Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
File:                     _JvrAZLQ00al5oWKp0SwQ0_tMYk.mft (raw, json)
Hash identifier:          zdhFodmgQbud13rqyzWVIPCN3fmvZ5Jwm5pK93WS0M8=
Subject key identifier:   9A:1F:73:42:CC:D2:EB:CA:2F:34:64:78:8C:08:65:ED:30:53:B6:7A
Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
Certificate issuer:       /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Certificate serial:       01A0D15B85F4EF105231B823CF0727230C62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
Manifest number:          1A2D
Signing time:             Thu 24 Sep 2026 03:00:31 +0000
Manifest this update:     Thu 24 Sep 2026 03:00:31 +0000
Manifest next update:     Fri 25 Sep 2026 03:00:31 +0000
Files and hashes:         1: P2oeyWo8SpEDQbw0DLQ8DP_geQk.roa (hash: PEQ4xvXLXvHc+J3GPvJUsqvRxaO/0pnd2viLxQ0rLmw=)
                          2: _JvrAZLQ00al5oWKp0SwQ0_tMYk.crl (hash: RHwhAc6xZbPN45zYSo3K2md4qTr84nQpTDEvw9EJWOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5b:85:f4:ef:10:52:31:b8:23:cf:07:27:23:0c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
        Validity
            Not Before: Sep 24 03:00:31 2026 GMT
            Not After : Sep 25 03:00:31 2026 GMT
        Subject: CN=9a1f7342ccd2ebca2f3464788c0865ed3053b67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:1b:2e:9d:bb:97:09:b7:71:52:f1:9c:b8:
                    8a:b0:ae:47:f5:0b:f4:31:c4:89:67:f9:c3:ab:23:
                    8e:65:a7:ef:da:8a:31:ba:2a:dc:33:61:20:c8:c7:
                    13:36:fa:45:18:4f:23:5b:25:7b:90:83:16:e4:3c:
                    c6:8c:08:b6:87:3f:00:94:53:26:5a:29:39:e5:1f:
                    20:31:e2:42:a4:f7:4e:fb:9e:6e:25:95:87:e4:0c:
                    bd:a9:2f:b5:5f:46:17:98:b6:96:1a:76:d6:93:1b:
                    1a:2c:21:4d:61:8d:cf:a4:e8:03:d9:e3:12:84:1a:
                    4f:d3:9e:be:e0:c2:53:0e:ee:36:3e:43:df:d5:dd:
                    eb:23:a9:38:74:02:83:e6:41:3b:9c:14:4b:a3:f1:
                    b1:76:ab:49:5a:94:8f:29:c3:92:a9:37:43:da:88:
                    3d:bd:db:ae:db:1a:9f:5a:e0:50:55:55:9b:2f:ae:
                    ba:49:55:33:82:18:92:fe:28:77:13:5c:3f:ce:4a:
                    5b:28:a0:03:9a:8e:d9:3b:48:7b:29:5f:41:d8:1a:
                    f5:65:5b:6c:47:3d:46:85:bd:e1:de:2a:ad:16:07:
                    dd:1a:a7:c0:31:ad:c6:39:60:ef:5c:ff:84:4f:eb:
                    83:99:db:2e:ee:a6:4a:80:a5:30:c4:3d:44:97:c8:
                    14:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1F:73:42:CC:D2:EB:CA:2F:34:64:78:8C:08:65:ED:30:53:B6:7A
            X509v3 Authority Key Identifier:
                keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c6:ec:78:0b:ec:8e:60:d0:6e:40:09:9b:65:38:d6:01:e0:
         90:08:d4:40:bb:5f:eb:e6:07:4c:b0:e5:a9:d3:c1:27:a0:b4:
         53:18:18:19:b9:06:d8:7d:ee:44:5c:31:61:bc:df:e2:86:e7:
         6a:e6:4b:95:ab:bd:70:52:69:4e:24:1a:b9:7c:b1:54:aa:3e:
         fc:d2:9c:49:06:61:71:26:68:d6:17:46:80:c0:bf:35:25:87:
         c3:93:9a:91:f5:fd:8e:af:24:5f:a9:f3:4d:d9:67:aa:10:2d:
         c3:75:84:bf:4d:7c:b0:ea:43:f1:59:40:13:4f:d3:df:5d:77:
         4c:e4:52:39:7a:ff:68:db:ad:fe:fe:d6:44:4b:a3:6e:7d:a7:
         fb:c2:77:da:82:41:43:fb:9d:cd:86:2d:26:49:e7:ff:11:dd:
         ec:79:dd:a2:ab:37:1b:e6:dd:3f:00:b3:31:6e:91:25:97:af:
         83:01:0e:4d:87:f9:a5:b4:4d:3a:8c:15:9a:13:e6:5f:4e:d8:
         fe:b9:6d:2a:d1:9d:69:9d:1c:4d:61:13:bc:33:4b:91:42:6e:
         c4:64:e4:dd:0e:6c:22:0a:9c:e9:73:1d:65:dd:81:f5:98:67:
         2c:bc:45:f1:9c:6c:e6:18:2d:5d:c4:a6:81:9f:4b:a6:8c:98:
         6a:60:9d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:49:10 2026 by rpki-client