Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
File:                     jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft (raw, json)
Hash identifier:          TxwXH86S0AL1eaJerts9OTnOZjPSGNICXfI8dad3R5k=
Subject key identifier:   23:A4:6E:16:A5:40:76:BD:31:92:8B:3F:E5:23:3A:33:96:5C:DA:20
Authority key identifier: 8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C
Certificate issuer:       /CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
Certificate serial:       01A11A509C2B107EBF39D95443FA152C4F6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
Manifest number:          01DC
Signing time:             Thu 08 Oct 2026 07:00:52 +0000
Manifest this update:     Thu 08 Oct 2026 07:00:52 +0000
Manifest next update:     Fri 09 Oct 2026 07:00:52 +0000
Files and hashes:         1: jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl (hash: q5l4Bd4ZvEwiJU4muxDBaNMU//NbroqEhltuzY9G2qs=)
                          2: y0t4f3SYiNI2RVeLlWE56pwZqao.asa (hash: 7OCsijFOaHb7cmOa3vj0zykIPZySXdI6fNcvKKq6Oig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:50:9c:2b:10:7e:bf:39:d9:54:43:fa:15:2c:4f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
        Validity
            Not Before: Oct  8 07:00:52 2026 GMT
            Not After : Oct  9 07:00:52 2026 GMT
        Subject: CN=23a46e16a54076bd31928b3fe5233a33965cda20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:54:78:1e:5e:10:fe:ed:9b:ad:4d:28:30:5d:
                    e0:69:50:33:34:af:7d:30:f7:51:3a:1f:3c:2e:ac:
                    ad:8f:52:bb:e8:24:66:c6:45:0f:61:d8:66:f6:12:
                    ed:fc:b0:10:13:ae:84:0a:7a:ca:6c:39:e5:f5:bc:
                    f3:ca:c1:df:52:bc:6d:78:36:67:6e:18:f9:9d:6f:
                    74:2d:d7:4f:e2:eb:48:b9:48:7e:70:ba:a9:37:f5:
                    fa:19:d1:b3:12:e5:87:0c:05:40:23:f0:99:c2:7f:
                    94:17:9a:42:1c:ae:ca:2f:6e:c5:0a:e6:79:dc:91:
                    06:07:aa:a9:6b:01:ba:57:24:96:af:63:b7:96:87:
                    3e:8e:f7:bb:82:08:74:46:e3:c3:c1:22:b0:f3:c5:
                    59:a1:4a:26:71:37:f5:e7:8a:a5:98:db:94:b6:03:
                    22:fb:2f:f3:12:46:18:52:66:d3:b8:dc:7b:d7:d9:
                    b5:19:87:5d:63:ce:1a:8e:67:7b:0e:01:3a:16:3b:
                    01:64:88:b8:f3:a0:cf:42:d8:9e:79:95:5b:69:83:
                    75:66:c8:cf:58:5b:f2:16:c5:5e:90:d5:d1:a9:4c:
                    b1:fa:93:ca:7c:44:c1:30:3d:53:31:29:8a:5f:c5:
                    0c:37:98:e2:5b:a8:ef:ce:38:5d:03:6f:e1:9c:c1:
                    21:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A4:6E:16:A5:40:76:BD:31:92:8B:3F:E5:23:3A:33:96:5C:DA:20
            X509v3 Authority Key Identifier:
                keyid:8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c8:cb:f4:cb:2d:94:d5:53:3d:78:af:fe:a8:20:c3:29:f1:
         f5:0c:a9:1c:9d:2d:51:ae:3a:35:09:f0:22:a2:74:53:68:33:
         bb:6c:0c:8c:0d:55:e6:0c:a3:11:94:0b:e9:c5:fc:09:f6:31:
         13:3f:b7:f9:f3:c0:22:16:74:72:90:61:27:61:4f:07:f9:92:
         f7:d0:68:15:eb:f0:98:70:ca:14:d0:18:e4:86:f7:3d:95:2d:
         35:41:bf:2a:1f:ed:88:14:dc:57:0b:9a:14:f7:9e:6d:1b:73:
         ac:41:c3:82:db:37:be:9f:82:f7:cf:31:c8:f6:3d:37:23:71:
         d2:4c:29:2e:a6:5e:cb:ac:6c:61:62:91:29:48:62:84:97:83:
         03:58:cf:70:a9:f4:e7:04:b4:c3:e8:02:ab:5d:21:ba:51:1e:
         ef:67:fc:13:6e:58:6b:1a:be:c0:af:8a:b8:f9:8e:8d:b6:fd:
         ed:58:8d:fe:61:95:d4:3a:f9:cd:0d:00:b9:a9:21:95:5c:a5:
         8e:f8:32:b7:de:8b:b3:2b:0b:d7:0f:48:77:bc:a5:9f:65:70:
         cf:59:d5:0f:6f:94:06:6b:6e:81:bd:ba:5e:d0:e3:20:6d:f5:
         99:5a:df:ca:05:5c:47:e9:c3:8c:f1:40:9a:6f:e0:15:4e:dd:
         06:dd:28:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:57:25 2026 by rpki-client