Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
File:                     jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft (raw, json)
Hash identifier:          b/Ywbyu5hjSXjCmzP6MMcQOiw3PsIaXfGoNSDhwR7/4=
Subject key identifier:   63:BE:D8:9B:03:85:2A:6E:FF:1A:DE:E3:B5:71:F2:A6:A3:24:79:DA
Authority key identifier: 8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
Certificate issuer:       /CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Certificate serial:       01A1382488376D4C05995F4CFBBCC6005EB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
Manifest number:          08E4
Signing time:             Wed 14 Oct 2026 02:01:20 +0000
Manifest this update:     Wed 14 Oct 2026 02:01:20 +0000
Manifest next update:     Thu 15 Oct 2026 02:01:20 +0000
Files and hashes:         1: JwAMG7H5zqvWutaY0tL6qWOVQ84.roa (hash: WHBkccdZypDjFyRaZ97jWOQpOH4yG3/HgeMqK5knvm8=)
                          2: jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl (hash: KmrPd1kKoD50zMTIqqrH4dVoMkU+7DakWE+F3yTbx/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 20:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:38:24:88:37:6d:4c:05:99:5f:4c:fb:bc:c6:00:5e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
        Validity
            Not Before: Oct 14 02:01:20 2026 GMT
            Not After : Oct 15 02:01:20 2026 GMT
        Subject: CN=63bed89b03852a6eff1adee3b571f2a6a32479da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3a:f7:bc:ba:af:33:87:d3:a3:61:32:db:43:
                    00:86:8a:05:ed:f5:9a:3a:51:01:33:be:55:d3:e2:
                    ef:71:25:19:0a:68:7e:67:81:69:73:7d:f8:03:fe:
                    9c:09:fc:b1:39:98:99:39:d7:b8:00:59:78:a4:0a:
                    19:46:c5:40:ab:9f:20:b3:04:b0:f2:2d:50:5f:ee:
                    38:b1:2d:2c:ac:11:c6:be:16:ee:c2:5d:27:4e:1e:
                    46:e6:82:7f:df:bc:47:72:c1:2a:2e:48:52:42:44:
                    40:02:75:1b:ca:da:14:27:58:1e:75:2d:41:ef:f4:
                    64:e9:e6:49:91:ea:e4:11:7e:aa:28:e5:43:ec:50:
                    4c:50:a1:2d:d9:62:03:47:ce:7d:dc:63:40:76:ea:
                    6a:53:37:58:d7:49:84:48:ea:de:b7:e6:f7:5d:7a:
                    58:31:b4:33:9a:2f:54:b6:09:e9:bb:2c:d5:86:bc:
                    3e:6a:d1:c9:35:e7:0a:8d:4e:e5:97:a3:d9:bb:a4:
                    17:36:68:2d:8f:91:4d:18:12:bc:dc:a8:d0:2a:06:
                    31:08:b1:11:bf:05:ad:7a:db:75:f2:a0:86:c1:a7:
                    10:5a:39:fe:06:c5:31:d0:21:ab:b0:6b:cc:92:fa:
                    ad:0f:8b:3a:2c:25:b3:1b:2d:0f:41:f0:76:02:65:
                    78:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BE:D8:9B:03:85:2A:6E:FF:1A:DE:E3:B5:71:F2:A6:A3:24:79:DA
