Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
File:                     Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json)
Hash identifier:          ZUDPsiPCjv6DHIff9c3mPVy4A1/mkLu66EtNg12oKhU=
Subject key identifier:   31:51:29:50:80:46:F3:EB:45:9F:96:25:AC:43:56:57:F4:3A:10:70
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Certificate issuer:       /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial:       01A0DBDFF9E62A87C95B49F11614DBC0DAA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
Manifest number:          1A71
Signing time:             Sat 26 Sep 2026 04:01:23 +0000
Manifest this update:     Sat 26 Sep 2026 04:01:23 +0000
Manifest next update:     Sun 27 Sep 2026 04:01:23 +0000
Files and hashes:         1: 6MvEEf7_I3zO3ShtqYd8LKtfRq8.roa (hash: lIgvAYq1Ass4AfPtbYog1dJL/68LEdNig8uh3pGw9vM=)
                          2: EKgYi5uwmdQ3SbZogfsfQT2cobM.roa (hash: Y3gYmZwUht9JEwQTGH6EyDKQhtm/rC13n1867BeBzvQ=)
                          3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: GivjmffeX/Zs5Syz5wSLRMGJ/W+SE3RZXb2Yyt+6Ngg=)
                          4: Jqk7oDaY0GyweY_m1dLexacLzPE.roa (hash: prybAkap/ary1cwam/oMqauOzBkuf1YCV2giq0/4yoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:df:f9:e6:2a:87:c9:5b:49:f1:16:14:db:c0:da:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
        Validity
            Not Before: Sep 26 04:01:23 2026 GMT
            Not After : Sep 27 04:01:23 2026 GMT
        Subject: CN=315129508046f3eb459f9625ac435657f43a1070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:29:b1:cf:c7:91:86:fe:f1:da:14:7c:8b:39:
                    b1:ed:53:03:b7:40:61:4c:3e:e9:74:52:5b:a1:75:
                    04:a4:2d:94:59:5a:b4:70:3d:93:fd:74:ac:07:78:
                    23:a2:bb:b3:ae:00:1a:d2:b0:6e:0d:66:c0:2c:6f:
                    e2:56:6c:92:c4:42:1a:c8:7c:44:7f:f1:41:41:b6:
                    94:e3:50:ca:4f:b4:40:dd:0e:81:b3:28:63:6f:d1:
                    a4:b9:41:1e:94:b6:e9:7e:dd:52:b6:44:80:71:c4:
                    dc:41:a8:5a:de:01:18:8a:de:6f:d8:18:bc:2e:d6:
                    9a:2b:e9:76:2e:f3:19:b3:b9:09:3e:b4:8c:ea:71:
                    07:fb:4c:78:38:67:56:66:ea:10:b7:37:30:3b:30:
                    a8:78:b0:ea:bc:6e:c6:47:6b:74:a6:8a:a7:10:74:
                    d9:83:24:a6:20:f0:09:b1:e8:fd:36:97:0b:8a:4d:
                    a5:c3:fc:5e:23:f4:21:a9:08:b7:b7:7e:a8:c2:d2:
                    56:7f:ae:19:3a:23:4c:e4:dc:c7:8c:e8:e0:b8:96:
                    0e:65:d6:0a:04:2b:7a:37:74:2b:43:aa:83:24:a3:
                    eb:a9:b3:25:a9:c0:4a:ad:2d:7c:16:3d:1e:4a:01:
                    13:3a:f6:38:50:1e:97:53:bf:7a:8d:94:83:ae:5f:
                    12:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:51:29:50:80:46:F3:EB:45:9F:96:25:AC:43:56:57:F4:3A:10:70
            X509v3 Authority Key Identifier:
                keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:6b:1a:17:21:64:65:41:ba:00:4e:1c:85:48:1f:93:2c:a0:
         7d:f2:2a:46:ce:dd:6f:8b:f8:fe:35:48:29:bd:b3:ad:85:f2:
         70:9f:1d:c7:a2:74:cc:c4:f0:91:a3:eb:50:3f:c7:8a:92:53:
         f7:58:24:ff:ce:71:0f:61:13:45:e7:8d:30:f6:21:37:f2:73:
         7c:b2:13:8c:da:bc:2f:4c:21:af:10:0c:a2:c0:83:f8:79:1b:
         81:17:d4:c6:99:0a:b6:8c:aa:b3:6f:4f:53:c9:66:03:8d:40:
         cb:58:5a:78:5d:a3:8f:91:55:b7:ab:6f:28:96:68:71:cf:f7:
         0b:25:60:fb:ad:37:4f:0d:ae:cf:04:ea:73:d8:39:34:40:1b:
         ed:3b:e3:c5:1c:1b:f9:8b:33:45:a9:58:38:54:db:76:c6:d5:
         b4:27:60:3c:09:6c:8d:43:bf:36:36:ca:55:c2:e8:3c:85:f3:
         48:d0:d5:47:cd:87:75:41:15:71:1e:84:14:4e:b0:42:9b:d6:
         36:33:3d:a8:2f:2b:05:4c:4d:43:27:51:c3:36:77:4a:c1:13:
         f4:d3:cb:2a:9d:50:04:87:7e:e2:60:ec:c4:b2:bd:9e:6f:8f:
         2b:1a:b3:05:ea:bb:53:15:1f:0d:ab:e4:d1:89:b2:c2:3a:dc:
         27:08:62:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:09:03 2026 by rpki-client