Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
File:                     J7syqoyfjQXFF74q1mUvZlUKjVc.mft (raw, json)
Hash identifier:          559ilP+uzWBmYTNsZPPPRNtxL2mqOL0mr83QU/K4bMA=
Subject key identifier:   A8:C5:24:05:22:F8:9B:52:8A:14:FE:9B:4A:CB:DC:7A:E5:02:7D:4B
Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
Certificate issuer:       /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Certificate serial:       01A12955E3D944C1B871A924E439BCB4C679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
Manifest number:          1A9F
Signing time:             Sun 11 Oct 2026 05:00:56 +0000
Manifest this update:     Sun 11 Oct 2026 05:00:56 +0000
Manifest next update:     Mon 12 Oct 2026 05:00:56 +0000
Files and hashes:         1: 1yorneBH_uni2t074VYTQfK78WU.asa (hash: ysYqB1Mc/GnPUjyx8+b5ttlTyIkBVoc1lRsKiq7EAvU=)
                          2: 3RCjNuMxUkfSYyNOUlggwRfWfc4.roa (hash: UnwrsssJDeDLbtzFhokPg+3DUFYJBO3poSSiUsMCOJk=)
                          3: J7syqoyfjQXFF74q1mUvZlUKjVc.crl (hash: x3t6B4L3JOTPkGVdHfLgXCcuDRau6q8ZWnNCD4j+DlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:55:e3:d9:44:c1:b8:71:a9:24:e4:39:bc:b4:c6:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
        Validity
            Not Before: Oct 11 05:00:56 2026 GMT
            Not After : Oct 12 05:00:56 2026 GMT
        Subject: CN=a8c5240522f89b528a14fe9b4acbdc7ae5027d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d1:25:ff:2c:a2:99:7e:1e:50:a5:78:a3:04:
                    54:b2:e6:33:00:17:b0:cc:71:2b:9a:01:fc:12:a3:
                    63:f2:b6:fb:3b:ec:4a:28:f5:07:00:91:79:62:fc:
                    e5:1e:f1:cf:8c:de:07:5c:90:7e:a6:7b:71:be:d2:
                    73:ca:b5:d1:0a:96:2e:2b:06:c6:9d:f9:55:ee:cc:
                    d3:43:57:25:3a:97:97:8a:d8:76:98:02:05:9b:e6:
                    67:7d:1e:28:39:85:b3:0d:6f:46:aa:34:cc:42:dd:
                    80:e3:a1:f7:a7:72:0a:2f:a7:7b:72:02:5d:89:c5:
                    c5:34:e0:f3:75:22:e7:54:85:7f:8b:9c:e2:af:13:
                    f3:f1:4a:27:4b:26:0a:d3:2d:51:1d:3a:73:df:2d:
                    d8:7e:78:db:61:c0:12:3f:05:bd:04:e1:53:7d:e2:
                    1a:bb:19:cf:12:79:8e:30:71:eb:de:be:9d:f8:33:
                    c3:57:2d:be:52:8d:02:06:83:00:57:a8:2c:4c:20:
                    a3:6d:74:42:f3:26:ac:cb:16:1c:75:fa:72:30:f5:
                    ae:4e:92:ba:36:47:19:ff:c1:7f:db:30:f4:bd:f0:
                    72:be:6b:14:44:86:8e:ff:c6:26:18:cc:cb:61:22:
                    11:0b:7b:82:5d:c6:9c:f1:a7:b5:39:b4:0b:8b:57:
                    dd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C5:24:05:22:F8:9B:52:8A:14:FE:9B:4A:CB:DC:7A:E5:02:7D:4B
            X509v3 Authority Key Identifier:
                keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:03:9c:d3:02:4f:e1:b5:72:0c:54:54:bc:d3:8c:88:f8:9c:
         e1:bd:f5:d2:e4:ed:fb:0e:45:dd:47:36:4b:fe:d8:36:53:ff:
         d5:0f:32:ef:2b:1c:6c:74:ff:7c:ae:f6:cc:80:a4:79:62:0b:
         e9:15:f8:9e:52:66:c4:9f:fa:cc:84:54:52:f0:96:d8:6a:ef:
         ff:9a:0b:71:fb:10:b4:b9:83:7c:7f:72:a6:99:38:6d:87:85:
         23:f1:e2:56:f9:a9:e4:27:f3:1f:01:de:42:fb:48:6f:ed:e3:
         20:e1:95:ae:0e:35:05:e7:d7:27:0d:99:e6:71:ee:19:18:56:
         43:ef:8a:dd:46:f9:8f:55:0b:95:f1:49:82:f3:2a:42:89:84:
         12:3d:39:c6:61:e0:93:e6:42:e3:45:e9:12:82:a9:91:e5:f6:
         02:ed:0f:85:02:a5:ee:c6:ed:a7:e1:eb:ac:17:65:96:40:57:
         f0:13:b9:26:f3:a4:30:45:c4:29:07:54:1a:07:a6:78:69:4a:
         08:c3:90:20:21:2a:aa:1d:df:fc:ca:04:57:15:4b:f0:a1:3d:
         d8:57:a3:df:6d:51:a5:84:eb:8c:c1:9f:62:60:6a:81:d5:fb:
         16:72:f3:e4:af:bf:8b:35:24:c3:1e:d8:a8:58:76:6c:c5:7d:
         b0:d7:0a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:57:18 2026 by rpki-client