Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
File:                     JvFwsZuX7hfecyobaK4iuo5fVuQ.mft (raw, json)
Hash identifier:          ZOs453RX9BQnSJYH8Lk514n/xiMzrD3fu+NZSVqWXw0=
Subject key identifier:   7C:AF:A8:19:8A:E5:20:7A:29:5E:4A:54:CF:9B:45:EA:A4:BD:76:D9
Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
Certificate issuer:       /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Certificate serial:       01A0D5393135C119155924CC350FB3DEB1D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
Manifest number:          0D4E
Signing time:             Thu 24 Sep 2026 21:01:30 +0000
Manifest this update:     Thu 24 Sep 2026 21:01:30 +0000
Manifest next update:     Fri 25 Sep 2026 21:01:30 +0000
Files and hashes:         1: 4FrplW2P0skTJUa1sCtVMSIppcM.roa (hash: D9MVNJi9010IKib/p9TXKfT7aX0EYXNgCDs72hr1/ps=)
                          2: JvFwsZuX7hfecyobaK4iuo5fVuQ.crl (hash: mZcVvY2/QX5JZNK0G90VJbpnvcBLlfVen3YOQRQHdZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:39:31:35:c1:19:15:59:24:cc:35:0f:b3:de:b1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
        Validity
            Not Before: Sep 24 21:01:30 2026 GMT
            Not After : Sep 25 21:01:30 2026 GMT
        Subject: CN=7cafa8198ae5207a295e4a54cf9b45eaa4bd76d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6c:7a:61:eb:a1:5b:8e:2b:fa:c6:76:34:ce:
                    0a:ac:72:b9:a7:9f:18:a9:03:e3:31:eb:18:bd:e0:
                    13:56:05:5b:29:90:c7:7e:80:6b:30:52:0a:b4:d8:
                    7c:10:8a:59:9e:93:8a:7f:4c:97:91:c1:f4:2d:7d:
                    c1:ba:87:4d:b9:4a:b2:fd:b9:1b:57:59:db:a3:62:
                    ae:85:27:6d:f3:b6:4a:9d:49:74:1e:eb:8c:47:b2:
                    b1:1e:3c:ea:8b:23:89:45:44:3e:4b:76:ca:14:ed:
                    56:05:a4:0c:1f:27:13:0d:f9:16:78:a1:af:37:41:
                    9b:77:c8:ad:10:28:67:02:9c:3d:48:b7:ab:e4:b6:
                    a2:1a:41:7b:7f:5b:2a:39:e0:c4:ef:f1:97:96:f0:
                    8b:7b:03:27:b8:c2:ea:e3:ab:78:1c:68:3e:2f:47:
                    1a:4b:64:5d:67:f0:c0:77:6d:2e:8b:b1:ba:34:e6:
                    6a:e1:26:37:e2:0d:be:09:39:1e:a4:50:f7:be:cf:
                    c3:fc:a9:ad:a6:14:63:95:2b:74:24:e8:b1:fc:c1:
                    cf:16:e4:16:dd:9a:07:9c:a9:61:41:a1:95:64:c7:
                    5f:0e:20:e5:1b:d0:bd:dd:29:d5:39:6e:39:dd:bc:
                    ef:62:ea:66:23:fb:b8:2d:1e:3e:ba:78:15:f1:43:
                    6d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AF:A8:19:8A:E5:20:7A:29:5E:4A:54:CF:9B:45:EA:A4:BD:76:D9
            X509v3 Authority Key Identifier:
                keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d5:ef:b5:49:ad:e3:60:c3:af:18:6a:51:36:ce:bb:c9:52:
         ec:c6:38:2a:d4:dd:c7:47:a5:a3:59:83:1b:e6:63:67:ba:91:
         14:a6:4a:aa:ad:a2:cd:d8:3f:13:99:b2:c0:b4:72:f3:d1:bb:
         ad:cf:7f:39:80:1e:ce:97:4a:4a:d0:68:07:d1:e6:04:2a:44:
         3a:28:ac:75:e9:15:85:79:43:41:c4:76:4d:d4:a0:01:a5:b6:
         30:f0:f4:62:2d:1a:4e:0d:e5:34:76:cb:ff:3c:f7:38:30:db:
         5c:a0:eb:27:cf:91:db:d5:b8:1e:f8:25:2e:5d:e7:04:9a:7e:
         05:fe:24:69:fa:76:41:6b:6a:4a:ec:92:50:28:d0:2b:32:e5:
         4e:ef:13:5c:e2:0a:11:f2:24:b4:8a:66:8a:22:ef:65:66:75:
         c0:c4:ff:1d:cd:bf:25:7c:94:7d:fb:e0:da:6b:83:3c:5b:0c:
         8f:3f:35:42:3d:54:19:50:d9:35:45:1a:38:a3:fc:f9:45:51:
         71:06:83:14:a5:d9:82:c6:51:c2:2f:fe:53:77:b7:0b:6e:34:
         c4:d4:8f:90:e4:4d:3d:5c:eb:85:c8:ad:d1:3f:be:44:b8:5d:
         ef:28:49:42:eb:da:e2:ba:30:d1:94:0a:f5:15:ca:03:c0:fa:
         79:00:87:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:14:51 2026 by rpki-client