Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
File:                     1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft (raw, json)
Hash identifier:          g5bQJyg3sW5szKo3mtoxKRf7Q1bl6UwgoY5FEeldV20=
Subject key identifier:   76:3B:3D:7F:76:B0:83:3D:E3:C2:B2:E3:C4:D1:A4:8C:C3:03:B7:13
Authority key identifier: F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2
Certificate issuer:       /CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2
Certificate serial:       01A0DB71B0D5933D970D0E2E0116BC17F922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
Manifest number:          0378
Signing time:             Sat 26 Sep 2026 02:00:56 +0000
Manifest this update:     Sat 26 Sep 2026 02:00:56 +0000
Manifest next update:     Sun 27 Sep 2026 02:00:56 +0000
Files and hashes:         1: 1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl (hash: 4J7e0qlMGEHzddpzEE9N6KeTszVtNbA9Vko+1A7tXLs=)
                          2: QzF6zdAmWlqa8MJWx9j94DfMPOM.roa (hash: GR81IrpEx4ZIKShy/solAKxjvbcjUDvmJG95WKquc+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:71:b0:d5:93:3d:97:0d:0e:2e:01:16:bc:17:f9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2
        Validity
            Not Before: Sep 26 02:00:56 2026 GMT
            Not After : Sep 27 02:00:56 2026 GMT
        Subject: CN=763b3d7f76b0833de3c2b2e3c4d1a48cc303b713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:68:27:73:9f:47:82:e8:aa:2f:de:7a:cc:84:
                    52:89:90:cf:26:aa:6e:43:ae:31:12:fd:96:f2:af:
                    1a:c9:df:38:5d:39:b3:f7:01:36:d6:e3:f7:a2:00:
                    dc:89:eb:a4:43:15:77:1b:e7:3d:07:49:74:6b:2e:
                    15:cf:db:3e:a7:27:91:8a:f5:d5:3c:09:eb:c0:8f:
                    76:3a:3e:bf:08:68:47:3c:3d:ac:a8:6c:70:28:5b:
                    5f:6c:fa:cd:ea:08:96:04:10:cb:04:44:58:ae:e2:
                    c0:e7:e8:a5:5e:83:c5:cc:c3:54:f8:f7:67:3e:df:
                    09:ac:29:51:62:3e:2d:c2:a6:5c:8e:53:83:42:a3:
                    ba:8c:8a:37:bb:18:40:cc:40:26:19:2c:95:eb:05:
                    e7:5b:76:7a:55:98:f0:c9:8b:14:3b:7a:c3:d3:a6:
                    0c:47:1d:45:e7:b6:da:13:3a:50:0b:9e:c9:1c:8c:
                    73:f2:11:11:4e:d9:2d:d7:a8:35:eb:24:aa:c2:94:
                    42:78:32:65:60:d6:05:5c:53:6e:16:7c:1b:a0:0f:
                    71:eb:25:bd:13:bf:4c:a8:49:cf:b7:e3:91:41:60:
                    23:cd:66:6f:ca:d6:11:ea:b4:08:ab:0a:46:8b:44:
                    5b:6a:37:1d:86:b6:6d:6c:bf:b1:19:7b:7d:61:7e:
                    a7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3B:3D:7F:76:B0:83:3D:E3:C2:B2:E3:C4:D1:A4:8C:C3:03:B7:13
            X509v3 Authority Key Identifier:
                keyid:F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:46:f0:0c:80:18:80:82:6f:ce:03:34:43:7f:92:e2:70:5c:
         eb:db:14:1c:93:f7:3b:80:93:40:6f:8b:c4:30:07:5a:14:6c:
         ee:41:ee:e1:fd:a7:03:df:14:18:77:37:22:6d:92:64:d0:3a:
         7d:9c:87:1d:25:f7:01:8a:de:19:ae:1b:e2:48:2c:b3:7f:89:
         37:75:3c:81:9c:7b:e8:f3:d8:dd:22:86:e1:42:5a:01:dd:93:
         f0:76:19:cc:1f:40:90:ad:63:e6:c4:76:f7:5f:d1:20:e0:ea:
         f3:f1:9c:ce:86:21:73:a1:5b:3c:36:b6:d6:f8:15:69:b7:9f:
         bb:54:e1:0b:f4:46:3a:f9:d5:67:3e:8f:38:db:b9:6c:77:1d:
         23:e9:14:e6:4a:e7:56:08:7f:ab:ae:11:95:43:4c:1b:dd:f9:
         9d:c5:dc:9f:5f:d3:f7:87:62:2d:ed:90:7c:89:97:4a:a0:36:
         7f:5b:aa:98:d8:d4:f2:c6:f4:1b:ea:c1:e1:03:3f:a0:5f:c2:
         36:89:ab:27:d4:a6:94:5c:af:cd:14:c5:83:5e:25:bb:0e:60:
         ef:dd:c5:17:d1:57:d9:e7:05:29:8d:53:52:2a:33:3e:12:6b:
         6d:3e:c4:44:bc:c7:f3:23:31:a7:ca:eb:09:16:c9:0a:31:a0:
         f0:83:4f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:27:35 2026 by rpki-client