Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/7e62df-26b5-4ed9-99d6-c70f72336622/1/Jkntt3fYRPYt85gp_3tmdVJMGXw.mft
File:                     Jkntt3fYRPYt85gp_3tmdVJMGXw.mft (raw, json)
Hash identifier:          qEIuiYBlpihoi9IXbCp+6WxMxxw4/qXMeXP/D+Agj+w=
Subject key identifier:   B1:CF:25:8C:CC:4C:FB:21:8C:6B:5E:F6:3C:BC:99:9D:5E:F1:BE:87
Authority key identifier: 26:49:ED:B7:77:D8:44:F6:2D:F3:98:29:FF:7B:66:75:52:4C:19:7C
Certificate issuer:       /CN=2649edb777d844f62df39829ff7b6675524c197c
Certificate serial:       01A0DA5F9EC645119993A298C2F153BF7397
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jkntt3fYRPYt85gp_3tmdVJMGXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/7e62df-26b5-4ed9-99d6-c70f72336622/1/Jkntt3fYRPYt85gp_3tmdVJMGXw.mft
Manifest number:          BB
Signing time:             Fri 25 Sep 2026 21:01:34 +0000
Manifest this update:     Fri 25 Sep 2026 21:01:34 +0000
Manifest next update:     Sat 26 Sep 2026 21:01:34 +0000
Files and hashes:         1: 9yWd6XRJpPbXU6BtQ4b4ycBqt0Y.roa (hash: n0OesgJjlawYzjCz9VRVHbTYEYTlkAqbiCq2tcO+Y9I=)
                          2: Jkntt3fYRPYt85gp_3tmdVJMGXw.crl (hash: 5FwdBjMh2fbIe1V0w2bRXo1lemGsKhvIsiSBLLLiyw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/7e62df-26b5-4ed9-99d6-c70f72336622/1/Jkntt3fYRPYt85gp_3tmdVJMGXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/7e62df-26b5-4ed9-99d6-c70f72336622/1/Jkntt3fYRPYt85gp_3tmdVJMGXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jkntt3fYRPYt85gp_3tmdVJMGXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 21:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:5f:9e:c6:45:11:99:93:a2:98:c2:f1:53:bf:73:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2649edb777d844f62df39829ff7b6675524c197c
        Validity
            Not Before: Sep 25 21:01:34 2026 GMT
            Not After : Sep 26 21:01:34 2026 GMT
        Subject: CN=b1cf258ccc4cfb218c6b5ef63cbc999d5ef1be87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:59:af:e6:e4:2b:bf:9a:a6:02:da:61:a2:e7:
                    d4:63:4c:78:59:ec:71:b7:12:3c:e8:0a:05:31:8e:
                    0c:d1:1a:1d:3f:a2:bd:f4:72:50:a6:df:91:98:1f:
                    ac:72:9f:e7:6b:b6:9d:a9:b2:67:fc:56:ad:a9:a8:
                    00:ff:e8:78:f7:e2:2f:c3:68:c4:5f:db:ca:34:c5:
                    3a:67:4d:d4:04:db:77:56:9b:0c:0d:ba:0f:b8:84:
                    b6:e7:f2:51:f0:3d:dd:d1:bd:c9:fa:96:c4:0f:18:
                    85:f9:4b:10:d1:36:cb:33:1b:fd:55:3c:a5:09:31:
                    f2:a8:3b:72:a0:b2:0c:5b:aa:3b:6b:e0:3f:4f:b4:
                    75:e1:c6:7d:9c:d2:45:31:35:81:36:12:86:5d:6f:
                    d2:88:86:c0:50:0d:f7:39:22:fd:2f:8e:b6:df:b5:
                    89:17:77:7c:7c:dc:d0:dc:ac:73:53:aa:11:24:9a:
                    80:d5:e4:57:a5:d7:e9:41:ff:1c:03:2b:03:0a:22:
                    65:83:65:86:a7:74:02:7d:15:0a:27:87:4f:9f:77:
                    75:4e:19:2b:f5:5a:86:3b:57:39:92:62:89:73:5c:
                    99:d8:75:cb:25:7c:b3:60:3e:32:08:bc:7e:f1:fa:
                    28:43:57:35:1a:41:40:cd:5c:5d:5c:c1:2e:47:04:
                    47:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CF:25:8C:CC:4C:FB:21:8C:6B:5E:F6:3C:BC:99:9D:5E:F1:BE:87
            X509v3 Authority Key Identifier:
                keyid:26:49:ED:B7:77:D8:44:F6:2D:F3:98:29:FF:7B:66:75:52:4C:19:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jkntt3fYRPYt85gp_3tmdVJMGXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e62df-26b5-4ed9-99d6-c70f72336622/1/Jkntt3fYRPYt85gp_3tmdVJMGXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e62df-26b5-4ed9-99d6-c70f72336622/1/Jkntt3fYRPYt85gp_3tmdVJMGXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:5a:46:32:46:2b:31:01:35:a9:0c:c4:47:a0:80:c5:5d:c0:
         b8:97:b4:89:44:1a:e0:1b:bf:60:d8:a9:75:b0:63:16:54:10:
         80:ba:e0:44:f5:73:11:35:98:a7:ae:47:c6:5c:83:01:9c:0b:
         04:75:eb:cb:24:33:1c:31:40:59:cc:31:aa:9c:ff:33:1c:34:
         53:b4:de:d9:97:3a:ca:29:1a:2d:e1:aa:7d:d0:75:e6:d2:31:
         92:e9:58:7c:04:b2:5f:75:61:9c:25:bf:a1:22:15:30:c9:f2:
         e6:cf:e8:f7:1b:aa:5c:60:c7:42:7a:28:14:96:40:a7:ee:4d:
         1c:54:c5:a7:c0:8f:72:a9:f2:c5:98:3e:61:6e:e1:47:a2:9a:
         37:33:8a:8d:94:eb:c8:03:fd:a5:f4:75:28:bc:09:0a:f1:81:
         60:cc:d8:2b:89:58:ce:54:fc:ef:20:27:50:7f:6e:0f:7a:7b:
         2b:d8:d8:ec:65:30:fd:53:5c:05:f6:eb:fc:13:b9:16:34:45:
         f7:7a:0a:1a:13:04:33:c2:15:95:cc:01:9f:1d:b2:27:72:5a:
         ac:68:39:31:ea:09:ef:bc:e3:89:57:9c:e4:77:f8:52:1e:89:
         e7:c6:81:90:e7:b1:71:1b:cd:91:b1:e0:76:dd:d6:b3:10:34:
         9c:dd:cd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:57:56 2026 by rpki-client