Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
File:                     JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft (raw, json)
Hash identifier:          lD2apWdCPQ9KZL7DFuMgcHEAqhfveU8h/9vy6r/K6pk=
Subject key identifier:   69:27:9E:13:C4:9F:B4:74:81:E4:F0:EA:C1:52:01:86:10:20:B8:2A
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Certificate issuer:       /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial:       01A0E81C2D584125EC8C6022143DB478A0F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
Manifest number:          1ADA
Signing time:             Mon 28 Sep 2026 13:02:35 +0000
Manifest this update:     Mon 28 Sep 2026 13:02:35 +0000
Manifest next update:     Tue 29 Sep 2026 13:02:35 +0000
Files and hashes:         1: 9AbUngTypkaoNALibGKyeTkaz4o.roa (hash: 8et21MYSocigMDejcXNZOBoqIIUukvEWNLqIqh49CVQ=)
                          2: If-4jw8504k0DpzNI8J-eTjth_I.roa (hash: +7hlM1fpCVGHtefaNr3Hcn1BgELFnn/j/b88Js0gOWM=)
                          3: JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl (hash: i1MZCkGe6CfOmW0MS6D0Ye/seGnqAdMXp4vJtyFaZp8=)
                          4: RyBPSWBAyvgzI58JUex72WdudTY.roa (hash: dlQYrNWmjCNno8rPfDE7ZKBncib9oiUvaLSq8gqa3/M=)
                          5: UT5KF9vV1JL4qQULVX8xBydW-Ws.roa (hash: CZXMjETLne5/ANsavo0h/DI6L9lViMMTJK0r4r9Tp+I=)
                          6: YJKWmoUnloWqQAavfXfWWxqnJ5M.roa (hash: Ka2Kdw/WOaN1bcBViqXyM0PUv8ChNL0LTlaKVsUXAN4=)
                          7: ob6pDJB_JE3UJu9H-9gufeyselQ.roa (hash: xbSbO7r3hHkWAEnbnrsxUE2H3xriXhgsX8DyAPUq47c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 13:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:1c:2d:58:41:25:ec:8c:60:22:14:3d:b4:78:a0:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
        Validity
            Not Before: Sep 28 13:02:35 2026 GMT
            Not After : Sep 29 13:02:35 2026 GMT
        Subject: CN=69279e13c49fb47481e4f0eac15201861020b82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2a:8b:cc:c0:de:64:83:8a:2c:81:ae:83:c0:
                    ce:e6:61:3c:91:ce:96:f5:1b:34:7e:8b:82:96:0a:
                    09:f6:fb:af:8e:79:bc:18:6f:f3:4f:9f:65:04:cd:
                    ba:f5:1d:b5:e6:c6:5e:2c:11:08:e5:67:36:5e:f4:
                    71:bd:b1:26:ad:4c:db:83:5f:4e:53:4e:a7:78:da:
                    07:cf:c9:15:a4:08:ae:d6:91:69:17:f0:aa:15:77:
                    a5:4a:a9:17:e2:fe:0b:f7:aa:be:10:26:6f:ee:41:
                    44:52:ed:2d:e1:58:77:32:fe:d5:2c:64:63:d4:e2:
                    33:bf:ed:a4:ad:71:82:6d:8b:37:98:5c:49:b2:cf:
                    59:dc:05:a7:c0:fc:87:bd:e1:e2:28:ea:b9:aa:fc:
                    1a:fe:e2:35:6c:65:ed:40:5a:40:da:ef:52:ab:1c:
                    ef:2d:3e:22:3e:33:1f:8f:7e:41:39:20:21:71:9b:
                    91:30:9b:51:2f:54:83:04:3e:64:92:38:76:d9:82:
                    ba:64:80:2e:2e:e9:67:f6:7c:cf:1f:4e:ec:42:bb:
                    3d:4a:72:14:7f:fa:1a:8a:88:2d:9e:72:ce:4c:c7:
                    55:19:d2:a9:46:21:35:69:09:e5:3e:da:41:9f:36:
                    f2:8a:8e:f9:69:1b:03:2c:48:ea:70:08:27:8a:0a:
                    2f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:27:9E:13:C4:9F:B4:74:81:E4:F0:EA:C1:52:01:86:10:20:B8:2A
            X509v3 Authority Key Identifier:
                keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:34:26:a8:2b:16:90:d2:9b:22:10:4b:b1:83:45:a9:80:c8:
         c4:b9:ad:10:f1:82:b4:d9:d3:ba:15:dc:7d:f9:80:15:1f:d4:
         ff:5f:1f:0c:9d:eb:b7:db:07:e0:d4:84:06:e4:b3:e7:02:6f:
         d4:fd:0c:92:b5:f3:95:16:18:ef:e2:ab:68:cf:7e:e6:c9:25:
         cf:8a:1b:1e:de:88:94:42:d6:e6:58:fa:09:09:e8:a0:60:79:
         21:18:df:97:40:c4:a6:76:41:60:84:88:15:db:24:43:79:41:
         5b:1e:b5:1e:a5:c9:fb:d0:d8:e5:6c:25:72:2d:f6:48:4a:68:
         56:37:24:92:38:77:b9:f2:1d:1e:cf:55:42:f8:02:9a:01:16:
         9f:30:8a:2b:21:f9:8d:39:9b:d3:23:04:e5:a1:24:b4:c9:b9:
         56:c6:cb:ab:b6:37:71:14:9b:ff:95:3c:dd:6c:c0:ac:28:4a:
         33:95:d2:de:b0:33:2d:3e:9a:d1:cb:a5:33:56:8d:1a:76:a2:
         69:fa:c9:53:c1:d2:37:05:91:16:b1:90:31:ea:6d:dc:39:0b:
         a4:fe:9f:bf:b0:a0:26:7d:44:3a:0a:f0:d3:99:d8:cb:ad:56:
         c8:f0:c8:13:2b:ec:f8:03:63:48:71:e9:a9:bb:01:96:22:ed:
         08:be:97:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:17:47 2026 by rpki-client