Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
File:                     Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json)
Hash identifier:          EJc831+m2B2Nv1H5ENqlIMMbU6BenBHEYWxR3aoOqDI=
Subject key identifier:   66:DE:4F:0E:D0:C5:45:28:14:DF:75:9F:A7:46:B1:F8:2B:CE:08:A1
Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
Certificate issuer:       /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Certificate serial:       01A12C5707E3F40ED621FE814543B69C11CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
Manifest number:          0480
Signing time:             Sun 11 Oct 2026 19:01:03 +0000
Manifest this update:     Sun 11 Oct 2026 19:01:03 +0000
Manifest next update:     Mon 12 Oct 2026 19:01:03 +0000
Files and hashes:         1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: vWHzKb/uqWdoVBef7kr6ktWOc7aaJ/M4wbUSl3pc70c=)
                          2: LPtgrCTtvqxu3cjuNnJKHmVe1hU.roa (hash: BGV23TnfOPa93rWNrPOH2klHvaD0qSg8RA6zxqAnbzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2c:57:07:e3:f4:0e:d6:21:fe:81:45:43:b6:9c:11:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
        Validity
            Not Before: Oct 11 19:01:03 2026 GMT
            Not After : Oct 12 19:01:03 2026 GMT
        Subject: CN=66de4f0ed0c5452814df759fa746b1f82bce08a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:65:7f:8d:4f:e2:c3:23:d2:c6:c4:d1:89:
                    6d:45:e6:d5:7d:8d:cb:c8:de:f1:f6:bb:f5:70:87:
                    34:cc:7f:0c:d6:41:61:05:76:59:da:8b:8b:12:86:
                    a4:b9:d7:8a:03:06:04:b8:9b:5a:e6:01:e0:bc:08:
                    bb:67:62:9c:e5:81:a0:e0:6c:65:ce:82:e3:10:de:
                    59:13:f4:2b:20:64:a3:1f:59:a4:98:1f:9c:9f:cc:
                    a1:c9:34:ac:74:d3:be:1f:a1:e4:f7:c7:36:8f:28:
                    8f:35:e3:37:52:12:6e:96:61:c3:00:3f:e4:36:ba:
                    8c:9b:23:48:11:18:a7:42:22:31:9c:4d:67:6d:14:
                    77:f9:e1:c2:30:0d:55:e0:95:ae:39:61:bb:8d:fc:
                    58:d5:db:ca:52:6d:f3:08:ac:a0:f6:55:35:7f:6f:
                    87:08:ac:1c:91:2b:40:34:60:87:e9:4b:46:5f:e0:
                    87:be:7a:b3:e5:ab:07:08:ea:54:9f:e0:43:ae:d6:
                    b5:15:95:b6:2e:dc:cc:30:4c:fb:79:ba:6f:4c:01:
                    89:9b:5a:9e:ee:8b:72:23:40:28:93:e1:3e:f9:c6:
                    f3:28:de:a5:c7:8f:fa:1b:1e:91:ba:ca:f6:ef:ed:
                    60:b0:01:0f:31:34:78:2d:37:8e:54:47:db:a5:8a:
                    48:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DE:4F:0E:D0:C5:45:28:14:DF:75:9F:A7:46:B1:F8:2B:CE:08:A1
            X509v3 Authority Key Identifier:
                keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c2:0f:85:bd:2a:9c:dc:5f:9f:4d:7d:8a:8b:f2:d9:40:bf:
         7e:af:73:f0:95:a7:03:bd:ec:f0:bd:76:1e:9f:ba:02:28:fb:
         5d:33:25:c2:0f:ed:3f:5d:51:ba:48:ce:46:df:56:99:a3:67:
         cf:f8:5f:8a:c1:f2:b7:05:16:86:24:c4:9d:14:41:a7:a5:39:
         1e:a5:5d:7c:63:65:c8:8a:bb:a8:54:96:bb:b3:23:07:46:e0:
         f4:f9:41:30:ec:b7:50:29:ee:74:b9:dc:4b:70:a8:0b:ae:ad:
         27:59:1a:0c:09:a9:7b:ea:bd:1b:ca:d4:6a:94:46:e8:a2:6d:
         be:0b:d8:c8:f9:a8:08:58:a2:cf:e8:b3:e7:92:34:18:14:d0:
         49:da:83:0d:85:9c:d6:e6:c9:30:0f:06:08:ce:71:5c:70:2c:
         4f:87:b4:a2:a7:ae:1d:e4:93:65:b6:36:e6:74:4d:e1:e8:aa:
         e6:44:6a:49:37:e1:27:de:bc:69:23:9e:eb:a0:00:e4:95:db:
         5d:ee:fa:85:9f:e1:2e:6a:54:c7:89:ff:2e:dc:04:18:63:b4:
         6f:32:ec:7d:5b:70:cf:d8:1b:a3:a7:b7:d6:42:0b:68:e9:ab:
         b2:2e:9e:34:a5:17:11:11:9a:7b:bc:42:87:17:82:2b:42:29:
         51:e9:2e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:41:22 2026 by rpki-client