Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
File:                     JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json)
Hash identifier:          Jew1fPGCaefW+QcRHSlNmknyvwfW7XcxyAV7QxVgbnY=
Subject key identifier:   00:7A:7B:3A:A8:75:70:8F:33:1D:CF:72:68:EB:DF:72:99:05:29:C9
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Certificate issuer:       /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial:       01A0EB532BC7F555CC29F964EC13F17F4F54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
Manifest number:          0C0D
Signing time:             Tue 29 Sep 2026 04:01:31 +0000
Manifest this update:     Tue 29 Sep 2026 04:01:31 +0000
Manifest next update:     Wed 30 Sep 2026 04:01:31 +0000
Files and hashes:         1: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: x1ljE6KLdVGqhEIXz24YsuUOh+yWJMc6ccjL0lDRC/o=)
                          2: aOE6ABSZYDrwHqX0GtKP4yVMn4E.roa (hash: hS/lZIFnL6s3O1iQAeU4NIFW/EmeY34qv/wGghzDiNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:53:2b:c7:f5:55:cc:29:f9:64:ec:13:f1:7f:4f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
        Validity
            Not Before: Sep 29 04:01:31 2026 GMT
            Not After : Sep 30 04:01:31 2026 GMT
        Subject: CN=007a7b3aa875708f331dcf7268ebdf72990529c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:ae:b5:7d:f9:2f:23:a5:bf:db:db:df:ef:
                    27:bd:b2:1f:b8:00:50:17:ba:f9:1a:c9:72:e6:b2:
                    1d:c6:1b:ef:3b:45:b4:c7:e0:ef:b7:d0:f5:3e:33:
                    60:15:d0:f1:5b:64:e7:6a:c0:30:1a:b4:74:28:9a:
                    89:99:ae:b4:59:60:84:d4:75:48:65:5b:94:7e:f9:
                    43:f5:d7:99:9e:92:59:ad:71:ad:65:6a:e5:d9:9d:
                    8e:c0:67:e4:46:dd:64:ad:9b:ec:24:5b:f6:b4:b1:
                    90:5f:4f:9a:af:68:36:71:c3:ae:ab:67:68:79:e1:
                    ff:e0:41:61:f6:da:cc:17:60:ab:80:ea:19:bc:4f:
                    67:0d:e1:cd:a1:f4:8e:55:f3:47:8a:5f:de:f0:7f:
                    76:17:4a:36:6f:dc:34:c9:a8:59:a5:21:e6:9c:96:
                    1a:e9:5e:8f:17:37:1b:95:e9:29:a3:1a:69:01:2e:
                    f5:7f:5b:f5:35:b8:25:9a:73:7d:34:7d:03:92:e7:
                    44:63:4f:fb:34:1f:37:77:93:f1:33:97:7f:34:ea:
                    85:f5:5b:d8:3c:63:42:ad:66:29:fa:dd:5b:33:9a:
                    c4:a6:c8:d7:12:db:d1:9e:e3:24:50:7e:7f:58:35:
                    48:2e:c2:ad:79:93:30:4f:95:f9:87:3c:2a:61:17:
                    77:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7A:7B:3A:A8:75:70:8F:33:1D:CF:72:68:EB:DF:72:99:05:29:C9
            X509v3 Authority Key Identifier:
                keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:48:f3:1d:43:0e:72:3c:87:be:a1:16:4c:f6:21:cc:d0:e6:
         27:f0:c0:9a:7c:de:12:cd:11:7b:8f:a0:8d:40:7e:84:3f:32:
         3a:0d:5c:3b:78:62:ad:66:a3:ec:38:3f:35:ab:62:54:a9:a0:
         03:14:5b:7d:4d:d2:e2:76:96:eb:63:cc:85:44:0f:7e:68:51:
         a5:5b:ca:bf:54:3c:8c:37:5e:d0:66:fd:fa:dc:14:dc:3c:40:
         b1:c2:f4:66:79:8b:cb:4d:ae:4a:8f:13:db:5a:60:f3:d9:6f:
         c8:3f:e7:9f:73:85:17:59:82:c9:1b:82:6f:c7:d6:e8:ae:a6:
         33:f1:68:6b:02:61:e2:c3:76:04:1c:e2:87:d6:10:52:d7:e8:
         7e:a0:ae:b3:40:3c:9f:f1:b7:5a:69:58:aa:7c:a1:87:ea:90:
         0b:c8:6a:30:27:fc:0d:1e:50:63:81:fd:6e:b0:c7:ca:01:44:
         d2:3c:8c:ea:fb:e5:62:ce:29:07:7b:75:e0:57:d4:7f:53:cb:
         18:e2:60:d2:a5:35:7b:e0:d3:03:d5:fc:bc:85:6c:cd:11:7d:
         84:6d:8b:cd:c7:6b:99:8a:37:94:1c:c8:df:b7:8c:17:87:8e:
         56:5c:d9:21:67:94:3e:3c:67:32:e1:52:ec:08:c3:94:86:33:
         37:fb:82:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:34:13 2026 by rpki-client