Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
File:                     JiNBtDPh-Py3ljItL9kmQJOW560.mft (raw, json)
Hash identifier:          n3oVDC8Pqh1m0+4HZb3WKtn6PiI3zTBaIFtb41Cw+J4=
Subject key identifier:   32:57:EA:C1:82:C7:D0:89:32:0A:D7:EB:50:F1:18:4B:CE:82:43:3A
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Certificate issuer:       /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial:       01A0E73F9C75EB894D7E5BEFFED72C7640D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
Manifest number:          140D
Signing time:             Mon 28 Sep 2026 09:01:40 +0000
Manifest this update:     Mon 28 Sep 2026 09:01:40 +0000
Manifest next update:     Tue 29 Sep 2026 09:01:40 +0000
Files and hashes:         1: EDI4hBfvhmhntt7hYvBIEgLQOJA.roa (hash: 2bxpLwvyVSXEk8/vuBLJpeiNYeHTrUFQCELrB9BRYW4=)
                          2: Fqol7Ql1lTnQ1pbIdCZcxbCF39k.roa (hash: +R5PirogobghNFmFq7p4/kohSnTc74mKrNVHXJGdCQg=)
                          3: JiNBtDPh-Py3ljItL9kmQJOW560.crl (hash: OD/ZvwrWYn0Hzwy3Ect2U3LqlicptN4EiCo5P/t+3uo=)
                          4: arNibRK6GVA8woE0rpn1p-uYEDw.roa (hash: csvIRaH6fxH9C5l6h0km/d/njwBLihVhoB19p1ofSmo=)
                          5: tbK1AbVereS_NngI45L11SaPIkg.roa (hash: pGphgE8cOkuzyKQJOlm5N3l9aQFRIzUTSTIpMJ4LzH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 09:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:3f:9c:75:eb:89:4d:7e:5b:ef:fe:d7:2c:76:40:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
        Validity
            Not Before: Sep 28 09:01:40 2026 GMT
            Not After : Sep 29 09:01:40 2026 GMT
        Subject: CN=3257eac182c7d089320ad7eb50f1184bce82433a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:0a:43:af:26:b7:96:db:4e:7a:20:69:9b:
                    f8:4f:50:02:6f:83:99:bf:98:0e:0c:d0:fc:8f:a2:
                    30:a1:56:7e:bb:0e:7f:ce:a2:8d:9c:60:ab:4d:89:
                    ed:aa:c3:4d:18:a5:60:be:48:5b:2e:1a:9e:df:91:
                    61:71:13:80:06:61:90:da:bf:2f:50:99:41:58:9a:
                    03:08:3c:16:e9:7e:2f:c2:cf:11:b5:9c:9f:a5:40:
                    79:2a:1b:cb:ac:3e:f5:cb:95:98:7e:ca:81:3f:6a:
                    27:7f:3d:fb:14:5f:d3:2a:fe:57:16:2f:e2:e6:e6:
                    55:a9:14:b5:79:c7:75:a7:9e:4e:bc:e9:e5:b2:ad:
                    52:58:53:1a:f7:06:b1:f1:07:7f:60:14:47:fd:8b:
                    51:6b:77:ad:89:51:8f:49:7c:00:9f:ca:88:78:8d:
                    fc:b9:6b:fa:4b:91:67:3d:5d:ff:87:b3:b6:86:b5:
                    9d:46:d7:aa:e8:26:df:ca:83:0b:eb:ce:ba:05:12:
                    77:6c:45:f8:22:e1:fa:1e:19:4d:7f:e8:07:04:5f:
                    19:2d:fc:65:18:00:3e:8c:13:5e:0a:9c:4a:2b:d3:
                    c9:0a:da:a8:7a:d2:54:8b:61:2f:b5:00:90:54:b6:
                    d4:ff:a1:ab:fa:01:83:ea:27:a8:cb:b3:26:4c:cd:
                    74:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:57:EA:C1:82:C7:D0:89:32:0A:D7:EB:50:F1:18:4B:CE:82:43:3A
            X509v3 Authority Key Identifier:
                keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d3:9c:fb:3f:4f:80:b8:bf:56:d6:3a:63:08:0d:9c:13:8f:
         3c:45:88:36:15:6e:25:1a:db:e7:98:cf:0d:87:0d:5f:98:2c:
         26:f0:88:85:7e:16:21:5e:92:da:57:e2:8a:19:d0:68:f2:13:
         83:65:76:48:88:59:fa:5d:f5:d8:4d:9d:68:32:df:66:9d:c4:
         11:bd:23:34:97:3f:42:c1:f4:04:ed:97:3d:01:b1:aa:63:6f:
         9a:d6:01:34:7d:71:4c:88:fc:a6:0b:79:54:6b:e9:fd:65:70:
         63:2a:30:72:65:e2:b4:48:87:f3:bc:1c:63:37:f3:ba:26:ee:
         b5:9a:32:4a:72:7b:9b:33:d0:b4:7c:45:e5:16:d4:6a:8c:b3:
         76:ea:39:86:5d:e1:09:40:58:2f:71:65:95:a7:a5:8d:32:7d:
         34:c2:93:ad:f0:55:f7:85:db:ab:07:c4:05:bf:6b:eb:1b:5b:
         89:0b:6a:2b:fd:90:20:53:f7:1f:4e:2d:e0:c5:ca:74:5f:bf:
         b4:c0:d1:c6:5c:cd:0c:03:61:e4:12:a9:e4:c3:be:57:93:c5:
         26:e5:02:a9:e4:05:63:c5:6d:a1:cb:fd:ba:4b:f0:16:bc:15:
         fd:0c:45:28:34:12:46:aa:13:a4:80:95:2c:7f:0d:99:69:43:
         91:cb:9e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:24:56 2026 by rpki-client