Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File:                     JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier:          oBvL8jeqh74udQvZFvgpF1VS0L2tA6qTfrE/ne1ZYvA=
Subject key identifier:   18:B5:44:57:89:29:E8:8C:4F:E3:A0:AB:D2:4B:6B:64:81:77:C0:36
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer:       /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial:       01A1DD5DD813FD92EBB8ADF73B339A82B94F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number:          178C
Signing time:             Sun 15 Nov 2026 04:01:17 +0000
Manifest this update:     Sun 15 Nov 2026 04:01:17 +0000
Manifest next update:     Mon 16 Nov 2026 04:01:17 +0000
Files and hashes:         1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: mLfzo7qnCPEvkW7tRK+cKpmXHOHTfbnfQMI9gSiez3w=)
                          2: UTiXqpOnXnL7SsApTxG7VdzoF_M.roa (hash: xvzfHxziNr26zYJwG+snS1syo+ysKboS5MzS0bjlx5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 04:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:5d:d8:13:fd:92:eb:b8:ad:f7:3b:33:9a:82:b9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
        Validity
            Not Before: Nov 15 04:01:17 2026 GMT
            Not After : Nov 16 04:01:17 2026 GMT
        Subject: CN=18b544578929e88c4fe3a0abd24b6b648177c036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b5:ff:a4:96:f8:e4:36:0d:75:0f:9a:62:c8:
                    55:88:1d:0c:4f:1c:b1:0e:60:dc:8e:f6:1b:a1:b2:
                    c0:49:41:ad:83:ea:62:22:e9:09:2e:7d:77:6a:a9:
                    0e:50:27:a1:9f:62:39:42:17:45:d5:29:b0:1b:08:
                    af:86:21:47:47:cc:9e:4f:cd:82:72:66:84:37:47:
                    51:9d:b3:4c:42:37:ec:04:11:dc:5f:0a:b6:fa:a1:
                    35:87:51:0b:9e:e0:e4:40:2e:35:0d:c1:39:a7:b4:
                    97:97:9f:2e:2e:91:fa:f9:a7:68:47:ba:f1:3f:f5:
                    bc:3a:02:65:10:0b:12:e5:45:85:7e:6f:cb:81:58:
                    e3:cc:7a:65:52:49:49:46:8d:ed:d8:33:d1:d6:d1:
                    96:66:77:a0:43:a4:d7:bc:bd:40:c7:d8:87:31:81:
                    fb:32:ad:01:02:2d:c8:a5:1c:26:55:65:15:b5:99:
                    d8:1f:cd:5e:ff:7b:2c:c9:4f:63:be:24:36:78:7b:
                    de:2e:74:d7:5c:5e:ed:be:4a:cb:55:fc:51:54:a1:
                    c8:f9:8f:85:c3:ab:c8:22:31:b6:14:cf:6d:b9:af:
                    b5:b4:d4:45:a0:78:b5:b4:12:a5:55:4a:c1:dd:dc:
                    89:fe:93:dd:3a:a8:af:d4:71:06:2f:50:bb:a9:16:
                    ec:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B5:44:57:89:29:E8:8C:4F:E3:A0:AB:D2:4B:6B:64:81:77:C0:36
            X509v3 Authority Key Identifier:
                keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:88:a3:8c:58:98:76:b1:93:44:38:cc:29:3d:7d:ea:83:85:
         9b:b3:a7:bd:41:bb:8c:cb:b6:4d:e6:ba:6a:35:7a:4a:66:68:
         c0:83:b2:b2:37:8d:74:35:47:46:7d:66:56:d3:d3:c8:8a:7c:
         f7:43:e5:f4:10:60:4e:e4:cb:d2:9d:f1:6e:c5:54:a5:4c:14:
         1c:8b:0b:b1:fa:3d:64:18:7b:ad:66:a0:f3:f9:29:c7:51:a1:
         78:78:97:eb:47:13:f8:b6:29:73:27:52:87:28:ee:eb:eb:4d:
         7e:07:d1:0d:db:b2:2e:7d:42:9d:45:70:49:b7:b2:5b:51:6b:
         aa:53:71:92:05:60:c5:a8:a8:be:55:d0:fc:ff:0b:45:c7:13:
         27:5a:73:c1:0b:71:8f:b6:85:3f:63:fe:42:9b:fe:f3:09:61:
         22:01:66:a4:30:e6:4d:34:f6:41:a4:65:e8:40:bb:8d:2e:e1:
         27:f4:42:79:49:27:d5:63:03:59:da:22:cc:7d:ca:db:3a:36:
         98:3a:72:5b:3d:d1:5d:69:7f:7d:80:fa:8b:c1:86:94:0f:4a:
         a9:36:de:98:78:df:83:1a:92:53:3d:25:e9:1d:bb:c1:be:10:
         d3:b0:73:8f:2a:56:c0:75:86:d6:27:de:76:a3:56:ed:46:20:
         75:13:19:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:24:58 2026 by rpki-client