Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
File:                     JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft (raw, json)
Hash identifier:          28bzSujWF4kST66JyS7nKPwRwU3KKiJ82yjWZ5m60/M=
Subject key identifier:   FF:78:16:02:10:A0:22:1E:33:C3:39:33:AD:21:56:ED:A9:4B:C0:51
Authority key identifier: 26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B
Certificate issuer:       /CN=26251cf7d8d6d057dc64715ba836299df39fd85b
Certificate serial:       01A0D8DEA4C8D0FEA42AE72F90AD47E87DDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
Manifest number:          03D5
Signing time:             Fri 25 Sep 2026 14:01:04 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:04 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:04 +0000
Files and hashes:         1: JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl (hash: g5VE1CwT+o0SbacKuuCjdxILSIvSH0JihYrF3sgyLG8=)
                          2: fX-rHvxMS7rGe-P0kdh6qBCV0kw.roa (hash: YxEpHCuxMU6/BR/ByERCcyICEyXZ5/Zrc7JTg1hXiro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:de:a4:c8:d0:fe:a4:2a:e7:2f:90:ad:47:e8:7d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26251cf7d8d6d057dc64715ba836299df39fd85b
        Validity
            Not Before: Sep 25 14:01:04 2026 GMT
            Not After : Sep 26 14:01:04 2026 GMT
        Subject: CN=ff78160210a0221e33c33933ad2156eda94bc051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e9:81:f7:43:70:e5:77:6b:e8:29:5b:50:ea:
                    e5:8b:92:d7:34:4c:c0:89:78:9d:dd:10:87:3d:1b:
                    57:60:40:e1:8b:18:e3:e4:7e:f5:ac:fa:b8:96:06:
                    18:6d:a6:3d:43:5d:95:55:34:11:76:8f:0b:15:40:
                    a5:a1:34:38:2c:d9:77:a4:3c:71:84:a2:7d:e9:a2:
                    00:d1:5d:4e:8a:53:f6:e5:64:2f:9e:5b:08:ca:6a:
                    b3:71:69:fd:a8:59:0c:23:2e:83:b5:38:d6:80:9e:
                    a3:fd:b0:c5:59:62:6e:55:30:56:ae:8e:99:5c:e7:
                    e4:37:19:3d:c8:b4:69:db:63:49:4a:f4:a1:af:34:
                    72:e5:1d:a7:ea:4f:74:00:73:a2:05:64:d2:0c:39:
                    c7:df:57:35:31:43:b7:d0:f8:00:16:c6:b0:2e:10:
                    08:c5:f3:96:7a:b9:82:25:a9:6f:61:55:bb:a9:42:
                    95:f4:74:f7:4e:d0:14:ed:5d:5b:b9:58:1c:e2:13:
                    64:8a:52:f8:99:49:49:ac:73:78:f1:29:f4:69:99:
                    52:ea:99:3b:bf:84:f1:0f:2a:13:e1:71:17:58:99:
                    3e:9d:0d:f9:86:be:df:0b:5f:cc:b5:f6:34:c9:b6:
                    77:12:00:70:56:b9:5e:c6:0f:02:21:ef:8a:18:d4:
                    19:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:78:16:02:10:A0:22:1E:33:C3:39:33:AD:21:56:ED:A9:4B:C0:51
            X509v3 Authority Key Identifier:
                keyid:26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:67:fc:1c:9b:d1:88:a1:47:1d:e0:55:cc:81:32:81:2c:41:
         18:0c:5e:41:dd:24:68:30:fe:ea:fe:d1:11:b8:fb:8d:83:12:
         e3:b3:24:fc:f6:7f:4a:f6:b2:0b:6e:94:cb:ad:d5:dc:d8:cc:
         b3:af:45:69:98:c4:ad:04:9f:27:9f:f2:e8:d7:2e:57:4a:61:
         65:84:a9:08:94:81:8b:75:84:59:0d:40:da:70:83:f1:4c:21:
         1d:cb:b3:24:af:77:73:37:69:09:ed:b3:8d:88:fc:09:1d:f7:
         6b:28:6f:2d:62:73:52:bf:c7:5b:bf:71:26:30:f8:a3:d6:a9:
         42:8e:4a:8f:72:9f:14:30:27:36:ec:03:13:36:df:f5:73:da:
         74:9c:6c:d3:4b:f7:83:bb:5f:d4:62:0c:f0:34:49:6f:04:5f:
         f5:ae:8f:ba:a1:af:b7:08:67:33:f8:33:5f:af:98:51:76:9f:
         e3:60:05:f9:c4:7f:d2:8d:e7:76:84:10:cc:6a:97:71:c8:cc:
         9f:b2:97:ff:c8:6e:ea:85:07:7c:e3:db:eb:a3:dd:68:54:bc:
         96:c9:63:33:d7:1b:32:32:2b:b2:c6:a4:9a:45:8e:28:7d:c6:
         bb:58:f8:be:8d:a2:8f:0b:45:2b:b9:c1:33:8f:9d:df:94:95:
         22:25:f3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:41:52 2026 by rpki-client