Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File:                     jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier:          5VxuCckf0WKJ6p0IvoYs3snfuZdkojmxHO1+oDdTLA8=
Subject key identifier:   35:0D:93:EE:9D:4D:A7:6C:32:D7:35:7D:4A:4F:70:2F:24:F3:20:4A
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer:       /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial:       01A125E6D2F6056EEB67272F55388EBA40A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number:          130C
Signing time:             Sat 10 Oct 2026 13:00:46 +0000
Manifest this update:     Sat 10 Oct 2026 13:00:46 +0000
Manifest next update:     Sun 11 Oct 2026 13:00:46 +0000
Files and hashes:         1: hJ4yBwRAkPSn0hZDZUYf9X3bnuA.roa (hash: SieYkKpzIy6oq5VVbN7rTFUvyMh99g+Bi6wzQEIEdkQ=)
                          2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: 7gPW3svN76wDqt6TK01k27I+jxNBVFG1gZ5yo9YOg8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:e6:d2:f6:05:6e:eb:67:27:2f:55:38:8e:ba:40:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
        Validity
            Not Before: Oct 10 13:00:46 2026 GMT
            Not After : Oct 11 13:00:46 2026 GMT
        Subject: CN=350d93ee9d4da76c32d7357d4a4f702f24f3204a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:16:0c:11:27:ea:7c:54:f6:a3:02:f1:81:35:
                    b0:0e:a5:00:f2:c7:6d:4f:a4:07:f3:1b:e4:9c:73:
                    03:8c:61:fb:0c:d5:5e:9c:02:43:e9:f0:dc:1c:9e:
                    2f:ed:bd:e6:01:cd:be:cb:c6:ba:84:4c:b6:35:a3:
                    1f:e6:b3:d4:60:65:6d:15:94:39:0e:37:7e:b7:90:
                    6e:6f:69:3d:ae:85:65:1d:3f:3e:2e:ba:fe:b5:51:
                    21:ce:26:00:6d:3e:46:b8:c8:01:f6:ff:b9:82:cf:
                    30:c1:81:55:45:0b:31:cb:ea:da:9e:a0:49:49:f0:
                    bf:11:f5:5e:58:60:53:6b:d5:08:df:29:c3:fc:1c:
                    ac:b3:3f:0c:ca:d3:28:50:5c:9b:cf:8b:f0:b8:32:
                    49:5e:51:f9:a5:ff:58:d6:82:71:1f:e2:7a:ca:a8:
                    db:99:ef:ea:84:dc:ae:12:99:19:a2:84:2d:e7:46:
                    7d:d3:b3:33:a7:7f:44:bf:c9:86:3f:a6:76:bc:e0:
                    b5:6a:37:df:25:0e:e2:5a:6e:f0:26:ef:b5:0f:3a:
                    c4:2b:5c:9a:5b:96:54:8a:77:38:28:ce:67:6c:02:
                    c6:80:ec:0f:fc:ae:3f:06:dc:95:25:42:47:2c:39:
                    00:cc:f7:df:52:97:b1:63:db:cd:b4:19:9a:63:9d:
                    47:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0D:93:EE:9D:4D:A7:6C:32:D7:35:7D:4A:4F:70:2F:24:F3:20:4A
            X509v3 Authority Key Identifier:
                keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:be:38:a3:66:50:50:1e:c1:eb:38:d3:f4:97:e4:6d:2d:13:
         de:dc:f2:45:4b:36:fc:49:11:f8:34:7e:97:83:43:c9:bc:1e:
         12:48:22:8f:ed:83:35:5c:00:56:33:2d:01:97:67:c9:53:cd:
         41:fd:da:02:e8:fe:01:73:50:fe:5e:97:a2:37:3d:08:01:ef:
         b8:96:bb:d3:82:4d:a0:79:05:a5:3a:89:72:db:b2:de:6e:6a:
         84:ff:9e:3f:59:f5:09:2f:94:ad:97:63:0d:54:7e:eb:49:18:
         ef:19:94:7f:a8:82:45:ae:cb:6f:f4:7b:76:3a:1a:54:de:ff:
         74:34:fc:d2:29:be:cb:b6:2b:83:ed:0f:36:79:1b:b2:93:bf:
         3b:bd:0e:a0:88:44:9f:63:39:e2:2a:41:bb:23:85:4c:18:dc:
         91:3f:56:43:22:56:33:72:29:ca:29:a7:7e:45:27:a7:64:95:
         75:b8:14:da:56:71:38:64:00:f9:bc:4a:b1:21:3c:d9:ba:43:
         0d:ca:36:bf:58:c2:9e:9d:f8:9c:24:57:c2:7d:15:2c:86:45:
         38:bb:96:12:ad:97:95:e2:44:8e:49:a2:e3:7d:c4:5e:2d:65:
         25:e1:df:6e:b6:81:cb:50:d9:7b:da:e4:68:3f:39:70:04:4e:
         53:7a:16:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:17:27 2026 by rpki-client