Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
File:                     Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft (raw, json)
Hash identifier:          I/WC4HKm7+hYPbDL2yTlYINDD45bm7+DYBNS5bOizBk=
Subject key identifier:   0E:61:13:0D:DE:16:BA:A6:84:58:27:87:F9:C6:67:93:CF:D6:79:6A
Authority key identifier: 25:AF:AA:1E:FB:29:FF:A5:6E:6F:5D:42:06:22:DF:F0:69:7F:A6:27
Certificate issuer:       /CN=25afaa1efb29ffa56e6f5d420622dff0697fa627
Certificate serial:       01A131B4978B877C048A637B7C787E84163C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
Manifest number:          0173
Signing time:             Mon 12 Oct 2026 20:01:21 +0000
Manifest this update:     Mon 12 Oct 2026 20:01:21 +0000
Manifest next update:     Tue 13 Oct 2026 20:01:21 +0000
Files and hashes:         1: Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl (hash: 9SoNhX0Q6z5xisA97wDE7kUnsc/hIGvrgFUKjGBWB2I=)
                          2: wzD-Y1XRaC-02kl2ZMaS3E6fGFs.roa (hash: J6QWqMXaVC1M4duQaZv5ICVDFegW9Ncnya/aGNgLbJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 20:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:b4:97:8b:87:7c:04:8a:63:7b:7c:78:7e:84:16:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25afaa1efb29ffa56e6f5d420622dff0697fa627
        Validity
            Not Before: Oct 12 20:01:21 2026 GMT
            Not After : Oct 13 20:01:21 2026 GMT
        Subject: CN=0e61130dde16baa684582787f9c66793cfd6796a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:e2:34:ad:6d:ae:8e:48:ef:2d:8d:c5:1a:
                    dc:67:43:f2:8e:19:63:07:00:19:37:5e:d7:a3:54:
                    52:f0:fa:8a:ca:66:95:68:0a:5f:ef:93:5a:44:bd:
                    f4:1c:1f:b3:ce:32:9d:9c:1c:c3:ee:07:25:36:8f:
                    9b:e4:55:ef:38:e0:ab:45:5f:2c:e5:b7:cd:56:2d:
                    7c:be:44:7e:d1:aa:10:f5:00:e2:b6:41:d8:3a:a0:
                    d7:e2:c8:80:9e:81:95:53:ba:ed:c3:b5:11:b3:a3:
                    db:11:3b:0e:8a:cb:36:e4:52:f9:d9:93:eb:60:1e:
                    cb:9c:d5:88:a6:fc:92:fb:38:58:c4:68:56:1f:df:
                    92:c9:95:3d:c6:d7:43:f8:1e:a3:f1:a7:b0:a2:08:
                    e8:88:91:2e:30:7b:c0:39:47:2e:91:0d:d9:ef:90:
                    5c:f9:2b:aa:50:ed:3c:eb:da:39:b4:a3:12:66:0d:
                    2d:fe:ac:ec:7c:e3:f1:13:71:de:8b:ce:69:d3:21:
                    be:f6:d0:c5:67:3e:4a:d9:d8:a9:69:2d:22:1d:07:
                    30:38:23:79:ad:8e:5c:c8:89:ba:9c:c6:81:d9:a4:
                    49:65:f4:6f:2c:c9:dd:7e:05:10:57:c6:71:12:a6:
                    97:b2:e5:ee:82:4d:67:c5:b7:9b:62:0b:e9:3a:16:
                    a1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:61:13:0D:DE:16:BA:A6:84:58:27:87:F9:C6:67:93:CF:D6:79:6A
