Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
File:                     jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json)
Hash identifier:          JCbrTHbZSTUezMufnQZi/tZzcOprID7Ew/dTRHv9G64=
Subject key identifier:   56:E3:84:1D:82:D8:DA:2C:E7:3C:9E:E9:72:E5:00:07:BE:31:DD:6B
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Certificate issuer:       /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial:       01A0F00B96006C27223E471C56685F7DC1D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
Manifest number:          1941
Signing time:             Wed 30 Sep 2026 02:01:26 +0000
Manifest this update:     Wed 30 Sep 2026 02:01:26 +0000
Manifest next update:     Thu 01 Oct 2026 02:01:26 +0000
Files and hashes:         1: 5lor0bwtxK_7lFhqP5JQsE38fgY.roa (hash: Gko1WgTJjCRM1Vd8FnhB+R8Xwpk2DGktIYr+kX9efeQ=)
                          2: _Q8Mb-3UvfMhIjv_xRaFDoLApBs.roa (hash: IHr0cgRLyfbFPNalDZLOfmKJvgcvrc9t828c9yf4EtU=)
                          3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: TB1ViR7VW0XbVmOUc8Hbx3dWBeeBzRIC5/NZ9V8ezZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 20:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f0:0b:96:00:6c:27:22:3e:47:1c:56:68:5f:7d:c1:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
        Validity
            Not Before: Sep 30 02:01:26 2026 GMT
            Not After : Oct  1 02:01:26 2026 GMT
        Subject: CN=56e3841d82d8da2ce73c9ee972e50007be31dd6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d5:d9:2e:65:dc:2a:d2:39:09:58:d8:22:a3:
                    cd:de:b7:d4:67:d8:0f:00:3c:ad:3d:1c:2e:5a:fe:
                    a3:ce:11:8d:24:9c:4f:f3:01:79:9e:6e:4f:0d:d3:
                    00:54:c8:01:57:50:5c:4b:de:c3:9a:a4:4b:c1:a0:
                    4d:e2:7e:43:7c:17:0c:11:6d:7e:e1:04:d9:b6:e7:
                    a3:ba:45:7e:4d:4f:71:79:3b:dd:cf:34:67:da:ec:
                    3f:3a:8c:d6:9d:0f:e1:4b:a0:cc:73:b6:91:37:57:
                    9d:f0:8b:77:0b:c7:81:82:1f:76:6e:26:29:b5:4e:
                    1f:03:b5:4c:15:b6:cd:e2:3a:cc:23:a5:69:0c:20:
                    8e:b1:4f:1d:b2:4a:ba:92:a4:5c:ae:2d:56:e5:42:
                    bd:7f:77:2c:70:2a:6a:9f:18:6f:7a:97:fd:d3:57:
                    64:c9:68:4e:d3:02:ab:1e:6a:ec:8b:e1:91:51:fc:
                    dc:c5:5f:d9:84:f2:ba:f4:ad:77:47:40:4c:48:80:
                    f5:c9:18:55:c4:b6:b9:3c:32:db:7b:8e:bb:23:46:
                    db:a6:32:29:6a:69:4a:02:3b:0e:75:92:a0:11:23:
                    cb:2d:22:84:bf:f0:ad:60:b0:bb:47:ff:cf:ab:b9:
                    c7:64:7e:5d:9e:8b:ad:ea:49:ca:31:4f:ec:a2:11:
                    c6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E3:84:1D:82:D8:DA:2C:E7:3C:9E:E9:72:E5:00:07:BE:31:DD:6B
            X509v3 Authority Key Identifier:
                keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:79:7b:df:8d:1a:9a:88:71:10:ed:a4:4c:c6:36:3f:4b:a4:
         82:13:41:ad:d8:0a:e4:a2:f4:0f:37:cf:2a:1a:62:65:0b:cb:
         95:8f:8d:4f:c9:51:7f:5d:c0:a6:8f:01:7d:5d:d3:b6:f8:79:
         2a:b9:5f:38:f8:59:74:7f:e4:62:7f:d0:8c:cc:89:c3:15:e0:
         c5:19:7b:09:26:8c:ec:6a:4a:2e:e8:52:6a:df:29:f7:8b:78:
         06:c4:31:2a:76:23:ba:f5:68:42:d3:6d:aa:45:e8:31:9c:88:
         17:07:d6:e2:5c:4d:20:58:a5:c6:b4:ac:e9:c5:a7:19:0f:aa:
         4a:ac:14:82:57:7f:31:6f:90:d3:75:d5:c6:93:c1:fc:30:92:
         a9:89:31:fb:94:b7:bc:12:66:11:69:40:1d:d1:97:ff:eb:ab:
         0c:c4:71:5e:a8:74:57:85:a5:d2:2f:68:f8:68:7c:cb:f9:34:
         dd:ac:c9:11:57:a4:76:5e:44:a6:7b:3e:93:0b:e6:98:e3:93:
         36:17:97:ed:9f:8c:91:5d:48:c2:e5:0a:d1:10:eb:be:68:31:
         f0:81:cc:b3:81:de:fc:82:0c:9d:fe:ac:1d:8d:0a:dd:ac:00:
         89:70:da:d8:1e:fd:3a:ea:5e:76:61:51:f4:5f:34:4a:39:00:
         f8:2c:fa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 06:31:24 2026 by rpki-client