Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
File:                     J582UuRFj6ABxnOKQUJbB-cMkaE.mft (raw, json)
Hash identifier:          ef54bBoLDHo+Rib1/o2CRQcBC6m4sbzxwyusMPbrEKY=
Subject key identifier:   D3:05:CD:EB:A5:CE:E1:C3:24:C8:7B:9D:77:E8:36:DF:53:34:28:57
Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
Certificate issuer:       /CN=279f3652e4458fa001c6738a41425b07e70c91a1
Certificate serial:       01A0D7CCFD10F499F79C1F4D078B4417E739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
Manifest number:          16E8
Signing time:             Fri 25 Sep 2026 09:02:10 +0000
Manifest this update:     Fri 25 Sep 2026 09:02:10 +0000
Manifest next update:     Sat 26 Sep 2026 09:02:10 +0000
Files and hashes:         1: J582UuRFj6ABxnOKQUJbB-cMkaE.crl (hash: /M64iqAJH9AySxXtySxeUUTe8IYo25X+2SXkzWf1J1Q=)
                          2: h53oA3SujEDr4ELckr6UN9W2NOk.roa (hash: EVBN35qoptKAigPRFwoWW6G0+97b+KvRqgyf+bRb3+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:cc:fd:10:f4:99:f7:9c:1f:4d:07:8b:44:17:e7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1
        Validity
            Not Before: Sep 25 09:02:10 2026 GMT
            Not After : Sep 26 09:02:10 2026 GMT
        Subject: CN=d305cdeba5cee1c324c87b9d77e836df53342857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d6:2b:f8:a2:a1:03:0b:07:92:dd:a6:77:a2:
                    21:b2:4f:61:25:18:8c:14:45:bb:87:ef:b9:5e:b7:
                    f3:87:d0:56:d1:e7:74:8d:6b:31:b3:0f:95:88:e4:
                    ef:ea:8a:64:3a:3f:74:cb:54:59:20:5f:39:76:bf:
                    34:89:72:a2:de:22:0e:65:bd:f3:95:30:2e:ac:22:
                    c9:7f:7e:fb:81:ec:ef:52:39:bc:94:26:40:6d:81:
                    02:50:d1:d8:c8:22:1b:9b:06:cd:aa:f2:ae:52:07:
                    a0:1d:ca:d5:47:5a:62:1f:ee:87:1c:9f:fa:52:10:
                    cb:03:bc:fe:53:f4:0c:a4:bb:78:dc:0d:0c:4d:57:
                    a3:f8:ba:3a:d8:29:95:3d:45:8d:90:21:a8:44:f2:
                    15:b5:d0:b7:6f:6b:25:a3:45:aa:6e:d0:8e:22:40:
                    45:14:9b:47:4f:e5:f3:95:77:e3:46:dd:1d:b7:d8:
                    75:7d:bd:42:4b:e8:cb:9e:5b:58:ca:4c:87:f4:9d:
                    76:31:c8:2e:28:3a:d4:03:5f:c1:de:50:ac:27:c1:
                    d0:40:2f:4a:bb:e7:45:c6:37:b6:f1:bc:b9:eb:af:
                    43:d1:29:25:01:88:ff:5f:4c:0c:a2:f1:df:ac:50:
                    c5:77:63:19:92:a1:d1:fa:6a:19:8c:6e:00:90:3f:
                    d6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:05:CD:EB:A5:CE:E1:C3:24:C8:7B:9D:77:E8:36:DF:53:34:28:57
            X509v3 Authority Key Identifier:
                keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f5:88:55:5c:fc:8c:2f:3e:57:aa:44:43:73:e4:6b:25:1f:
         d4:84:d5:a4:c3:4c:e8:db:7b:67:3a:73:87:66:e0:74:49:18:
         ce:7a:51:8a:48:4e:11:43:41:5f:82:29:de:d6:8f:31:38:d9:
         4c:da:16:2d:33:52:e7:fd:6a:23:92:7a:01:64:95:95:1e:e0:
         b2:98:d6:b1:7c:c7:7c:4a:ad:7d:bb:1b:cb:0c:8f:3a:3f:b0:
         fd:59:fb:fd:35:ce:5d:62:ce:04:36:a1:24:a8:dd:10:55:db:
         2b:dd:0f:c8:60:71:6e:3f:65:b7:ff:49:94:46:80:67:0f:a8:
         51:11:73:2c:e8:e8:5a:2d:c7:29:c6:bb:a9:da:a7:ba:3f:18:
         40:4a:60:2d:45:77:d2:ed:08:9e:de:9e:d5:92:7d:95:03:cf:
         60:4e:dd:e3:ab:b8:cc:ce:d9:e3:74:da:36:ae:ef:f1:1f:5d:
         7a:33:04:f8:12:0b:c6:17:9c:59:43:ae:33:ab:a2:b1:9e:61:
         65:d8:79:00:69:59:88:64:e4:37:c2:bd:e2:80:b1:b0:9d:37:
         d0:c9:de:b1:aa:84:b2:33:08:13:3c:3f:37:47:fd:c5:61:11:
         4a:fc:75:22:0c:e9:18:33:96:68:49:e4:89:7d:51:a3:89:21:
         ca:a7:c2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:46:55 2026 by rpki-client