Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.mft
File:                     jnPGu6-gEmUCatdHSsu5UWMvndg.mft (raw, json)
Hash identifier:          38UqYJ9Ia0Az+4mg9BI4y9A65mu6xiYgch5dsDvqkpI=
Subject key identifier:   2D:03:33:1B:43:3A:D5:A1:72:6A:8B:38:4E:F0:99:B3:21:94:70:28
Authority key identifier: 8E:73:C6:BB:AF:A0:12:65:02:6A:D7:47:4A:CB:B9:51:63:2F:9D:D8
Certificate issuer:       /CN=8e73c6bbafa01265026ad7474acbb951632f9dd8
Certificate serial:       01A1DF15936A5CD5E2E61C5D6B27F751929C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnPGu6-gEmUCatdHSsu5UWMvndg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.mft
Manifest number:          6A
Signing time:             Sun 15 Nov 2026 12:01:35 +0000
Manifest this update:     Sun 15 Nov 2026 12:01:35 +0000
Manifest next update:     Mon 16 Nov 2026 12:01:35 +0000
Files and hashes:         1: 0YjvgGTB0wJJhPhruP9KWCrNfCM.roa (hash: SIDuBF2N4OpZPuOpczIx+4rZBA6xn+jhTzoF+9TQdnE=)
                          2: hqhEDfvGTPpC4vc1dRLuOoc_JgY.asa (hash: U0Kcr68WbCAsviH0TrGgLTqQV5LWsiFmpyvNjazcjqY=)
                          3: iJTx14YVCd4rwVwaxUeywBf18lI.roa (hash: xQ7tSwmLx2KH0J0v4ZVAraiurkhkyKXt/qozzxQ0gmI=)
                          4: jnPGu6-gEmUCatdHSsu5UWMvndg.crl (hash: u88/+qHz1WGbMszodhK49F31502IoJeiTK5AudBG/9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnPGu6-gEmUCatdHSsu5UWMvndg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:15:93:6a:5c:d5:e2:e6:1c:5d:6b:27:f7:51:92:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e73c6bbafa01265026ad7474acbb951632f9dd8
        Validity
            Not Before: Nov 15 12:01:35 2026 GMT
            Not After : Nov 16 12:01:35 2026 GMT
        Subject: CN=2d03331b433ad5a1726a8b384ef099b321947028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c9:65:35:e9:9d:29:24:51:e6:40:e2:fa:54:
                    f7:b3:71:11:f5:66:8b:17:47:7a:84:87:bd:f9:b2:
                    01:52:3f:dc:6b:fd:14:d1:c9:3d:84:77:3d:fb:85:
                    c7:27:9a:e3:5b:ff:9c:4f:e4:71:41:74:52:e7:d6:
                    be:c5:5f:7c:95:9b:6c:7e:91:ca:04:e3:77:3c:0c:
                    ed:27:a8:af:09:04:01:de:06:d1:28:78:20:77:6f:
                    2f:b4:45:0f:f9:a2:3c:a0:d6:3a:1f:7a:d5:24:f3:
                    d0:31:65:08:4f:12:03:b6:c4:ed:31:28:89:2a:80:
                    b4:f1:63:6f:01:af:26:49:32:be:2a:15:21:64:77:
                    4e:cf:5d:98:43:df:14:0d:17:bc:7b:23:ea:3f:3c:
                    12:b5:59:fe:86:29:15:fb:15:42:89:0f:e2:ba:98:
                    46:d3:55:46:ea:f0:47:83:a1:65:dc:32:bd:66:51:
                    4d:a1:87:df:27:72:d0:45:96:75:5a:ad:e4:b9:3f:
                    85:a4:40:6d:f6:8c:c0:d0:b2:92:09:df:f3:98:7e:
                    58:5a:61:8f:63:65:dc:79:7d:6a:87:38:2e:8a:32:
                    ab:f4:08:bc:49:1a:fa:84:5a:9e:8c:79:1e:fc:3e:
                    1c:dd:a7:3a:9d:de:db:b0:00:3a:7d:c5:57:ec:75:
                    c8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:03:33:1B:43:3A:D5:A1:72:6A:8B:38:4E:F0:99:B3:21:94:70:28
            X509v3 Authority Key Identifier:
                keyid:8E:73:C6:BB:AF:A0:12:65:02:6A:D7:47:4A:CB:B9:51:63:2F:9D:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnPGu6-gEmUCatdHSsu5UWMvndg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:59:75:5c:9d:03:6c:0f:bf:24:17:8d:22:64:66:ad:ba:11:
         85:c8:1e:5a:4f:80:53:84:87:67:01:a1:4e:c1:cf:95:16:8d:
         9c:4c:07:24:21:45:31:b1:51:6e:5c:65:6f:78:98:1e:49:0e:
         df:0a:88:fa:dd:9e:4e:9d:6c:e8:74:cf:c2:7f:2a:4a:e1:c0:
         0a:87:c1:40:e6:e5:ff:be:a8:47:07:b0:c8:97:55:13:ed:9c:
         ab:16:fe:b1:15:86:45:eb:8c:99:34:cf:fc:8a:df:d8:f1:dd:
         20:9f:46:af:87:9b:89:71:55:2f:67:15:d2:7e:e8:ae:c9:9d:
         c3:76:a0:83:b5:d3:8e:60:8a:22:27:7c:99:93:29:59:14:da:
         4e:82:ba:25:67:d3:9f:9c:4c:0f:f1:ec:f3:3c:fe:1a:fc:6a:
         60:98:71:e1:be:12:80:db:39:62:0d:e9:40:f9:4c:05:d7:82:
         2b:86:04:5a:df:07:97:fa:06:2e:87:1a:6c:02:fc:65:ac:63:
         0f:8e:83:3a:77:1c:3d:d4:da:38:bb:ba:5e:c5:88:75:01:0b:
         6d:30:ee:4a:02:3b:da:13:69:37:a9:ea:01:cd:e1:6f:3e:8f:
         c5:a4:ab:88:63:a2:65:47:16:54:b0:be:21:5d:68:5a:70:39:
         73:2e:77:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:01:11 2026 by rpki-client