            X509v3 Authority Key Identifier:
                keyid:25:AF:AA:1E:FB:29:FF:A5:6E:6F:5D:42:06:22:DF:F0:69:7F:A6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:02:4d:95:3c:5d:67:aa:70:8f:84:67:51:83:d0:06:fa:0d:
         d1:c0:1f:c6:6d:0c:42:54:6d:f1:76:d1:6a:94:8d:53:b9:d5:
         cd:5a:2f:83:54:bc:51:8e:05:02:be:a6:e2:3a:76:45:97:df:
         c6:d8:f1:e5:da:5e:d1:ad:09:e8:63:02:4d:e2:fa:6c:ce:d4:
         f8:df:58:ba:b9:4d:3f:41:ff:e9:d8:17:aa:83:72:e7:bd:7c:
         f3:ed:7e:10:9c:f4:9e:6b:a1:e9:ba:27:f5:a5:9e:c9:e5:12:
         c7:27:1b:59:5a:03:6e:0f:a9:66:f0:5b:d4:c7:dd:9c:ca:95:
         10:aa:b4:2f:5b:eb:7d:02:0a:67:1d:28:6f:0c:41:d5:8b:72:
         52:97:d5:41:3b:f0:5a:e7:12:21:54:0d:d4:a3:67:ff:14:8b:
         40:72:f5:cc:1a:99:83:81:a4:74:3c:a1:32:a8:54:11:dc:03:
         90:f9:95:6a:50:e0:1f:47:07:35:5b:cb:f3:b7:9c:5b:81:c3:
         9b:37:53:7b:5a:79:18:26:c0:b3:0b:da:a2:28:98:55:d3:21:
         bd:c3:d1:e5:43:03:c3:2d:39:9f:9e:bc:55:24:00:95:cf:6a:
         76:0f:f5:59:0b:5d:5e:8f:63:fb:f3:df:e8:64:19:38:3c:ab:
         a0:7c:65:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaExtJeLh3wEimN7fHh+hBY8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YWZhYTFlZmIyOWZmYTU2ZTZmNWQ0MjA2MjJkZmYwNjk3
ZmE2MjcwHhcNMjYxMDEyMjAwMTIxWhcNMjYxMDEzMjAwMTIxWjAzMTEwLwYDVQQD
EygwZTYxMTMwZGRlMTZiYWE2ODQ1ODI3ODdmOWM2Njc5M2NmZDY3OTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5DiNK1tro5I7y2NxRrcZ0Pyjhlj
BwAZN17Xo1RS8PqKymaVaApf75NaRL30HB+zzjKdnBzD7gclNo+b5FXvOOCrRV8s
5bfNVi18vkR+0aoQ9QDitkHYOqDX4siAnoGVU7rtw7URs6PbETsOiss25FL52ZPr
YB7LnNWIpvyS+zhYxGhWH9+SyZU9xtdD+B6j8aewogjoiJEuMHvAOUcukQ3Z75Bc
+SuqUO0869o5tKMSZg0t/qzsfOPxE3Hei85p0yG+9tDFZz5K2dipaS0iHQcwOCN5
rY5cyIm6nMaB2aRJZfRvLMndfgUQV8ZxEqaXsuXugk1nxbebYgvpOhahnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5hEw3eFrqmhFgnh/nGZ5PP1nlqMB8GA1UdIwQY
MBaAFCWvqh77Kf+lbm9dQgYi3/Bpf6YnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmEtcUh2c3BfNlZ1YjExQ0JpTGY4R2xfcGljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8xOTE0NTEtMTgzNi00YmY4LWFkMWIt
YmE1Y2NjODg3MDQ3LzEvSmEtcUh2c3BfNlZ1YjExQ0JpTGY4R2xfcGljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8xOTE0NTEtMTgzNi00YmY4LWFkMWItYmE1Y2NjODg3MDQ3
LzEvSmEtcUh2c3BfNlZ1YjExQ0JpTGY4R2xfcGljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgJNlTxd
Z6pwj4RnUYPQBvoN0cAfxm0MQlRt8XbRapSNU7nVzVovg1S8UY4FAr6m4jp2RZff
xtjx5dpe0a0J6GMCTeL6bM7U+N9YurlNP0H/6dgXqoNy57188+1+EJz0nmuh6bon
9aWeyeUSxycbWVoDbg+pZvBb1MfdnMqVEKq0L1vrfQIKZx0obwxB1YtyUpfVQTvw
WucSIVQN1KNn/xSLQHL1zBqZg4GkdDyhMqhUEdwDkPmValDgH0cHNVvL87ecW4HD
mzdTe1p5GCbAswvaoiiYVdMhvcPR5UMDwy05n568VSQAlc9qdg/1WQtdXo9j+/Pf
6GQZODyroHxlEA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 03:17:22 2026 by rpki-client