Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
File:                     J5O96Uauk208rME2pfMjnt8kMfQ.mft (raw, json)
Hash identifier:          zlhX5KCUD6kv0GeX8ZiD2Y4xJtofYlbntYOYIwyg2V4=
Subject key identifier:   A2:C8:56:70:B5:F7:1C:CD:5A:44:AF:0C:9E:06:BF:DF:7C:45:72:5C
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Certificate issuer:       /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial:       01A1DB38B19141B76BA5CA6A16F47E910D35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
Manifest number:          15AF
Signing time:             Sat 14 Nov 2026 18:01:27 +0000
Manifest this update:     Sat 14 Nov 2026 18:01:27 +0000
Manifest next update:     Sun 15 Nov 2026 18:01:27 +0000
Files and hashes:         1: 5kQhTa9ppYhx0-CCDfhKsuGf-F4.roa (hash: Sc1YqqqQsHs863EggapJXNlkCp4JP0U2dmGwhrCZoUE=)
                          2: 7p2gKAHI0KadZksvxWzRGB1iB8g.roa (hash: rCQSaVA3Y3nCZOYBasM7SntiluDtvkssVDLJ9FgZ0z0=)
                          3: BoxtXMMZmxBYKCJ8Z1afwJFRtcA.roa (hash: E8EhzkpyKYc9PGnxMVLjrw/nuWChanKM2FKu61Dcpng=)
                          4: DZyx25x41UHPF3i1Veq-pYVddR4.roa (hash: 54obthyULOowTluftKwz8zXmO0WsXPGi7FNKcmk8zDQ=)
                          5: G0U9wtdHDnyBIqwX7oOrIllxbZ0.roa (hash: CVc7pFfQIeN+QGnFpM9jEldfs0RXoWa357t/1ugAP7E=)
                          6: J5O96Uauk208rME2pfMjnt8kMfQ.crl (hash: Dmu151ETKDAjurqbJKLHX0SLtjHdsny4USDJYott5Gc=)
                          7: ay8yAoc88wAj2V0brdWw5VdAYUE.roa (hash: uEoLe7XoIo5DxCpUn3Ll+nX3PqXVlfbcylC6QSJzhLc=)
                          8: xEE6xqB7U2qU7v-vbVNDUw-0jHk.roa (hash: l81cbgljLxJEOmCHiRfdvTZ8zxD8bx74QDpt+tnTEx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 18:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:38:b1:91:41:b7:6b:a5:ca:6a:16:f4:7e:91:0d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
        Validity
            Not Before: Nov 14 18:01:27 2026 GMT
            Not After : Nov 15 18:01:27 2026 GMT
        Subject: CN=a2c85670b5f71ccd5a44af0c9e06bfdf7c45725c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5c:f5:84:56:9e:ea:5c:bc:68:f3:48:75:6b:
                    79:e1:5a:66:5c:3d:2c:19:e2:fa:26:06:87:45:f7:
                    dc:68:eb:ad:8a:81:0f:4e:69:75:42:fe:38:b1:47:
                    86:bb:27:dc:c6:9b:17:25:ae:50:15:f4:e0:78:a1:
                    7a:6f:66:76:5a:d6:28:e4:bc:88:ea:64:6f:20:f5:
                    5e:f5:09:44:75:93:34:3b:ec:4d:2f:ab:51:63:a5:
                    b1:53:57:6a:3d:1c:30:7f:af:3d:46:b5:f1:0a:37:
                    38:7e:a1:b5:73:48:e5:90:14:da:d7:20:0c:cf:fe:
                    99:85:ab:ed:35:ce:2b:24:3b:14:5c:7e:48:e7:64:
                    c6:9d:12:87:c4:50:b7:0e:45:c0:38:94:5e:cf:b8:
                    97:87:17:5f:04:14:33:e3:84:14:36:63:81:86:74:
                    a9:ee:56:44:d3:ef:20:fe:95:34:f7:4d:a4:f2:11:
                    9f:0f:aa:ed:1b:89:50:43:ac:94:c5:f3:6b:3e:56:
                    a3:06:96:2c:09:72:7d:f1:1d:14:b7:51:cf:57:80:
                    1d:f4:e8:97:44:b1:08:cc:50:3b:f5:fc:19:b3:45:
                    57:6b:09:6f:17:c4:64:c5:16:ee:3d:54:1b:87:65:
                    c6:62:31:cc:b7:07:d3:b1:f1:62:8f:14:5d:5f:6a:
                    3c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C8:56:70:B5:F7:1C:CD:5A:44:AF:0C:9E:06:BF:DF:7C:45:72:5C
            X509v3 Authority Key Identifier:
                keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:27:50:3c:5e:17:67:09:f8:b6:2f:90:a1:8f:b9:87:91:66:
         1e:6f:49:d8:ec:20:6b:f3:74:d2:5d:a1:2e:2f:51:a9:8a:8b:
         58:52:6f:20:aa:8f:ca:f4:b6:50:97:39:4a:df:cf:13:84:2d:
         e8:54:62:c5:f0:68:4c:10:00:25:0d:cd:41:c2:5b:7c:a4:47:
         a4:7a:94:af:e9:1a:05:26:f1:95:a1:dd:23:33:29:e4:ed:b3:
         16:26:b0:45:20:75:0c:19:0f:7a:27:04:b5:b3:28:ab:ea:9e:
         c7:28:6f:d5:7d:29:99:6f:58:4e:91:9a:0d:8d:4e:b3:6d:59:
         18:f7:67:05:8a:3d:f6:fd:28:cf:cd:c4:28:21:74:14:d1:6e:
         9a:bb:8d:9b:37:63:ab:52:1d:2d:6b:c3:69:bd:aa:78:f4:63:
         16:6e:a7:a7:30:f4:bd:2c:95:29:ef:ea:1f:b0:32:82:fb:9e:
         95:85:5d:b0:8c:62:07:ec:39:a1:02:6b:29:43:f5:a3:f6:fd:
         03:6e:0d:5f:6d:57:58:80:b4:5e:7b:4d:9d:71:17:b9:14:9f:
         96:be:51:13:2d:4c:4b:28:54:31:ff:26:60:c4:cb:2c:d6:8a:
         18:79:0e:c4:cc:d5:cd:3f:8d:20:7c:01:06:a0:a0:57:4a:87:
         35:2e:a9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:37:34 2026 by rpki-client