Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File:                     JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier:          w0cARv3Oy+CTyI7Bp7oPoqH0KVVOeKUzGBCR5F8kaJI=
Subject key identifier:   C0:AD:04:FE:7E:09:E5:4C:7F:35:2B:D8:55:3A:F0:FB:72:18:20:C3
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer:       /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial:       01A10F95A2F746AE43AE831CB7039EDE4AE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number:          12B7
Signing time:             Tue 06 Oct 2026 05:00:27 +0000
Manifest this update:     Tue 06 Oct 2026 05:00:27 +0000
Manifest next update:     Wed 07 Oct 2026 05:00:27 +0000
Files and hashes:         1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: oY9go29KOM7rfdcR9fkIUD6Xf/bpr8mCWIiHg3xEqUI=)
                          2: lLxgfqurH_Hgps0nmWFaFien01Q.roa (hash: N0SnJ14VpoDgSTsYIgjlp8sX8VgDL1JD7jVAinD1cAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 23:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:95:a2:f7:46:ae:43:ae:83:1c:b7:03:9e:de:4a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
        Validity
            Not Before: Oct  6 05:00:27 2026 GMT
            Not After : Oct  7 05:00:27 2026 GMT
        Subject: CN=c0ad04fe7e09e54c7f352bd8553af0fb721820c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:9b:0e:82:01:f9:16:d7:32:d1:95:6d:a5:
                    92:73:bc:81:94:6d:47:66:d3:72:ee:1c:a8:98:cc:
                    13:a5:6e:df:66:af:f9:ec:96:3a:23:82:55:b8:2e:
                    8f:76:45:d9:2d:b2:b5:f4:56:c2:b5:d6:7f:65:13:
                    03:23:ce:40:53:b8:7c:37:c8:63:4e:f2:09:fc:a3:
                    4d:f2:7d:bf:9d:8e:cf:6c:03:c2:15:63:a5:4e:62:
                    1a:de:60:b7:76:11:b2:39:84:93:d3:2d:af:1a:a3:
                    25:03:29:e9:ab:85:ef:fb:43:c6:d6:cd:cb:3d:6e:
                    04:78:96:51:a2:31:c1:00:e5:2f:c4:ec:ae:60:9a:
                    0d:37:8b:34:1e:e0:8f:39:db:48:e3:0e:84:59:66:
                    86:c5:ff:bb:2d:d1:62:5c:a8:18:b8:d0:96:4e:ee:
                    95:32:85:dc:86:eb:a5:f2:3e:f7:29:ac:09:d1:ff:
                    e0:98:62:b7:46:6e:c4:c6:30:4b:2e:82:f2:85:15:
                    4c:98:68:bf:96:e8:29:e3:db:6c:fe:74:00:3c:e5:
                    fa:76:99:66:89:49:33:92:69:29:17:0c:39:7a:6e:
                    3f:bb:34:c1:b2:9f:36:de:f7:80:c6:85:6f:e7:9b:
                    c1:db:7a:3e:5e:c5:80:92:6d:84:ad:8a:74:a3:0a:
                    ee:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AD:04:FE:7E:09:E5:4C:7F:35:2B:D8:55:3A:F0:FB:72:18:20:C3
            X509v3 Authority Key Identifier:
                keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:eb:28:11:99:a1:7e:19:08:9f:a1:40:15:58:df:a4:f9:c9:
         3c:dc:5e:b5:76:4b:81:f5:f2:dd:43:d2:f5:e3:85:0a:1a:78:
         ae:77:ec:dc:16:c6:8c:3b:dc:c7:5f:ba:3d:6c:0e:48:4e:a4:
         da:37:71:9b:b0:18:3c:56:f1:c0:e2:a7:73:e5:e8:e2:2a:b0:
         a2:96:7b:8b:6f:b8:75:f6:43:d9:15:f5:6e:e5:bf:55:3c:d8:
         b2:81:26:63:28:bd:82:e2:ae:82:4c:d5:3f:b7:e6:c0:3f:aa:
         9a:02:e2:41:33:3c:75:d4:39:fa:94:ed:1f:1f:72:0a:ac:3c:
         af:00:fd:e1:d5:a8:7f:29:06:80:02:e6:68:90:fc:6b:c6:b0:
         68:62:b3:72:58:03:35:99:a3:28:01:c2:11:92:e5:e5:41:e6:
         cd:ae:aa:8b:55:f3:bb:b2:71:71:27:1e:4a:20:fe:fb:ac:93:
         45:12:31:51:2b:9b:8d:fb:61:b3:be:70:62:52:f9:f3:b2:b2:
         78:19:80:db:f1:67:f1:b5:b2:aa:d3:04:87:cd:8d:5d:11:1f:
         2d:98:af:6e:90:50:c8:92:a1:78:89:63:39:8d:e1:01:f9:4c:
         47:db:fa:17:e4:d4:d2:75:22:31:7b:0d:1f:88:42:6b:bd:71:
         1a:d0:e1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:49:01 2026 by rpki-client