Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
File:                     sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json)
Hash identifier:          5xvqa2REJrVYI0ktmgGb5O37Cuw+zHq01GNXbzs2EMA=
Subject key identifier:   6D:AC:AF:4F:15:10:31:62:2D:E8:AD:2E:F8:18:27:94:5A:E7:63:05
Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Certificate issuer:       /CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Certificate serial:       01A13F02C54838DF19FC86127C070D7B0DD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
Manifest number:          1AA7
Signing time:             Thu 15 Oct 2026 10:01:48 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:48 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:48 +0000
Files and hashes:         1: J8WfogeIpk1UKcHSO8WrjdEFqSM.roa (hash: PzzkgqrS9E4dkHoOcT2At52JZ2wJfpowp9BIjzEgVJE=)
                          2: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: 0T5CHexNt/tbKP68LB2S4pJa0qs5GnMEETc8nwFYW7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:c5:48:38:df:19:fc:86:12:7c:07:0d:7b:0d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
        Validity
            Not Before: Oct 15 10:01:48 2026 GMT
            Not After : Oct 16 10:01:48 2026 GMT
        Subject: CN=6dacaf4f151031622de8ad2ef81827945ae76305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6b:54:8b:88:60:91:9e:ae:14:e0:49:48:cc:
                    4f:e0:69:e8:89:0f:7a:b1:f2:fd:94:e0:cd:74:5d:
                    96:c1:c9:7d:dc:d8:c1:98:83:71:8b:64:52:a1:8d:
                    6d:e5:88:6c:af:5c:b6:d3:3d:1a:d1:01:4c:c2:a7:
                    53:62:2b:63:60:2c:1a:09:ae:bc:16:54:4c:6a:7e:
                    46:49:19:47:8f:46:8e:8b:94:b8:36:81:ec:97:e7:
                    2a:23:9c:f9:5b:01:78:4e:39:6c:35:1e:f9:f5:03:
                    f3:1a:6f:b7:86:b4:d0:ac:eb:c0:f3:b8:57:f1:1e:
                    09:92:2c:85:e2:cb:1b:a1:53:3f:c1:f9:9c:e6:f4:
                    c3:46:c2:a5:ec:3f:b9:6a:3e:1d:b5:9d:0a:dc:c2:
                    d0:a4:b1:7f:42:2b:4f:ea:fc:76:51:31:99:30:0f:
                    1e:e7:da:17:68:42:84:a0:67:8f:b1:b2:0c:37:cf:
                    7b:00:d3:58:8d:b5:33:89:a4:4b:e8:37:4c:db:e4:
                    d6:77:08:80:52:0c:cb:ad:86:d9:a0:83:1a:ce:d8:
                    b7:b4:9d:66:cb:e9:97:4d:17:96:1d:60:8d:dc:4d:
                    ff:de:b7:94:39:c5:56:83:bb:f0:8a:81:4b:c9:0a:
                    22:9f:a4:74:02:ba:80:60:a9:ee:d4:d9:2c:b0:d7:
                    ce:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AC:AF:4F:15:10:31:62:2D:E8:AD:2E:F8:18:27:94:5A:E7:63:05
            X509v3 Authority Key Identifier:
                keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:2b:c6:35:37:5e:71:81:12:6b:aa:e4:c7:27:a3:98:30:61:
         5c:cf:62:4b:e5:22:ad:d6:35:f8:45:fc:7a:89:4c:79:f3:6b:
         77:0b:e2:54:7a:df:a6:a4:83:e1:1b:d3:4e:79:b4:53:91:73:
         22:4f:80:a7:ca:93:eb:91:34:9d:bd:5a:14:2d:74:23:d4:74:
         d7:1f:49:01:a6:87:7c:10:98:97:c0:86:92:3d:c3:71:1e:f8:
         65:6d:fe:9e:f5:00:c5:a9:b0:14:8a:8d:46:2f:2c:9c:32:a4:
         2e:e5:82:80:49:b6:b8:42:f2:cd:4c:a5:a0:7f:25:06:0c:d3:
         3d:bf:20:34:e3:68:cc:1a:85:de:74:59:46:03:ec:19:b0:06:
         ed:85:be:c5:fb:dc:92:21:98:ae:77:06:5d:45:62:3a:00:d5:
         e7:d5:04:56:89:a9:e2:64:b2:2e:a7:4b:f5:fe:23:f0:63:27:
         30:ed:68:8b:b2:0f:a3:06:c4:89:81:61:d8:fd:3d:a4:9b:78:
         f7:d6:13:7c:11:19:1b:00:8e:30:88:cb:f9:43:be:b2:24:ec:
         ab:5b:7b:ad:63:b5:1f:47:c5:6c:64:5b:01:65:bf:1f:78:51:
         77:05:72:1f:8d:3f:60:c2:1b:67:ca:ce:09:68:d3:1d:98:44:
         60:44:b4:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/AsVION8Z/IYSfAcNew3RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwOTQ3ODBmZmJiMDZiN2I1N2YwMjE0ZTg0NTUyYjk2NGM1
MDQxZDYwHhcNMjYxMDE1MTAwMTQ4WhcNMjYxMDE2MTAwMTQ4WjAzMTEwLwYDVQQD
Eyg2ZGFjYWY0ZjE1MTAzMTYyMmRlOGFkMmVmODE4Mjc5NDVhZTc2MzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WtUi4hgkZ6uFOBJSMxP4GnoiQ96
sfL9lODNdF2Wwcl93NjBmINxi2RSoY1t5Yhsr1y20z0a0QFMwqdTYitjYCwaCa68
FlRMan5GSRlHj0aOi5S4NoHsl+cqI5z5WwF4TjlsNR759QPzGm+3hrTQrOvA87hX
8R4JkiyF4ssboVM/wfmc5vTDRsKl7D+5aj4dtZ0K3MLQpLF/QitP6vx2UTGZMA8e
59oXaEKEoGePsbIMN897ANNYjbUziaRL6DdM2+TWdwiAUgzLrYbZoIMazti3tJ1m
y+mXTReWHWCN3E3/3reUOcVWg7vwioFLyQoin6R0ArqAYKnu1NkssNfOmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2sr08VEDFiLeitLvgYJ5Ra52MFMB8GA1UdIwQY
MBaAFLCUeA/7sGt7V/AhToRVK5ZMUEHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82NjgzY2EtYTY4OC00MTQxLWFkNDEt
OGFkZjBkYTIyNTQ1LzEvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82NjgzY2EtYTY4OC00MTQxLWFkNDEtOGFkZjBkYTIyNTQ1
LzEvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSvGNTde
cYESa6rkxyejmDBhXM9iS+UirdY1+EX8eolMefNrdwviVHrfpqSD4RvTTnm0U5Fz
Ik+Ap8qT65E0nb1aFC10I9R01x9JAaaHfBCYl8CGkj3DcR74ZW3+nvUAxamwFIqN
Ri8snDKkLuWCgEm2uELyzUyloH8lBgzTPb8gNONozBqF3nRZRgPsGbAG7YW+xfvc
kiGYrncGXUViOgDV59UEVomp4mSyLqdL9f4j8GMnMO1oi7IPowbEiYFh2P09pJt4
99YTfBEZGwCOMIjL+UO+siTsq1t7rWO1H0fFbGRbAWW/H3hRdwVyH40/YMIbZ8rO
CWjTHZhEYES04w==
-----END CERTIFICATE-----
Generated at Thu Oct 15 13:29:12 2026 by rpki-client