Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File:                     JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier:          XkyYIvuVRD22C9GCPdg24oVv3E4AX9ylifnmH16TNk8=
Subject key identifier:   50:90:DA:2F:12:AC:7C:B6:D7:A8:F0:CE:06:F5:D0:1E:AA:8F:7F:5A
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer:       /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial:       01A1317DA000DDF55B5177B84B53F6761885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number:          133C
Signing time:             Mon 12 Oct 2026 19:01:18 +0000
Manifest this update:     Mon 12 Oct 2026 19:01:18 +0000
Manifest next update:     Tue 13 Oct 2026 19:01:18 +0000
Files and hashes:         1: 68M1iA2v1hZrN-WYmwaUYqloW_k.roa (hash: Lu1vR1WuACYYOAE0lbWO8n33EaanCEqHclq+Bu+0jM4=)
                          2: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: HtpuVsU1hRX54Q15aaHT5rA76LvfW5RpKDd7YpXAAUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:7d:a0:00:dd:f5:5b:51:77:b8:4b:53:f6:76:18:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
        Validity
            Not Before: Oct 12 19:01:18 2026 GMT
            Not After : Oct 13 19:01:18 2026 GMT
        Subject: CN=5090da2f12ac7cb6d7a8f0ce06f5d01eaa8f7f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:77:d3:ce:92:9f:32:4b:5f:0a:1e:ce:0a:79:
                    23:bc:ee:22:0e:3c:dc:40:2e:1e:b9:e6:0a:c6:31:
                    a2:aa:5f:4e:72:9d:22:bb:d6:1a:66:7a:ca:e5:16:
                    dd:45:15:12:da:a6:91:a1:a5:8e:44:9a:06:a7:1d:
                    43:61:1d:29:17:59:50:7e:61:4d:95:c8:35:72:b9:
                    15:e8:a5:cf:e9:8c:78:2f:1a:24:b8:5f:48:6c:12:
                    a1:e7:bf:76:5a:5e:77:51:96:d0:84:03:e8:f5:38:
                    45:4e:56:3e:fe:2e:b8:6c:10:12:d5:e2:78:9e:15:
                    bc:07:68:46:8b:51:21:91:2f:d9:a2:81:bb:d7:b9:
                    96:d9:18:39:fb:3a:01:16:9d:53:86:dc:d5:1e:83:
                    cb:30:f1:fe:c2:cf:a6:e1:68:d7:87:73:c2:3c:e7:
                    6f:c6:aa:11:d7:b1:dd:88:2e:25:91:2b:6a:b9:48:
                    3a:7b:98:c1:2f:42:9f:19:65:18:20:09:7e:f8:55:
                    4f:d4:91:17:88:2e:fb:d8:7c:20:79:ec:1b:bb:ff:
                    8a:d7:81:40:8d:c0:1d:ba:6d:6b:2b:0d:43:c5:46:
                    c3:d1:92:4b:98:31:d9:7f:f9:f6:fc:25:10:52:da:
                    2f:ff:b7:af:60:6f:27:96:78:25:07:7d:71:d9:97:
                    11:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:90:DA:2F:12:AC:7C:B6:D7:A8:F0:CE:06:F5:D0:1E:AA:8F:7F:5A
            X509v3 Authority Key Identifier:
                keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:1b:68:96:af:6d:a2:30:2b:b7:c5:e3:f1:61:5c:68:2f:29:
         fb:e2:2e:c8:37:da:98:6b:4a:57:59:77:35:e0:1b:15:7d:9d:
         f2:82:2a:fc:cc:3e:73:cc:9e:f9:da:1b:54:86:7b:e6:a8:0b:
         fc:5a:15:55:34:72:71:08:ef:f5:79:a5:b3:58:3b:ee:e1:a5:
         b2:5b:e1:b1:01:ba:05:de:42:ae:7d:cd:f0:4f:da:11:63:5f:
         99:f4:71:e3:57:01:81:1c:e0:61:4a:e9:5d:52:e0:ba:26:63:
         48:a1:29:f4:e7:c3:65:2f:9b:d0:fe:63:24:36:5e:3e:a1:79:
         f3:6e:c1:e7:7c:f9:f0:60:a3:06:50:46:63:03:d9:32:56:12:
         41:eb:4d:d6:5b:20:13:bf:59:5f:a1:fe:e0:c5:7e:1c:e5:c4:
         60:41:10:d6:75:cc:11:b0:de:a3:b4:c7:25:22:6a:f2:f7:cb:
         f8:ab:db:ed:20:9f:5c:e3:80:3b:41:be:0f:01:a8:01:7b:3a:
         fa:ef:80:18:11:2c:45:01:2a:65:1c:20:9b:3d:23:52:5a:e6:
         49:4c:ce:61:1e:1c:3b:fd:d4:1e:e8:9f:89:21:00:04:5b:cf:
         5f:56:c4:3c:f0:ef:de:be:bb:2a:8e:f7:2f:e2:10:a9:dd:50:
         ff:db:4c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:24:23 2026 by rpki-client