Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.mft
File:                     jxBcT_tdVLwidfIN4wBzTiTupKY.mft (raw, json)
Hash identifier:          rx5LTJMyoBLik5gEoprmNfD1oz6ZXDynlUtNgHVVU4o=
Subject key identifier:   96:65:6D:AF:72:B8:28:80:7D:27:BF:9C:37:04:50:DF:CB:B7:66:8B
Authority key identifier: 8F:10:5C:4F:FB:5D:54:BC:22:75:F2:0D:E3:00:73:4E:24:EE:A4:A6
Certificate issuer:       /CN=8f105c4ffb5d54bc2275f20de300734e24eea4a6
Certificate serial:       01A1DD27052775E75D42F1A8F2CCFA18B389
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxBcT_tdVLwidfIN4wBzTiTupKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.mft
Manifest number:          0219
Signing time:             Sun 15 Nov 2026 03:01:24 +0000
Manifest this update:     Sun 15 Nov 2026 03:01:24 +0000
Manifest next update:     Mon 16 Nov 2026 03:01:24 +0000
Files and hashes:         1: CaHSmdkysiaumo43vhf9KnbJsHs.asa (hash: 08F9c2p2ZWXv2pzjeA1I++KB7kXuVe5VH24pFsI3lJY=)
                          2: jxBcT_tdVLwidfIN4wBzTiTupKY.crl (hash: Iv+mo3ELM9lW84363Kh47XGw3N1BytzQrZDW8aAAPnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxBcT_tdVLwidfIN4wBzTiTupKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 03:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:27:05:27:75:e7:5d:42:f1:a8:f2:cc:fa:18:b3:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f105c4ffb5d54bc2275f20de300734e24eea4a6
        Validity
            Not Before: Nov 15 03:01:24 2026 GMT
            Not After : Nov 16 03:01:24 2026 GMT
        Subject: CN=96656daf72b828807d27bf9c370450dfcbb7668b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:6c:3e:ce:06:0d:e6:24:1f:8b:f8:9e:2c:
                    4d:ca:51:8d:d5:d8:d0:cc:c4:2d:fd:9f:16:fa:d1:
                    e6:62:49:d8:b5:83:85:0b:d4:d9:69:23:f3:ac:6f:
                    ed:86:26:d8:33:ac:6f:c8:c7:93:be:db:b0:16:68:
                    93:8c:c9:90:b8:bb:bd:2c:37:94:0d:d3:6d:aa:08:
                    16:3f:c8:9b:b6:c1:73:72:45:3b:89:bc:28:20:0b:
                    d9:8c:dd:2d:79:0e:9d:d5:ec:d4:b4:a3:8c:d6:fb:
                    a8:45:62:23:ca:29:16:8a:9c:93:de:94:5a:fd:31:
                    dd:e2:20:34:93:08:58:dd:e3:cf:60:0c:16:59:f9:
                    c5:c0:da:a4:fc:47:c4:cc:cb:c5:6b:b2:e1:06:8e:
                    9d:b9:2f:3e:d6:cf:ce:c3:9b:1e:1e:86:d9:d7:c7:
                    11:41:02:cf:0e:19:46:b7:c1:f5:a0:5f:a1:e9:ab:
                    dd:f3:24:ac:5f:a5:b9:ab:fb:55:52:26:df:27:54:
                    27:81:c8:b3:b8:86:8f:9b:0a:e5:4d:a7:7f:7d:d1:
                    83:47:ba:ac:64:2e:b0:bb:b0:45:8b:f7:21:0b:87:
                    62:de:1d:9c:78:6c:99:8d:b4:bd:fb:cd:b5:de:41:
                    17:04:5e:7d:0e:e8:6c:b8:b0:3a:52:2e:ae:ee:78:
                    03:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:65:6D:AF:72:B8:28:80:7D:27:BF:9C:37:04:50:DF:CB:B7:66:8B
            X509v3 Authority Key Identifier:
                keyid:8F:10:5C:4F:FB:5D:54:BC:22:75:F2:0D:E3:00:73:4E:24:EE:A4:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxBcT_tdVLwidfIN4wBzTiTupKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f2:5f:f6:31:ca:e6:98:b6:63:5c:31:d7:02:0f:60:a9:1a:
         1b:37:6c:b9:b8:c3:07:fb:05:6f:b3:82:05:d6:0f:bc:8e:ea:
         f5:2f:17:5f:a4:92:b1:a5:b5:37:ba:ee:32:a4:95:ae:ce:e4:
         47:ea:c9:69:f9:28:04:e1:a3:94:50:45:04:d9:b5:7a:8d:00:
         25:aa:66:da:02:c9:85:df:88:a7:bd:13:4e:9e:45:98:b9:d0:
         b0:ce:0b:29:cf:39:6a:ef:26:e5:90:75:be:d1:c2:be:28:f5:
         0d:4d:a8:00:33:fb:1b:bd:d4:e1:8d:7d:7b:61:8b:82:9f:12:
         df:86:13:d1:9c:8f:e5:cf:4a:9e:14:a7:a0:78:a4:18:af:51:
         64:51:55:06:df:41:69:88:62:24:24:2f:b3:92:5d:4c:88:97:
         15:b1:39:95:d7:0a:a6:25:30:f5:20:9f:9b:28:48:7d:0f:38:
         bf:92:ed:f6:87:20:2d:ef:1b:a9:3e:1c:4d:16:37:93:10:ef:
         c7:5d:f5:5e:2e:80:7e:9c:f9:05:4a:d1:51:ee:e8:1a:67:0d:
         0d:d8:cd:70:5f:e8:b6:3e:dc:cf:cb:39:98:6f:8c:33:4c:5c:
         18:a1:d1:33:af:28:25:97:16:3b:a6:9b:88:e8:2f:34:5d:17:
         9f:5e:e5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:24:55 2026 by rpki-client