Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
File:                     _JRi_vSVJI_b2XNCH96-IWJc3x4.mft (raw, json)
Hash identifier:          tV/R2+B4xaJdUQJMGA9hu14LCxg9zup1DnLGO8yWMwU=
Subject key identifier:   DC:9E:95:23:8B:21:6D:00:BF:01:25:D4:ED:FD:7F:3A:A6:05:BB:00
Authority key identifier: FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E
Certificate issuer:       /CN=fc9462fef495248fdbd973421fdebe21625cdf1e
Certificate serial:       01A111BC53D50C82D3D1DA34BEA898FABB30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
Manifest number:          0BA7
Signing time:             Tue 06 Oct 2026 15:01:57 +0000
Manifest this update:     Tue 06 Oct 2026 15:01:57 +0000
Manifest next update:     Wed 07 Oct 2026 15:01:57 +0000
Files and hashes:         1: 8POUdXxydU2NWgTjMAS46lsReJU.roa (hash: NHxwG6zBnwiJw78rQkaCy5d/Y3YySuB1Lrikl1PrCTw=)
                          2: _JRi_vSVJI_b2XNCH96-IWJc3x4.crl (hash: UfOUBf+/yjxTr8G3ZIVyoG3pf8Kysquc6L9yqjhicQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:bc:53:d5:0c:82:d3:d1:da:34:be:a8:98:fa:bb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9462fef495248fdbd973421fdebe21625cdf1e
        Validity
            Not Before: Oct  6 15:01:57 2026 GMT
            Not After : Oct  7 15:01:57 2026 GMT
        Subject: CN=dc9e95238b216d00bf0125d4edfd7f3aa605bb00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b5:b5:8c:c4:f7:0e:2b:44:e5:ce:4b:72:00:
                    18:77:62:37:2c:b8:4c:24:74:8b:c3:27:fb:5c:4b:
                    d6:08:f0:7e:21:95:86:72:8b:30:26:eb:95:c6:7a:
                    08:0c:b4:8a:3f:80:de:9f:7f:f8:c1:3f:96:14:3d:
                    39:b8:0c:0f:46:75:aa:26:62:94:e9:cf:d4:91:17:
                    17:9c:5b:d0:a6:41:80:fc:2d:a7:39:52:d3:ec:31:
                    54:4f:e2:6c:73:b1:77:1c:d8:04:d4:47:78:2d:0f:
                    89:32:64:b6:5b:6b:18:8d:e1:c0:7e:31:de:1a:83:
                    3a:c5:86:1a:dd:9b:da:c6:e9:72:19:a4:ab:1a:ac:
                    34:e5:68:94:28:68:f7:43:92:e0:f2:24:74:a2:fb:
                    05:29:8f:8a:46:21:36:89:3a:42:96:8e:03:33:d3:
                    de:09:22:7d:a6:70:59:2c:fd:d0:e4:94:90:a1:c5:
                    47:5f:16:8b:ba:6e:86:3d:e0:71:3a:6c:88:dd:91:
                    5d:cd:b4:71:85:57:d7:aa:48:2d:3a:60:7e:69:2c:
                    9b:05:28:e1:a3:e9:4e:af:14:45:51:9d:2d:75:58:
                    ad:27:73:6a:3c:3c:8f:0f:eb:98:4b:3f:92:71:62:
                    61:1e:2c:5d:07:28:e6:2b:6f:40:fb:53:68:4f:d3:
                    67:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9E:95:23:8B:21:6D:00:BF:01:25:D4:ED:FD:7F:3A:A6:05:BB:00
            X509v3 Authority Key Identifier:
                keyid:FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:58:3b:27:d5:6c:eb:2c:3e:e1:1c:e1:e8:a0:8b:0e:cd:e2:
         cc:3f:1c:30:d9:22:1c:3e:2a:93:11:c2:6a:b0:9c:d8:58:fe:
         af:a8:45:ac:a1:27:57:de:2c:1f:3c:eb:c4:95:b8:01:68:96:
         c3:70:e3:d6:eb:17:f1:5f:94:b4:48:00:e4:8d:98:b8:ab:26:
         a8:18:ef:19:80:7d:72:72:8e:2f:fd:00:b2:92:61:08:eb:0d:
         23:81:52:46:12:15:ad:31:c7:97:49:13:14:76:8f:0a:ee:81:
         b8:96:54:4a:10:49:8b:d2:17:38:38:b5:67:b2:56:9e:4f:ef:
         89:17:d7:f1:27:b2:30:0f:ad:d3:76:03:9d:e1:8a:6a:fa:4b:
         77:41:80:35:05:b6:61:ba:8e:2a:a2:92:d3:db:05:5e:f3:8b:
         56:4d:c9:52:48:60:a4:6f:15:87:1e:5f:ba:99:2f:54:11:b0:
         64:bb:c6:bf:d5:45:a2:60:14:29:cd:11:70:a5:34:5b:f4:29:
         50:47:8b:50:f8:4a:cd:30:2a:50:90:ac:87:e0:a7:77:33:f4:
         42:03:c1:ca:62:ef:01:cb:0b:5f:c3:78:c3:14:94:ca:34:63:
         17:fb:7b:53:ad:c8:58:c5:1f:db:7e:97:fc:ff:de:e4:d2:8c:
         a8:4a:f6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:43:32 2026 by rpki-client