Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.mft
File:                     JjRrQucioj8zB71y9XN2LAJPI4U.mft (raw, json)
Hash identifier:          o/5ymlb0l5gSgMp4yqFVIVW8ERGLwLgHxKeFKOEp6NE=
Subject key identifier:   FF:CF:06:65:D0:B0:7D:C8:5C:E4:98:1B:30:AF:B0:D7:40:10:D8:92
Authority key identifier: 26:34:6B:42:E7:22:A2:3F:33:07:BD:72:F5:73:76:2C:02:4F:23:85
Certificate issuer:       /CN=26346b42e722a23f3307bd72f573762c024f2385
Certificate serial:       01A0CE5B201E96BE694F56ECEE96A1B4E577
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JjRrQucioj8zB71y9XN2LAJPI4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.mft
Manifest number:          0175
Signing time:             Wed 23 Sep 2026 13:01:13 +0000
Manifest this update:     Wed 23 Sep 2026 13:01:13 +0000
Manifest next update:     Thu 24 Sep 2026 13:01:13 +0000
Files and hashes:         1: JjRrQucioj8zB71y9XN2LAJPI4U.crl (hash: gtn8Bynaali1t6SFOK+fEVqvGpaNmSChISSePJJSm5k=)
                          2: q8RepG1EYgx-WqxItUPX_OH0OX0.roa (hash: b4kZ60ZayB+5ne7ycneOFCjARrzoZ1efrTrEpXK66A8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JjRrQucioj8zB71y9XN2LAJPI4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5b:20:1e:96:be:69:4f:56:ec:ee:96:a1:b4:e5:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26346b42e722a23f3307bd72f573762c024f2385
        Validity
            Not Before: Sep 23 13:01:13 2026 GMT
            Not After : Sep 24 13:01:13 2026 GMT
        Subject: CN=ffcf0665d0b07dc85ce4981b30afb0d74010d892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c1:bf:c0:fc:49:55:57:d8:89:28:3c:19:a6:
                    5d:d8:97:20:3c:9e:db:21:10:48:8f:32:46:18:de:
                    ba:91:fd:b0:f5:46:d1:af:64:ba:0e:97:4e:9d:3d:
                    9d:34:ad:51:51:6e:6a:ae:00:2c:be:c9:2b:c6:e4:
                    85:1d:02:d6:ea:f3:33:d2:af:bc:36:17:d2:5a:eb:
                    75:f9:fe:cc:06:32:be:4e:44:f4:62:0b:f6:32:f3:
                    aa:73:dc:96:bf:f2:08:ec:07:95:c0:5b:f1:66:52:
                    ef:91:52:06:8c:8f:58:ee:9b:e8:a0:50:9b:22:e7:
                    36:d7:85:42:f1:c7:5e:79:e8:ee:8c:ff:1d:f1:96:
                    42:22:f6:93:e6:99:4c:fa:91:11:5e:a4:a5:30:4e:
                    c7:87:fa:b4:66:af:a7:87:92:ed:03:94:55:05:bd:
                    dc:cd:a3:85:e6:5a:97:46:d5:d1:6c:76:a7:ce:f5:
                    f9:97:6c:86:39:5a:98:fd:96:10:e1:dd:01:0a:30:
                    bf:43:b1:36:af:7c:67:b9:80:ac:65:fc:73:3e:39:
                    0c:3a:05:e6:05:e4:b7:aa:d1:ce:2f:b4:d4:8d:eb:
                    87:14:80:1e:f6:28:2e:50:1e:b6:9a:05:86:87:a2:
                    70:58:db:fe:ef:b1:52:30:cf:7e:97:57:81:8a:cf:
                    7d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CF:06:65:D0:B0:7D:C8:5C:E4:98:1B:30:AF:B0:D7:40:10:D8:92
            X509v3 Authority Key Identifier:
                keyid:26:34:6B:42:E7:22:A2:3F:33:07:BD:72:F5:73:76:2C:02:4F:23:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjRrQucioj8zB71y9XN2LAJPI4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:3f:9a:ae:e7:70:e9:9a:d2:1d:a8:17:2e:8e:5a:94:67:54:
         fa:bd:5c:d3:de:6c:a6:8d:09:81:94:af:d3:ed:94:e6:52:25:
         ee:db:2f:ea:bd:f6:61:9c:a8:f9:83:6c:12:5e:42:99:64:cd:
         53:0d:9a:91:4a:2c:26:a2:52:d3:ca:b6:81:8a:f3:f3:7b:2b:
         68:5a:be:2f:13:5e:77:b9:f3:b0:a0:1f:37:65:bf:89:80:6a:
         c8:33:f5:f6:4f:ec:c4:64:8a:c4:0a:de:bd:24:ed:4a:90:a1:
         9d:68:20:1c:9f:e1:86:cd:6e:cd:03:a2:2b:23:f3:56:c7:17:
         16:3f:e8:2d:3d:c0:f3:f2:59:98:0f:70:7f:a8:79:7c:90:3b:
         95:b7:20:e0:56:c3:b4:02:8b:f3:05:fb:7f:12:ca:c2:1c:85:
         5e:0e:2e:41:c2:67:45:74:16:c6:dd:34:c7:1f:50:50:71:bf:
         4a:21:2c:74:21:ad:cb:15:0c:5b:5a:58:60:a8:3b:4b:f2:0e:
         20:db:05:28:ee:69:1e:7d:6b:c3:3c:d4:73:ce:29:6e:e5:ef:
         8d:36:aa:60:ef:f5:cf:7a:a8:82:ce:45:5e:11:8b:fc:5e:e4:
         65:ca:15:5a:7a:74:8f:e3:ff:9a:8f:c4:03:2c:37:49:d5:bb:
         ce:49:a6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:12:08 2026 by rpki-client