Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File:                     JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier:          2TvVqj3do599B3BA27bN8N2itpvffVs/OfR8ZBOMAzE=
Subject key identifier:   1F:FB:5D:E8:0C:3D:FC:DC:B0:5A:B0:DB:34:07:BD:5D:0D:49:03:71
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer:       /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial:       01A12053212BC398A11B24857B4B20990C10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number:          0F1A
Signing time:             Fri 09 Oct 2026 11:01:21 +0000
Manifest this update:     Fri 09 Oct 2026 11:01:21 +0000
Manifest next update:     Sat 10 Oct 2026 11:01:21 +0000
Files and hashes:         1: 1-UQfPeP2Hp2kHg0OiYvIdbub_7g.roa (hash: I98ISNyguLUFVm8aiR0qBsZTLT8A2B3NKke2YTAXtF0=)
                          2: FbQ9gg85Y5Qx602ZBVh6YkaLcXs.roa (hash: T391+Idz7L3dve/E2xgopb1fIMnjsWpWTFaXJBaoxCg=)
                          3: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: DAgc2yDYZDJ1QCwEwj5hPdadNC7mKPQ6zV+VWGY+oQ4=)
                          4: KJfyUjYhSbcTj4BqhcYlT-NV3k0.roa (hash: PTxZGqD0eutJIRMtp0zEf920MlkzT2rTXHG1ErOVkNE=)
                          5: LeJNm1ZK5iVV3SsDbJERcUuUUyU.roa (hash: YZLLMnJFDKGZDywuXIt3IlZ5Tc81OdOTnXuXJJ8sLok=)
                          6: ytIxMg-nFxFDrCls8GXhACBFUSI.roa (hash: GHaVvWlfNGDA8GztLcPLg+D8rXVf6ft0hke/kEcK6uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:20:53:21:2b:c3:98:a1:1b:24:85:7b:4b:20:99:0c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
        Validity
            Not Before: Oct  9 11:01:21 2026 GMT
            Not After : Oct 10 11:01:21 2026 GMT
        Subject: CN=1ffb5de80c3dfcdcb05ab0db3407bd5d0d490371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:b8:1f:ce:f7:79:0a:9c:43:eb:42:2d:71:
                    82:a8:01:ce:5a:f5:3e:04:aa:36:18:b4:da:bd:28:
                    af:60:9d:71:5e:ad:fa:56:54:a1:0a:91:ca:af:3a:
                    db:16:dd:06:b0:7a:d9:70:5e:af:97:74:01:17:64:
                    b9:06:a8:dc:f9:2a:3e:33:7a:09:43:b2:39:b3:8e:
                    6a:7b:35:a5:f0:c9:b2:9a:59:58:ed:a9:43:d5:a2:
                    2c:8d:64:66:71:27:da:b9:b9:25:90:60:17:e3:e4:
                    78:6a:28:50:69:79:54:fb:f1:d5:5e:c5:b9:bf:59:
                    da:87:f7:98:fa:c6:fd:58:8a:c7:a1:3e:3a:59:b1:
                    c9:90:f0:6a:99:a8:d5:c3:8d:9e:92:e8:94:25:2c:
                    15:9a:1f:a5:74:58:7d:6c:78:42:b1:2f:47:c5:13:
                    d8:5a:d8:6b:77:2b:80:0e:c7:d1:35:d9:dd:e6:85:
                    61:89:97:8e:bd:17:46:c2:d4:30:c6:6f:79:c9:d7:
                    7e:7b:6f:ff:9f:1a:41:20:0e:1e:5c:13:97:e5:a9:
                    9f:89:15:97:c0:32:d5:36:da:58:12:73:94:44:e1:
                    14:0c:40:07:ef:67:76:54:d7:27:90:37:f7:8b:3c:
                    9e:d3:55:a9:ea:5d:3d:16:10:41:1d:79:80:16:32:
                    cb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FB:5D:E8:0C:3D:FC:DC:B0:5A:B0:DB:34:07:BD:5D:0D:49:03:71
            X509v3 Authority Key Identifier:
                keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:73:92:32:a5:9f:db:41:36:3f:f0:03:94:92:c7:b0:4c:f9:
         24:ef:37:09:3d:1b:4c:64:c3:a8:33:de:1a:e0:c0:7f:82:03:
         9c:d7:69:a7:89:4b:f6:49:60:6b:44:5a:8f:98:94:67:5b:3d:
         1f:65:94:50:c3:d9:1c:31:45:c7:da:1d:ea:d4:bf:7f:c0:d2:
         48:85:e1:3a:92:85:78:63:0e:8e:d0:02:94:e7:07:7d:3a:96:
         c6:df:a2:40:9d:aa:4a:c7:e0:1e:74:69:d9:01:9b:58:89:78:
         e8:ce:3a:05:c7:78:c0:86:63:7d:cb:52:e5:89:db:f4:e7:09:
         50:a2:bc:86:6a:b3:14:35:43:19:25:e7:21:fa:bc:f4:f1:ac:
         65:e1:fd:ff:5e:e7:e4:6b:76:51:67:f0:e9:6e:b1:ac:f1:2c:
         b7:b0:c2:20:a4:a4:38:f2:96:91:ee:01:99:af:5a:4a:fd:86:
         c6:00:06:14:bc:5e:aa:45:97:f1:af:b5:e3:07:1b:4a:4c:36:
         ab:71:24:67:67:cc:5c:e4:b9:b3:77:3a:e7:9b:31:22:6c:9d:
         9f:2c:70:cf:8e:33:5e:63:f8:74:a9:39:0c:c9:49:03:59:42:
         8e:00:90:a0:83:7c:f1:11:c9:63:fe:56:46:1a:8c:c4:2b:64:
         4b:46:57:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 18:46:50 2026 by rpki-client