Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
File:                     JiNBtDPh-Py3ljItL9kmQJOW560.mft (raw, json)
Hash identifier:          Nsf0dbaZezdVh9NzEnZfZfNgJtB0U4i9mS3b/EIwqYU=
Subject key identifier:   92:B9:5C:7A:4A:4D:43:84:27:10:30:BF:36:E9:CB:A7:D1:87:F5:A8
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Certificate issuer:       /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial:       01A0DF869282A4BB437587C5BD1635107D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
Manifest number:          1409
Signing time:             Sat 26 Sep 2026 21:02:13 +0000
Manifest this update:     Sat 26 Sep 2026 21:02:13 +0000
Manifest next update:     Sun 27 Sep 2026 21:02:13 +0000
Files and hashes:         1: EDI4hBfvhmhntt7hYvBIEgLQOJA.roa (hash: 2bxpLwvyVSXEk8/vuBLJpeiNYeHTrUFQCELrB9BRYW4=)
                          2: Fqol7Ql1lTnQ1pbIdCZcxbCF39k.roa (hash: +R5PirogobghNFmFq7p4/kohSnTc74mKrNVHXJGdCQg=)
                          3: JiNBtDPh-Py3ljItL9kmQJOW560.crl (hash: Dg6qN05GA/CTCz5ZXC9HnEHf/Ld9+lCn9PjgDZFdCf0=)
                          4: arNibRK6GVA8woE0rpn1p-uYEDw.roa (hash: csvIRaH6fxH9C5l6h0km/d/njwBLihVhoB19p1ofSmo=)
                          5: tbK1AbVereS_NngI45L11SaPIkg.roa (hash: pGphgE8cOkuzyKQJOlm5N3l9aQFRIzUTSTIpMJ4LzH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:86:92:82:a4:bb:43:75:87:c5:bd:16:35:10:7d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
        Validity
            Not Before: Sep 26 21:02:13 2026 GMT
            Not After : Sep 27 21:02:13 2026 GMT
        Subject: CN=92b95c7a4a4d4384271030bf36e9cba7d187f5a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:78:1c:98:39:c9:b4:dc:1d:0a:92:3f:2b:
                    ab:19:e1:09:d8:f9:d1:f7:77:bc:45:83:51:7a:be:
                    19:38:a3:5e:27:a8:77:02:22:18:0b:0a:28:5a:68:
                    74:e5:73:f0:58:6e:29:f3:88:85:69:da:00:1b:72:
                    f6:9d:a8:57:68:c5:60:ff:fd:e4:9c:b2:12:aa:ae:
                    55:f1:7a:bb:e0:56:8a:dc:d4:4f:be:1c:d6:51:e8:
                    6e:e2:89:e8:19:99:79:55:04:de:b6:24:37:e4:96:
                    48:9e:45:72:2c:76:ae:87:75:0e:01:80:b7:d2:51:
                    23:a1:46:2c:8f:85:f3:e5:7d:0f:0e:81:70:89:08:
                    dc:2d:42:85:ef:71:48:b7:f8:e7:65:d4:55:0f:a9:
                    90:bd:a0:30:d8:50:ef:28:2d:10:c4:30:82:84:67:
                    76:09:e4:44:68:90:7a:7d:4b:6f:1c:4e:c6:7d:d9:
                    7c:8e:0b:fd:8f:9b:70:56:58:90:8d:fc:39:f7:4b:
                    24:c8:af:97:3e:47:40:5a:8c:f6:6b:d8:63:c0:32:
                    97:90:76:74:9d:10:2a:96:2f:21:d8:06:d1:34:2a:
                    2f:ad:d7:86:f0:a3:11:d5:ea:c0:83:98:97:97:7c:
                    1f:81:23:da:67:cd:37:c8:5b:00:44:d9:96:51:bc:
                    ea:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B9:5C:7A:4A:4D:43:84:27:10:30:BF:36:E9:CB:A7:D1:87:F5:A8
            X509v3 Authority Key Identifier:
                keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:77:88:05:41:9d:40:2c:43:15:7e:0e:39:33:14:1b:61:72:
         d0:46:db:f0:e7:e8:ea:60:12:b4:31:f9:45:7a:68:9f:08:95:
         d3:f8:09:0d:95:f2:77:25:50:5c:6c:3c:a3:86:0e:90:e6:a5:
         e5:df:c4:a3:d8:4a:1d:c3:3b:18:ae:c1:03:48:dc:19:63:af:
         16:11:53:ee:c2:1a:a4:14:f5:40:7e:0a:07:d4:b4:da:ee:6b:
         0e:40:5c:75:1b:78:30:33:97:b4:75:66:73:10:b1:1d:b9:ca:
         b8:71:5f:dc:ff:a2:82:c9:d1:36:f7:af:ad:57:c3:ff:0b:0d:
         99:ab:51:10:e3:76:cb:54:e8:10:2d:55:cb:a4:08:cf:fb:56:
         27:2d:fe:26:8d:bd:85:ea:6b:06:1b:59:78:3d:4d:36:d5:d7:
         bf:4f:f0:cc:fd:21:5e:ab:6c:dc:6c:4a:be:5a:00:b9:ff:f7:
         a0:87:b4:3e:96:a0:62:bc:d8:7d:5c:f6:07:f4:22:23:14:f1:
         f8:f9:43:3a:60:8f:7d:40:ba:35:7a:30:69:a8:4f:e7:a3:f2:
         d6:60:3b:e1:3a:84:c1:69:6d:4a:9f:aa:d4:eb:77:0c:ff:b0:
         3b:a9:64:c3:88:7b:ef:df:e2:51:91:6c:96:e0:3e:b7:3f:21:
         76:c9:6a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:02:02 2026 by rpki-client