Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File:                     JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier:          dAXOtLgYYYKJ7JQqQW7RfOJ8xvk74KA1lrENorSsneU=
Subject key identifier:   04:48:3C:EF:CB:F5:94:95:54:D9:61:D8:32:B5:0C:D2:14:69:1D:9B
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer:       /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial:       01A0DF85DA81C4E5EEB3924D151F13EBAF67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number:          10CD
Signing time:             Sat 26 Sep 2026 21:01:26 +0000
Manifest this update:     Sat 26 Sep 2026 21:01:26 +0000
Manifest next update:     Sun 27 Sep 2026 21:01:26 +0000
Files and hashes:         1: 2dSMBioa0CJlE-_iiWI5yu7Yi7M.roa (hash: 8jy3SPSzF+c2UbKzDY/rfjIL+e/CbsBFRDuCRIAKo94=)
                          2: GHoR9ZMEggl5etzadCZ-jkBp05E.roa (hash: j9tTfPj51VvkHUH/uJri9blMoGZaptJKQ5c9cpUD85M=)
                          3: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: ZiMNPYAPlooVa1uk3KTX0VAQzZYXVAVRZF/3S8Zj6v0=)
                          4: c9iyPohCc2m-c1bnpPfSBn6yumE.roa (hash: NmSWNNWNzaSfRowr5igkS9JLXscmTvVikOdKVv6WlXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:85:da:81:c4:e5:ee:b3:92:4d:15:1f:13:eb:af:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
        Validity
            Not Before: Sep 26 21:01:26 2026 GMT
            Not After : Sep 27 21:01:26 2026 GMT
        Subject: CN=04483cefcbf5949554d961d832b50cd214691d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:f9:60:37:d1:5d:b5:2a:a0:11:21:0a:fd:
                    e8:c4:95:21:7b:14:06:44:3c:0c:8d:1b:66:38:1c:
                    65:b1:a3:27:99:13:1a:54:3a:72:b0:f0:3a:72:6b:
                    64:b1:56:fa:1c:e6:32:ad:be:c4:da:66:ac:d3:ad:
                    a6:78:a4:fc:0c:27:ef:06:5f:96:b2:7d:93:e7:94:
                    d6:f9:a7:90:25:ef:76:fd:5f:86:d4:8d:4b:f6:e8:
                    5e:8a:ed:1b:f1:27:b6:75:15:66:e2:d0:1b:99:05:
                    fa:d3:b7:14:60:50:0b:e0:85:c8:0d:9a:6b:78:26:
                    7a:8c:e4:7c:5a:1a:2d:58:69:5d:ad:97:cc:97:39:
                    8e:dd:54:fd:90:73:11:37:18:43:a1:e4:ff:50:92:
                    1e:8e:5f:e7:54:ca:17:fa:7a:41:61:5c:de:46:ba:
                    98:93:79:3d:10:dc:cb:5a:0d:40:59:9a:0c:4a:69:
                    ee:94:6d:c4:fb:5a:8b:c2:30:d8:95:fd:e9:8d:5b:
                    11:af:71:c8:93:47:26:db:69:e8:cd:32:77:47:7e:
                    6f:cd:7b:fc:b4:90:62:c6:c3:6d:80:8e:18:e2:6f:
                    9f:a2:78:6c:ce:76:a2:bf:7a:ff:6d:45:95:f3:09:
                    52:2f:89:00:7f:85:e4:2a:8e:06:1a:24:9a:93:66:
                    cd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:48:3C:EF:CB:F5:94:95:54:D9:61:D8:32:B5:0C:D2:14:69:1D:9B
            X509v3 Authority Key Identifier:
                keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:03:04:61:05:54:40:84:c1:fa:f7:78:89:74:70:8c:b3:8e:
         99:6a:a9:ee:64:16:34:98:6a:e7:a3:ca:b8:9a:02:27:13:89:
         34:a3:ce:56:37:32:5a:46:86:bd:bb:49:a3:17:d6:75:b3:00:
         70:7d:60:0b:68:0a:bd:37:67:04:0d:87:58:fb:38:38:95:19:
         1e:3b:55:74:71:e5:7d:30:ae:61:c7:3c:33:2e:55:5a:70:fb:
         cf:d0:b8:9c:03:21:53:22:6c:47:09:a4:40:bf:45:1f:9a:81:
         b0:71:db:ec:a6:28:ec:71:4d:de:d8:67:50:a9:f3:95:8f:ee:
         79:4a:bf:80:b8:63:51:fc:6a:c3:51:96:df:21:e5:2f:2c:e0:
         e3:52:9e:a5:6d:f8:5e:ab:fb:3e:f0:69:e3:32:7a:f9:c0:65:
         2c:67:78:64:04:82:50:9f:36:53:4a:0a:0d:ab:dc:1b:36:37:
         d2:1a:d3:02:fc:55:16:a2:2c:18:92:5e:5b:ba:a2:57:8e:11:
         8f:26:67:dc:41:a7:04:a7:e7:4c:91:5a:99:0b:7a:ef:db:26:
         06:43:4c:50:6f:b9:c7:ab:b0:85:2e:54:f2:a2:e2:30:94:ae:
         9c:db:ce:bc:6c:42:00:31:d4:f3:2d:e1:fd:ed:d3:99:19:d9:
         34:6a:46:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:58:48 2026 by rpki-client