Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
File:                     J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json)
Hash identifier:          k8wCYi53z4u61qmWb+CpFhCchiIAUsZZliBL2JvKmr0=
Subject key identifier:   D6:0F:A2:DB:59:6E:F3:00:E9:31:2E:B4:87:5E:78:A9:6F:14:E3:60
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Certificate issuer:       /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial:       01A12F8F61284311EDE2917DF1C1F23466E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
Manifest number:          0F79
Signing time:             Mon 12 Oct 2026 10:01:27 +0000
Manifest this update:     Mon 12 Oct 2026 10:01:27 +0000
Manifest next update:     Tue 13 Oct 2026 10:01:27 +0000
Files and hashes:         1: 4N3tODFK8nz9NNMiv7CviryuDAs.roa (hash: X3aNYoDshM8q/qhUCoVbmt8vv1qoQt4+Ks1Zknci3aA=)
                          2: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: CoaRO59qfaGb4ry6DegeqQOE2m86RakvhazazCKzado=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2f:8f:61:28:43:11:ed:e2:91:7d:f1:c1:f2:34:66:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
        Validity
            Not Before: Oct 12 10:01:27 2026 GMT
            Not After : Oct 13 10:01:27 2026 GMT
        Subject: CN=d60fa2db596ef300e9312eb4875e78a96f14e360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:88:65:eb:54:3e:17:31:74:2e:fe:df:44:
                    44:d4:15:de:ac:92:76:12:ad:f5:30:6e:f0:71:29:
                    0b:6d:37:47:39:3d:25:97:be:76:bb:b7:d0:58:82:
                    9c:cf:bd:03:e3:0d:a4:ce:43:94:96:48:2d:7e:e7:
                    d4:50:fd:00:d9:32:e0:74:4b:63:3a:88:e5:03:2c:
                    2d:b5:87:6a:e5:3c:9b:42:74:e0:23:d5:43:01:95:
                    44:43:8d:b0:d6:25:9b:79:b3:61:bb:d0:24:8f:1b:
                    e6:c5:bd:0e:84:d2:ef:ea:23:08:9b:45:b2:df:0a:
                    44:96:a6:09:1e:21:7e:03:be:5a:4a:33:a3:06:a0:
                    23:7f:12:b0:c5:66:43:7d:b5:94:e2:99:c0:5c:12:
                    54:0e:f6:59:47:d8:b2:40:6c:f6:ad:7b:78:8e:d7:
                    46:2b:04:78:35:ff:3b:e9:89:2c:6c:45:57:0d:bd:
                    7d:26:12:ce:e0:54:b0:61:50:3f:48:35:b1:e1:15:
                    1e:64:97:3b:d2:dd:4e:24:dc:b1:47:5d:17:2e:8b:
                    14:60:9c:c2:4f:49:de:98:82:50:17:49:ac:18:ee:
                    7c:44:c5:dc:ee:03:50:5b:63:c7:63:35:4c:2e:8d:
                    59:6c:0d:33:2b:18:80:fd:51:b7:14:45:46:76:c5:
                    4f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0F:A2:DB:59:6E:F3:00:E9:31:2E:B4:87:5E:78:A9:6F:14:E3:60
            X509v3 Authority Key Identifier:
                keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e5:ed:98:91:fe:39:cc:68:0d:c7:69:b6:cb:ab:9b:0c:5c:
         50:3b:75:9c:04:f0:17:59:7a:be:6e:f4:3f:95:cb:3a:1b:82:
         e6:45:a4:f1:84:84:19:a7:3e:ed:fd:23:ac:90:ea:b7:a3:a6:
         26:15:fa:59:1f:2e:9c:98:3f:12:7f:b0:d8:b9:fd:26:c7:9d:
         bf:7e:eb:93:5b:2f:ed:54:8e:9d:7e:69:69:31:de:2b:15:71:
         5a:f1:d2:46:1f:de:49:c1:dc:b4:d0:36:f1:a1:83:f4:7d:d5:
         f9:aa:5e:58:e8:15:a3:be:b4:0c:5c:87:a7:cb:ba:2b:d9:52:
         d6:f6:14:90:50:ac:4e:28:a7:d7:39:30:f0:8e:5c:bb:f1:33:
         ae:37:a4:fe:93:cd:d5:bc:0b:f7:5f:41:1e:a8:c5:5f:9c:a5:
         e1:7f:6b:16:e2:53:8d:f0:55:f6:16:2d:ed:ec:a6:43:c4:4f:
         5c:6e:99:2c:29:44:0d:c5:1b:23:76:b4:6d:35:59:2f:b7:00:
         ac:e8:5c:a7:63:59:a6:1e:01:9c:18:39:70:9f:90:59:e0:c2:
         d5:8b:11:a3:1d:b2:3c:5e:10:64:48:81:4d:52:94:c1:65:d5:
         71:8e:74:3e:6c:d2:9a:8a:fd:70:e4:c7:41:ab:2d:40:5a:e9:
         35:92:bd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:37:29 2026 by rpki-client