Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
File:                     J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft (raw, json)
Hash identifier:          zbmlHwNOPLE7IftVZNgx5sBEhgan9NO3XoaAr/9eZXI=
Subject key identifier:   8F:EB:2D:B5:6A:FC:E3:F5:BA:69:27:0F:02:70:A3:61:8B:78:78:7C
Authority key identifier: 27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
Certificate issuer:       /CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Certificate serial:       01A102496E48C39E614027DC97AC47790FC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
Manifest number:          FF
Signing time:             Sat 03 Oct 2026 15:02:09 +0000
Manifest this update:     Sat 03 Oct 2026 15:02:09 +0000
Manifest next update:     Sun 04 Oct 2026 15:02:09 +0000
Files and hashes:         1: AlUMjDs1AMrse1G7Mm4Ls5MOqbg.roa (hash: 1qWTrC8IRHVNBmVAFfK+oN6U6pjXzgDE6zNivII8rew=)
                          2: FQ-cn1xD6KsvCiukzaSyL7Bi5fs.roa (hash: 9/gq5XTu7uOiRhd+dP7NFtGAPJ4cf/D1aTBzP0UWPcg=)
                          3: J50zmCtQdo-LbJV1zf8tg_pspRY.roa (hash: rmMwifoRriqaztxBUMCiGtVjFrOwYaPJiXLxhJjafM4=)
                          4: J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl (hash: daMp6SpRhkU2bMyeuLadhphHF0WRPYIRSRY+WiD9Oeo=)
                          5: Jq-ed1QLe89-gO6ULPwLKZ71NmE.roa (hash: 1NLRbyHK8osbUIIyQ+NGdNAbsIQXKp6uKjtiu7OYwC0=)
                          6: b80T5aKo89J4YEAP6bAiheKe6EY.roa (hash: CLeP0I5fgLyLMgId9gEX6E6rFzYBTw+ow8e/05qzkMY=)
                          7: icPfEymP4sS-B5f6ECwDv6uqJfE.roa (hash: dEtKNt+6pxMCaYnPSrEzFG7rO6REUpLEotnEHbtCIIY=)
                          8: r0qZ8D2aTVCBnUaFMEdO5JjY_WE.roa (hash: vpPL8rRx0AJAgJ6HwLPSPxj+S6uKrcpsWXCyy/Hr0EY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 15:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:49:6e:48:c3:9e:61:40:27:dc:97:ac:47:79:0f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
        Validity
            Not Before: Oct  3 15:02:09 2026 GMT
            Not After : Oct  4 15:02:09 2026 GMT
        Subject: CN=8feb2db56afce3f5ba69270f0270a3618b78787c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3a:f5:72:33:a2:d6:e3:38:72:0e:3c:35:29:
                    3a:ab:c8:1c:03:65:25:09:f3:98:af:cc:34:0a:10:
                    01:cb:51:bc:0f:4b:44:10:72:ff:58:04:7a:f1:92:
                    6b:70:9f:f6:52:6d:1d:3e:02:be:8d:9a:fe:b4:c0:
                    01:66:54:45:39:34:3d:06:2f:2c:31:eb:6c:92:cf:
                    69:c3:8e:58:e5:d6:33:d9:6c:eb:74:22:aa:6d:b4:
                    2a:5a:24:36:81:b5:96:73:46:2e:ab:87:bc:8c:c7:
                    b6:b9:01:37:93:8c:08:1c:46:a6:66:01:c5:56:5b:
                    6f:43:83:f1:39:30:02:13:b4:c5:29:4f:11:61:c4:
                    f0:fd:d3:d1:65:7b:ef:5a:e7:9e:f4:6f:64:36:9c:
                    23:94:fd:55:7a:de:7d:5b:ec:30:a4:ca:93:42:aa:
                    37:ac:ff:ed:de:ea:22:3e:7f:4f:5b:85:bd:43:31:
                    02:5c:fb:2c:1f:6a:35:07:d1:06:6b:4a:59:1e:36:
                    d8:cd:3e:fb:89:a6:82:23:97:a9:4f:e9:2d:fd:34:
                    cb:61:54:ff:f7:91:2b:b6:c0:e5:5e:36:64:4f:ab:
                    af:7f:89:27:5c:20:c6:a1:ca:46:26:3d:24:65:c4:
                    35:7c:2d:cb:19:97:eb:c0:c5:fd:42:b1:77:5c:74:
                    78:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EB:2D:B5:6A:FC:E3:F5:BA:69:27:0F:02:70:A3:61:8B:78:78:7C
            X509v3 Authority Key Identifier:
                keyid:27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:70:e3:07:5d:42:e7:1d:5e:06:bf:b1:07:6d:56:b3:e6:8e:
         e0:ac:82:6c:1e:b7:8b:d9:ca:61:cd:20:4c:ef:00:2b:d1:89:
         ee:f6:2a:f3:8c:3d:31:37:8d:32:57:e0:e3:bb:d2:2a:da:64:
         d8:bb:8b:d3:c4:c1:d2:21:00:ef:46:d4:3f:6b:0e:d4:64:d8:
         64:45:29:f9:73:be:6f:23:7c:9a:fb:44:4b:b7:60:b8:8e:82:
         d7:1a:e3:63:9e:a0:6d:69:4d:62:70:52:b3:32:a7:9a:02:46:
         51:7e:c1:f8:c6:3f:6e:1d:09:ff:76:97:c4:c9:03:8a:c1:8f:
         6a:de:ec:04:fc:b8:79:77:60:56:91:20:03:eb:55:93:ae:a8:
         29:96:f6:e7:2f:f5:6a:6a:29:e6:d7:c0:7e:0a:71:65:4a:06:
         b7:9f:25:49:67:e7:c2:21:2c:75:d1:82:b7:c8:61:08:f3:12:
         f4:84:94:cf:5f:be:79:3f:65:e7:37:b7:c5:42:d8:8c:b0:f6:
         7f:5b:6f:5f:8d:db:f9:5a:3e:20:d6:09:bd:8e:31:6a:63:16:
         71:61:90:33:9e:e7:69:d3:08:72:82:94:59:1f:7d:cb:de:96:
         43:1e:a9:d8:ce:ec:76:cb:96:d0:14:e7:45:b0:8b:0a:3c:13:
         b3:11:b7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:49:28 2026 by rpki-client