Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
File:                     jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json)
Hash identifier:          7tkMdyJrD+9JgkIJ9rKPwAmd5fknL36YJsaJ+Ty+Rf0=
Subject key identifier:   84:06:3C:35:4D:B5:BE:72:25:69:79:EA:E6:8C:2B:2D:80:A0:5A:37
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Certificate issuer:       /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial:       01A0DC171476784E27C4540B56EBD87DB6F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
Manifest number:          06CC
Signing time:             Sat 26 Sep 2026 05:01:35 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:35 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:35 +0000
Files and hashes:         1: 05QIvJOOAUXqj808lKMxTvcjpgI.roa (hash: gKKvCOzRFiKxk9/Kqr5y87Hf373wvPBTO7rH55xDzoM=)
                          2: Ay2BTc4A_hOza1OF3AM0tTQ5C3s.roa (hash: 5UCc6R3kBZZ3v7uKiTMLuh82QUDW3xwXrpPTRqSHXXs=)
                          3: M3bGaMmzldtwIJFmKvbRE4l-_SE.roa (hash: 57TSjLTIljKW30xR2fMZ7JjWCTKCXVEEUqD5yH8z/Do=)
                          4: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: qmWRisYJk0HdLTLZiX7DHxH1M66eOxazj6la+sFbL1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:17:14:76:78:4e:27:c4:54:0b:56:eb:d8:7d:b6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
        Validity
            Not Before: Sep 26 05:01:35 2026 GMT
            Not After : Sep 27 05:01:35 2026 GMT
        Subject: CN=84063c354db5be72256979eae68c2b2d80a05a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d6:2a:83:e7:e5:4d:72:a4:a2:b6:dd:e8:67:
                    bb:8d:c0:ca:fb:b0:c4:07:ee:1a:88:5a:2c:29:5d:
                    23:08:b4:56:1a:b9:70:eb:91:f2:98:2e:e5:ee:45:
                    47:db:dc:8e:75:08:54:7c:36:a7:80:90:61:78:da:
                    d7:42:39:98:93:a2:64:67:7b:e9:d2:66:63:00:97:
                    12:ec:a2:f1:7d:60:3f:26:60:08:1f:f6:5c:54:32:
                    66:86:de:13:be:b5:29:67:25:20:1b:11:f9:d8:4a:
                    39:4d:02:0f:ae:ae:3d:13:c6:5c:1c:fb:54:7b:f1:
                    05:8f:c1:ef:6c:98:89:f7:d1:02:8d:3d:89:5f:e5:
                    c9:f5:a5:cd:05:c6:42:37:19:fd:61:4b:ff:ea:45:
                    20:8a:3d:96:0f:e0:1d:e6:2a:e3:34:57:8b:5b:3f:
                    c4:e2:ff:09:31:7e:d4:54:92:e0:47:64:fb:2e:70:
                    e8:ad:7b:dd:7e:2a:06:c9:e2:f1:ab:d1:4d:da:47:
                    76:da:54:77:e8:0c:cf:dc:7c:23:48:a4:bc:52:05:
                    51:fc:8e:f1:bb:31:55:dc:2c:43:9f:5d:39:61:04:
                    f9:e8:c8:e6:91:a8:2f:03:68:5a:30:22:e8:e8:fc:
                    e1:23:35:d4:71:04:7a:41:c5:bd:63:b9:12:cb:3a:
                    ef:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:06:3C:35:4D:B5:BE:72:25:69:79:EA:E6:8C:2B:2D:80:A0:5A:37
            X509v3 Authority Key Identifier:
                keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:85:6f:ff:34:36:7a:fa:e2:1e:45:9e:78:32:f4:7f:63:f4:
         bf:0d:58:a6:25:a8:2b:59:bd:d5:ec:ea:dc:72:18:37:5a:e9:
         e4:dc:44:0c:b7:70:3e:67:9e:fb:ac:8f:4a:f6:69:df:74:91:
         cc:95:16:bf:1c:e5:de:59:b7:72:5c:8f:9c:01:34:70:ca:5c:
         9d:68:c6:6b:67:0b:35:22:d1:c2:46:54:62:e1:de:4b:33:27:
         60:94:46:f4:ff:64:09:5e:36:61:5e:f5:cd:ea:e4:b0:ee:9d:
         22:ef:cc:94:26:8c:c6:cd:61:9e:21:b7:72:fa:1d:b7:83:bc:
         b2:0d:c7:c3:c1:fe:03:17:f8:db:98:45:ee:5b:c6:9c:be:0b:
         ac:00:26:b9:d7:26:98:6a:80:81:b8:33:9e:5a:67:6e:01:1e:
         27:46:49:d3:92:cd:bf:52:92:b3:6b:09:80:1e:a7:1a:2d:04:
         f5:43:ab:67:ec:3e:8f:25:f4:73:2a:e3:49:cc:d0:c9:fb:60:
         dd:88:71:e1:e1:24:c3:f2:f1:ec:0f:6b:5b:a8:b1:a6:1c:6a:
         ae:11:50:35:b5:9a:8c:a8:34:4b:16:1f:ed:36:24:0f:41:37:
         a6:a4:1c:34:c7:b7:31:0c:e7:56:00:f8:3c:11:57:86:20:cb:
         ca:f7:90:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:01:36 2026 by rpki-client