            X509v3 Authority Key Identifier:
                keyid:8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:0f:3a:97:a7:45:01:72:6b:64:60:86:09:91:1a:8d:ed:e6:
         f4:d5:fb:53:3c:c6:ce:04:be:1f:1f:07:f0:a3:9f:72:17:a8:
         0c:dd:55:97:9d:3a:5e:09:f8:36:1e:d1:92:43:6a:2b:bc:9c:
         c6:8e:66:0a:c2:ce:ff:d6:37:c4:c6:d2:10:82:96:6d:49:4f:
         49:de:f0:f6:04:62:13:41:65:54:c0:ef:e1:ce:c8:79:4e:af:
         19:c2:af:78:d8:ae:ae:3e:79:d7:71:e1:79:9c:66:99:36:6e:
         80:6c:e3:60:9e:2e:de:44:e8:37:07:7b:c5:0f:da:6b:7a:5a:
         8d:1c:fe:93:6b:ae:ce:60:44:38:44:6a:d7:d9:75:d5:e3:55:
         67:5e:11:55:f4:97:a4:61:3d:0e:4a:ef:6b:e9:85:75:4f:c7:
         1d:26:76:84:31:24:06:22:a3:29:98:bf:72:b0:f4:b6:52:3f:
         2e:3b:dd:f4:45:93:8c:a0:cc:77:9b:60:4b:d2:0b:7c:80:1a:
         4c:40:97:6c:eb:83:36:5b:c6:52:64:be:53:30:ca:5f:64:72:
         b8:a9:3b:1f:ee:bd:51:f4:86:df:89:82:58:ac:0a:4a:ad:c7:
         36:8c:c0:9e:c9:71:50:dd:9f:61:28:86:36:3c:c5:d3:db:4d:
         71:da:f9:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE4JIg3bUwFmV9M+7zGAF6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjE1ZTUxYmY2MWFhNzRiZjM5NzI1NTE5OTc1OWNmZWM3
Y2M5YmIwHhcNMjYxMDE0MDIwMTIwWhcNMjYxMDE1MDIwMTIwWjAzMTEwLwYDVQQD
Eyg2M2JlZDg5YjAzODUyYTZlZmYxYWRlZTNiNTcxZjJhNmEzMjQ3OWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzr3vLqvM4fTo2Ey20MAhooF7fWa
OlEBM75V0+LvcSUZCmh+Z4Fpc334A/6cCfyxOZiZOde4AFl4pAoZRsVAq58gswSw
8i1QX+44sS0srBHGvhbuwl0nTh5G5oJ/37xHcsEqLkhSQkRAAnUbytoUJ1gedS1B
7/Rk6eZJkerkEX6qKOVD7FBMUKEt2WIDR8593GNAdupqUzdY10mESOret+b3XXpY
MbQzmi9UtgnpuyzVhrw+atHJNecKjU7ll6PZu6QXNmgtj5FNGBK83KjQKgYxCLER
vwWtett18qCGwacQWjn+BsUx0CGrsGvMkvqtD4s6LCWzGy0PQfB2AmV4LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGO+2JsDhSpu/xre47Vx8qajJHnaMB8GA1UdIwQY
MBaAFI5hXlG/Yap0vzlyVRmXWc/sfMm7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1GZVViOWhxblNfT1hKVkdaZFp6LXg4eWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85OWU4YzEtODY5MS00MWQ1LTlhN2Yt
NTQzNWY0MzQ1MTIyLzEvam1GZVViOWhxblNfT1hKVkdaZFp6LXg4eWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85OWU4YzEtODY5MS00MWQ1LTlhN2YtNTQzNWY0MzQ1MTIy
LzEvam1GZVViOWhxblNfT1hKVkdaZFp6LXg4eWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQ86l6dF
AXJrZGCGCZEaje3m9NX7UzzGzgS+Hx8H8KOfcheoDN1Vl506Xgn4Nh7RkkNqK7yc
xo5mCsLO/9Y3xMbSEIKWbUlPSd7w9gRiE0FlVMDv4c7IeU6vGcKveNiurj5513Hh
eZxmmTZugGzjYJ4u3kToNwd7xQ/aa3pajRz+k2uuzmBEOERq19l11eNVZ14RVfSX
pGE9Dkrva+mFdU/HHSZ2hDEkBiKjKZi/crD0tlI/Ljvd9EWTjKDMd5tgS9ILfIAa
TECXbOuDNlvGUmS+UzDKX2RyuKk7H+69UfSG34mCWKwKSq3HNozAnslxUN2fYSiG
NjzF09tNcdr5pg==
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:48:16 2026 by rpki-client