash: ay496TJzckN/WV79yGM4pv+K/GRv47GhhBgHEduwC9o=)
                          2: jcayOVFjzkewNvrgKnH5SIBL9V8.crl (hash: caDuJo0dVIsEdk/Aenyg8lbpvZeJgEpuA3SKmAr/1ms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 00:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:4a:2d:c6:6d:34:33:9e:fb:57:17:d7:8a:a8:c4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc6b2395163ce47b036fae02a71f948804bf55f
        Validity
            Not Before: Oct  4 05:01:49 2026 GMT
            Not After : Oct  5 05:01:49 2026 GMT
        Subject: CN=f5ab21e7eeeca965067140146285837f05b2aae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:22:69:7f:b7:b0:50:1b:77:7d:8d:85:d7:
                    ed:13:1e:48:c3:fc:7f:cb:14:4f:44:32:37:8f:68:
                    5e:27:33:ec:c6:f6:e2:92:69:46:41:1c:2e:a5:c8:
                    cb:ac:13:86:65:05:6d:30:ee:c5:80:54:71:30:8c:
                    8a:eb:2d:cb:92:f5:c2:40:93:53:27:6f:af:15:88:
                    17:56:3d:7a:0e:c2:4f:1c:58:71:ea:57:3b:70:25:
                    9e:35:f5:27:a6:1e:bf:08:c4:b1:54:14:1c:cb:9d:
                    5e:0c:65:80:d2:12:85:3d:47:50:0f:66:51:10:99:
                    37:c7:3d:70:f0:ea:2f:d1:f9:f3:93:04:7f:c1:34:
                    71:ea:67:99:e5:47:0d:9b:21:26:5f:4e:e3:51:f2:
                    8b:43:cf:78:30:23:96:de:69:92:e8:7e:87:ef:e6:
                    50:02:c0:db:4b:75:52:ec:c3:75:88:30:68:e1:e3:
                    d2:7d:a7:19:10:98:88:69:9c:27:11:57:b1:03:cc:
                    45:33:7d:ae:dd:3d:54:dc:07:dd:a4:05:66:bd:37:
                    c8:68:44:8e:50:fe:8f:60:9f:de:6e:06:64:ec:41:
                    da:82:88:ad:ce:f2:30:e3:db:86:0d:98:f2:a2:5b:
                    83:00:1a:9b:9f:8f:1f:a8:7c:39:86:31:ca:d2:bb:
                    77:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AB:21:E7:EE:EC:A9:65:06:71:40:14:62:85:83:7F:05:B2:AA:E8
            X509v3 Authority Key Identifier:
                keyid:8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:35:f6:c3:bb:82:2c:8d:61:f6:70:d7:a8:97:d3:ae:84:ac:
         84:cc:b1:ac:0a:76:4f:9f:26:8f:80:7f:6b:35:b7:6e:a3:9b:
         d9:d6:d7:81:43:e1:85:cd:71:5b:51:8c:ca:61:d4:75:5e:d9:
         f3:47:55:e1:3b:fc:83:cc:ff:b8:c7:d6:f8:c3:7f:90:dd:4a:
         18:c6:e6:48:00:b4:52:32:fb:b6:e1:e9:72:01:7d:5a:2e:05:
         34:12:86:ba:e0:e6:01:86:09:1b:2f:ad:e4:14:e5:ea:e0:19:
         db:82:5f:a4:87:85:83:33:9d:25:ec:e3:ed:16:5a:70:05:16:
         8a:d4:eb:c5:5e:dc:93:2c:d3:96:41:95:ca:e8:9a:8a:ec:e8:
         e7:92:ec:eb:81:17:f5:d6:5b:a6:9b:8a:ad:e8:1c:cb:53:c7:
         97:ad:09:75:7b:4b:bd:0c:a3:d2:aa:15:e9:96:79:07:78:58:
         35:e2:e6:ea:f8:6a:8a:5c:03:a8:a4:cd:3c:be:43:07:d0:21:
         85:82:02:c8:ab:39:96:77:38:92:60:0b:a4:55:f8:df:9b:da:
         b8:be:0c:c7:80:75:61:37:dc:81:20:ed:32:27:7d:06:4d:1a:
         82:d4:22:e8:69:e9:ec:90:07:9c:48:82:7a:f0:92:6f:f3:91:
         9f:f0:98:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:34:16 2026 by rpki-client