Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.mft
File:                     jxBcT_tdVLwidfIN4wBzTiTupKY.mft (raw, json)
Hash identifier:          OEv6/rN8s9wXlp30UY8euceUAScJvBZT/qssa2AhK8I=
Subject key identifier:   7E:F1:16:3F:D6:6C:C4:8C:E9:1A:26:F8:90:86:26:DA:52:19:48:55
Authority key identifier: 8F:10:5C:4F:FB:5D:54:BC:22:75:F2:0D:E3:00:73:4E:24:EE:A4:A6
Certificate issuer:       /CN=8f105c4ffb5d54bc2275f20de300734e24eea4a6
Certificate serial:       01A0C70EE351B63959ACF0DF347882FE2AFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxBcT_tdVLwidfIN4wBzTiTupKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.mft
Manifest number:          0189
Signing time:             Tue 22 Sep 2026 03:00:36 +0000
Manifest this update:     Tue 22 Sep 2026 03:00:36 +0000
Manifest next update:     Wed 23 Sep 2026 03:00:36 +0000
Files and hashes:         1: CaHSmdkysiaumo43vhf9KnbJsHs.asa (hash: 08F9c2p2ZWXv2pzjeA1I++KB7kXuVe5VH24pFsI3lJY=)
                          2: jxBcT_tdVLwidfIN4wBzTiTupKY.crl (hash: SAAoav4uAzb2JxLQKIjTM2mDBwm2fICD1FRxZc9FH+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxBcT_tdVLwidfIN4wBzTiTupKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:0e:e3:51:b6:39:59:ac:f0:df:34:78:82:fe:2a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f105c4ffb5d54bc2275f20de300734e24eea4a6
        Validity
            Not Before: Sep 22 03:00:36 2026 GMT
            Not After : Sep 23 03:00:36 2026 GMT
        Subject: CN=7ef1163fd66cc48ce91a26f8908626da52194855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:92:bd:86:66:33:5d:c5:9f:2c:c1:d1:de:dc:
                    12:39:d2:ba:df:21:97:7a:80:d8:9b:65:09:25:f0:
                    4d:bc:29:31:a8:18:5f:16:a8:a9:1c:e7:c7:20:da:
                    7c:d4:23:ea:f0:19:df:51:74:1f:95:ef:ac:48:02:
                    2b:f6:a7:61:4d:15:d7:b3:1c:08:ce:fb:d6:46:6e:
                    1d:0b:ea:2f:c1:fb:74:ae:ab:f8:25:36:db:b1:bd:
                    62:2f:74:7f:a4:70:f7:c3:53:4c:43:23:ca:50:46:
                    c9:2c:f6:c3:ea:8e:17:ca:82:27:58:b5:ce:2b:e2:
                    6c:7e:50:5d:d4:5c:0f:fa:3b:d3:95:fe:5a:e3:fd:
                    0a:42:5d:20:29:56:e2:d4:78:91:c2:3a:09:2f:c8:
                    03:79:89:4c:53:13:c9:78:9b:9c:44:ca:0f:32:b2:
                    23:ca:c1:d1:5d:80:a8:b1:89:17:b6:38:0d:55:64:
                    d5:69:56:63:78:d3:2c:b0:71:76:33:70:c0:53:33:
                    d5:b4:b6:6f:c9:5e:73:06:7d:c0:ce:16:db:c2:b1:
                    49:53:36:e6:67:a2:e5:df:32:25:bf:75:b5:e9:ea:
                    38:db:b9:4b:a9:72:09:b3:91:28:a5:45:c6:30:ad:
                    80:1d:89:e6:fd:57:ff:f2:e9:1d:c3:fe:08:0b:79:
                    08:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F1:16:3F:D6:6C:C4:8C:E9:1A:26:F8:90:86:26:DA:52:19:48:55
            X509v3 Authority Key Identifier:
                keyid:8F:10:5C:4F:FB:5D:54:BC:22:75:F2:0D:E3:00:73:4E:24:EE:A4:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxBcT_tdVLwidfIN4wBzTiTupKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ed:2a:da:84:37:6c:c8:85:9f:b4:69:32:45:d4:64:78:7a:
         b2:76:32:11:e1:17:af:d8:17:81:31:4e:53:46:b7:f9:1b:e9:
         62:95:d2:8b:39:93:04:dc:cb:7c:b0:89:6e:9f:1f:fd:8c:b0:
         35:3f:ff:53:83:05:44:1a:f7:f0:77:2b:d5:8c:bd:4e:4b:b7:
         1e:f4:f0:88:6b:e0:b9:e2:ac:86:ff:79:39:80:c5:da:1d:4f:
         39:78:b2:0f:14:6b:99:4a:03:38:1a:f3:8a:cf:93:77:8c:df:
         69:b8:e0:e9:25:62:80:d4:d1:99:f9:4f:e7:4e:2d:98:8e:b0:
         57:0f:5b:c4:37:7b:5b:3a:fa:17:eb:09:b4:bc:b5:26:70:04:
         9c:ac:fc:34:2e:3f:cf:24:0c:c7:35:e2:36:b7:ec:1b:37:46:
         a5:bc:67:79:1b:c8:cc:a7:c3:87:4d:42:0a:88:62:cf:44:fd:
         8f:88:c7:96:7f:db:79:7e:07:93:4d:13:b6:26:ff:ba:3d:42:
         16:c6:43:f1:68:fe:6e:fd:91:cb:e5:30:a5:96:02:aa:1f:65:
         25:8a:a1:e3:ed:15:65:6e:61:25:31:0c:e4:a4:7f:0a:3e:64:
         3c:19:c8:35:c8:bd:dd:f0:ea:5a:1f:b1:3b:55:ae:d3:3f:cc:
         c2:2f:23:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:31:42 2026 by rpki-client