Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
File:                     J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft (raw, json)
Hash identifier:          lE3J02bsU8tNSSKzvDRy/JJSozxYmwq8LEnauBOuVsA=
Subject key identifier:   3D:52:BE:59:29:67:C5:63:FC:DD:16:BF:9A:D0:9C:24:57:1D:E7:BD
Authority key identifier: 27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD
Certificate issuer:       /CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
Certificate serial:       01A1DACAD0D4C7511D55B741ACED94567A07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
Manifest number:          1AF6
Signing time:             Sat 14 Nov 2026 16:01:27 +0000
Manifest this update:     Sat 14 Nov 2026 16:01:27 +0000
Manifest next update:     Sun 15 Nov 2026 16:01:27 +0000
Files and hashes:         1: J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl (hash: 2o1HxpN/0a7WUQGpvC2RhWbCUswZepHtyFO2TUgeJhk=)
                          2: U8IK9zOrS2YBTjRbIk-gk-cBt68.roa (hash: yusdb1/WrOXutSMCFdk0bfUHNam0sw06TKJeP0mCnGc=)
                          3: cV-z3VBLUASMrIq4SMj8YmJTXjU.roa (hash: zZS+jPf5y7gr08V8zCZfQbJhX967ajmJFVAkbk/01Ew=)
                          4: vLzum_3xiySkT3R3o28koRHRvWg.roa (hash: vj9JWRWLPCy8DDsgu3Xmj2hFdUNWrsZTq4TtJ5bRflE=)
                          5: wh4k9axfhsDf-Do-dUFqE9nApww.roa (hash: 93omHoRTuFsw/T3J6aAGcVsj1NzTknVj2UFj23gAKLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 16:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:ca:d0:d4:c7:51:1d:55:b7:41:ac:ed:94:56:7a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
        Validity
            Not Before: Nov 14 16:01:27 2026 GMT
            Not After : Nov 15 16:01:27 2026 GMT
        Subject: CN=3d52be592967c563fcdd16bf9ad09c24571de7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:22:6e:34:03:f6:2d:a0:6e:e3:6a:1d:55:0f:
                    52:bb:bc:d8:23:3a:6f:f9:ee:94:e8:e9:98:4d:2c:
                    00:97:2b:aa:a4:0f:17:37:33:66:86:ec:bd:56:96:
                    af:f2:18:13:36:8f:25:22:81:97:26:ca:15:62:c9:
                    5a:38:b0:f1:f1:54:c5:d1:ee:31:3a:ed:4b:2f:5e:
                    a6:a5:23:66:c9:c7:a2:b8:aa:96:f9:f5:ef:e2:07:
                    fb:53:05:21:25:a1:a5:86:a8:62:c4:be:c0:ca:4a:
                    ea:3d:db:18:ea:ca:f1:8a:49:8c:eb:49:37:91:07:
                    f5:45:cb:b0:ce:96:f3:c3:17:cc:b1:20:38:c8:03:
                    88:75:f3:c0:65:a2:55:4d:6f:a2:10:e5:f7:56:fb:
                    10:37:54:e2:f9:5c:a3:89:f5:b6:c0:57:ed:15:aa:
                    a5:6e:8a:06:77:c4:48:fe:78:ae:38:60:03:18:48:
                    c2:54:3e:e5:bf:60:c0:17:2b:86:07:f6:46:5e:ee:
                    fa:af:ce:25:4e:18:59:89:ff:7f:ba:96:bb:7d:c0:
                    67:c5:e4:91:e3:36:fe:87:00:54:61:a7:00:41:d9:
                    8a:77:9a:40:60:85:4b:81:a5:8e:b0:ae:bc:91:48:
                    27:28:f4:ae:c7:2e:0d:4f:c1:57:ef:18:57:57:6a:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:52:BE:59:29:67:C5:63:FC:DD:16:BF:9A:D0:9C:24:57:1D:E7:BD
            X509v3 Authority Key Identifier:
                keyid:27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:93:42:11:29:39:0d:93:1b:fb:6e:fd:be:af:c8:9c:f6:47:
         39:7a:11:f1:e7:7d:a0:2f:3b:3c:84:e7:22:88:5a:75:fa:75:
         9a:bf:74:d7:12:1f:e4:ed:30:9b:1e:03:7f:a9:71:ea:e6:b4:
         1a:cb:de:ad:fc:4b:60:db:02:09:39:ae:68:54:a8:18:0c:b5:
         a2:63:20:e9:ad:ab:a1:ee:60:4b:25:ff:48:54:6a:79:a0:1d:
         1b:b6:00:ce:83:a9:97:ad:65:1a:b3:b2:fa:95:d3:b1:57:be:
         b1:fb:d0:fc:80:20:9c:8f:20:aa:93:51:fc:95:4d:54:c1:35:
         1a:bb:9e:c3:be:39:fd:47:96:f5:a2:7a:05:68:97:14:d4:42:
         7e:82:99:6b:e3:27:e8:e2:d5:d7:79:37:97:af:2c:7c:da:a1:
         54:4a:57:e4:46:d3:46:66:f4:fc:ed:6f:83:ae:89:ad:b0:c3:
         7a:bb:c3:e8:a8:f9:67:bc:ab:55:86:bc:9c:89:f6:96:55:9a:
         eb:70:ed:e7:56:91:53:b3:5a:9e:94:e2:bd:12:51:e7:47:a0:
         d4:7a:05:a3:e3:3a:d2:d8:f6:90:87:56:78:ab:42:c3:1d:1e:
         39:87:41:2a:ac:9c:28:40:5f:69:40:46:91:06:e1:e0:85:b3:
         27:a9:61:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:23:09 2026 by rpki-client