Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File:                     JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier:          XVIA5B7o3sOGN3mW/jYoGeupPKmnixWvPNd+QvjfeLE=
Subject key identifier:   71:69:71:BD:BE:72:0A:85:2A:C3:C6:CA:3E:6E:D9:7E:ED:63:60:54
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer:       /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial:       01A12BB2A6C44F9E464E18B204A27B9535F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number:          1339
Signing time:             Sun 11 Oct 2026 16:01:30 +0000
Manifest this update:     Sun 11 Oct 2026 16:01:30 +0000
Manifest next update:     Mon 12 Oct 2026 16:01:30 +0000
Files and hashes:         1: 68M1iA2v1hZrN-WYmwaUYqloW_k.roa (hash: Lu1vR1WuACYYOAE0lbWO8n33EaanCEqHclq+Bu+0jM4=)
                          2: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: MT6FALVqQmXiOB1hGACz54lMjRKzccg59JZVT8VthLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 16:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:b2:a6:c4:4f:9e:46:4e:18:b2:04:a2:7b:95:35:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
        Validity
            Not Before: Oct 11 16:01:30 2026 GMT
            Not After : Oct 12 16:01:30 2026 GMT
        Subject: CN=716971bdbe720a852ac3c6ca3e6ed97eed636054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0e:fd:a3:89:e6:3c:97:d8:ea:03:22:bb:81:
                    4c:99:97:80:62:fa:7c:c9:f9:e9:d7:35:7a:b6:25:
                    f0:4f:11:a5:fb:95:8a:54:3a:07:c7:30:20:08:34:
                    1b:ac:0d:55:fa:be:c9:ca:96:30:c9:b9:8a:d5:c8:
                    ce:fb:1c:87:ae:e5:1b:2a:c9:72:fd:7f:ad:5a:45:
                    60:9d:9b:e8:03:4e:70:a0:a2:c1:9b:d7:2e:cb:b0:
                    a3:5f:ad:23:1e:4f:d9:f3:a3:78:a9:66:f8:46:f7:
                    33:23:60:c6:13:a5:be:72:ea:50:1e:cc:6b:b4:be:
                    49:5b:2f:a1:8e:3a:c0:4c:54:8f:38:3b:d0:c6:1b:
                    ab:a5:3a:49:20:5a:80:f4:33:d8:3c:56:7a:07:b1:
                    a4:9e:c5:69:32:99:5a:5b:8e:16:3a:54:c6:0b:75:
                    d5:77:f6:f7:68:15:10:ae:03:f5:2f:d8:fc:dc:0e:
                    b3:fe:cf:18:8a:11:97:34:00:b0:db:14:36:c6:dc:
                    8a:58:53:0c:78:ca:ef:b2:d2:5b:e5:ec:e1:d7:24:
                    97:96:a4:7e:5e:10:48:37:2c:79:95:82:b0:8e:a2:
                    c7:7f:ef:39:fd:40:57:9b:32:07:01:1e:a4:8a:f3:
                    68:9e:d0:e8:67:29:39:7f:cb:3b:7d:67:bc:a5:68:
                    85:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:69:71:BD:BE:72:0A:85:2A:C3:C6:CA:3E:6E:D9:7E:ED:63:60:54
            X509v3 Authority Key Identifier:
                keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:2b:70:86:41:0d:ee:db:f8:71:f4:eb:ba:60:dc:2c:ac:72:
         c9:be:0f:f5:98:27:78:bb:0c:4c:bc:62:58:1a:32:48:ae:df:
         14:97:f5:c7:19:04:70:93:a4:b4:5f:ca:7f:04:20:8c:b5:f0:
         eb:31:7c:d3:33:b9:ef:4c:d3:55:3c:60:71:3a:54:ec:ab:f9:
         79:42:da:e7:f1:f2:a5:83:21:3f:a4:5d:c7:47:0c:54:e9:80:
         ba:67:fd:13:10:56:b5:74:cf:33:9f:12:8f:4f:48:09:d1:b0:
         8f:b2:4f:60:c8:72:dc:4f:2d:2d:7c:cb:71:d5:95:22:2b:ec:
         e9:7b:c9:f2:a3:e9:f6:0e:54:76:06:73:52:42:cc:5c:2f:3a:
         a4:e9:bc:a4:b5:8f:8c:fe:61:5e:09:55:e5:2b:20:e8:4d:03:
         7c:d1:cc:99:e8:ee:21:e5:13:3d:8d:26:13:55:9c:2a:e4:8b:
         ff:2e:4f:80:db:12:3f:b5:18:21:6f:e5:93:ba:f3:78:bc:74:
         ce:0b:9b:05:f7:6d:1f:4d:bf:db:62:d8:81:c9:7f:7c:33:0d:
         2e:78:14:0b:09:10:78:40:fc:20:df:54:82:bd:1d:a5:4a:75:
         91:60:6f:55:f6:1a:6a:98:91:36:f9:c4:14:88:b3:08:20:59:
         32:59:b9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:03:23 2026 by rpki-client