Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
File:                     JMltOG189ZqZDTmU8N-Ek9_KSbM.mft (raw, json)
Hash identifier:          rvIEDTMespysIJCxDY14Hup8x7Sz+czNMtUUHXcUQs8=
Subject key identifier:   EB:B8:EA:5D:44:4A:A1:55:BD:19:D5:26:DA:24:79:C3:24:8F:AD:7F
Authority key identifier: 24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
Certificate issuer:       /CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Certificate serial:       01A0FD22260A3F74F07E4B4182EEE1EAADD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
Manifest number:          04FD
Signing time:             Fri 02 Oct 2026 15:01:08 +0000
Manifest this update:     Fri 02 Oct 2026 15:01:08 +0000
Manifest next update:     Sat 03 Oct 2026 15:01:08 +0000
Files and hashes:         1: 4C9QDlBnnXSHpJEM9ANlWAaSyEs.roa (hash: v92PqB+zER9mvZgRziC74aTu4c1aP8hKbPOOfRE55tQ=)
                          2: JMltOG189ZqZDTmU8N-Ek9_KSbM.crl (hash: nEuq5xRRvGE9F0MDDUcuYarUbZxrJGuAmx86TLkVXh8=)
                          3: MkwV_p4ZiOf8Ia5ZHOPhoW4eKIU.roa (hash: JMKNPRf6e5NpGat9TNpevi/2X+CTiPo4/6Chd3GgN+E=)
                          4: oJUrlPiGpThaOu9GEMzKstl67oY.roa (hash: ZAsmCmye4OXdSzraVVSyaiBbg3Yr1OAE/9LISAwEOHg=)
                          5: s6R6PJpd-Myk3vNL1YiMPF0NHiY.roa (hash: 82ptaySXeh8vuN3858KZJT3/tNdBNq1pDFzQMH65GpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 15:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fd:22:26:0a:3f:74:f0:7e:4b:41:82:ee:e1:ea:ad:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
        Validity
            Not Before: Oct  2 15:01:08 2026 GMT
            Not After : Oct  3 15:01:08 2026 GMT
        Subject: CN=ebb8ea5d444aa155bd19d526da2479c3248fad7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:e2:04:9a:e4:c4:22:01:1a:70:03:03:46:
                    b3:0f:75:73:8d:c4:b4:6b:86:a3:6b:1e:dd:08:0d:
                    25:22:d1:16:e9:cf:47:43:db:a4:12:fe:a3:43:65:
                    d6:74:fe:30:d7:84:0d:44:a2:d9:d4:1e:f7:73:5c:
                    d4:2a:11:59:88:4c:0b:a6:05:4a:74:f7:db:22:a0:
                    c4:7a:53:0f:a3:dc:e1:93:a0:c2:d9:49:c1:62:a1:
                    6d:ba:65:50:17:6e:8e:68:d8:3f:09:41:eb:f9:d8:
                    1a:af:9a:23:20:3f:e1:f0:4f:8f:4c:97:8d:f2:eb:
                    1b:8d:62:d2:99:08:97:f1:b7:33:45:4d:30:46:5e:
                    6b:ef:b8:59:98:e8:04:df:ee:25:05:f3:fd:42:c6:
                    61:4f:15:e4:e1:5b:ce:e4:20:18:9d:1b:3b:88:b3:
                    80:73:10:17:03:ce:1f:9f:24:31:ef:28:22:e0:1f:
                    b4:24:90:96:be:80:78:ea:84:4d:b0:0b:77:a8:58:
                    a4:cf:a9:f3:0f:e3:6a:1e:99:1b:d6:c2:77:8b:93:
                    91:a7:03:53:68:5a:d7:d8:c1:ff:f1:d3:7d:56:d6:
                    19:79:30:3a:68:bc:a4:df:68:d2:c3:71:f0:b8:47:
                    09:85:c3:ab:8b:cb:53:57:69:02:49:53:75:47:fa:
                    05:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B8:EA:5D:44:4A:A1:55:BD:19:D5:26:DA:24:79:C3:24:8F:AD:7F
            X509v3 Authority Key Identifier:
                keyid:24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b1:c9:5c:4c:d9:af:17:b6:73:d5:f1:17:c9:cf:e2:aa:70:
         52:a8:d0:94:cc:37:82:ba:af:45:53:4a:fe:2d:8f:61:dd:1f:
         5a:c5:03:e6:17:be:a0:3d:1e:5e:fa:c5:04:30:c5:04:33:8c:
         3b:63:4f:03:1b:cb:18:ff:7d:03:fe:e0:11:00:cb:b2:b9:b7:
         6e:0e:60:85:1d:53:63:88:04:dd:e6:56:2e:90:8e:07:09:fd:
         ee:23:aa:eb:aa:c3:48:ad:74:cb:5b:a2:cd:4c:e6:f1:f1:a7:
         3a:01:36:14:2e:ce:9d:65:5d:21:4c:14:ce:03:f2:b8:e8:70:
         7d:d6:4a:b9:12:1e:68:80:2a:c1:7d:97:9a:98:b7:de:6d:2e:
         d6:70:a8:f1:72:cd:7a:59:52:bb:71:aa:7a:6d:e4:a2:0e:6d:
         be:60:fb:9a:7a:d3:9c:66:af:b2:7e:88:d9:e7:a2:a4:4d:08:
         46:95:7f:3d:c1:4d:f3:2d:2e:ad:81:02:3a:05:81:b7:07:b1:
         e8:43:0a:c8:48:fb:2b:1e:a6:ef:83:36:f5:9b:54:78:5c:c1:
         f0:e0:b6:9c:9c:c5:96:a7:0c:96:d5:f9:ad:f6:55:74:eb:12:
         7f:67:51:de:43:bd:c6:b3:81:82:16:36:67:90:26:f5:ac:6c:
         3c:42:32:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:09:39 2026 by rpki-client