Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
File:                     Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft (raw, json)
Hash identifier:          wKJpLR06wRR395R7EY3Z8s6OaAkfKu90R9DGWGH52II=
Subject key identifier:   D5:EF:D8:F8:FE:E1:D6:65:AC:34:0D:35:B3:DA:3A:50:88:7D:EF:FD
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Certificate issuer:       /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial:       01A0C2C40A5ECD8A920ECE4808AD2C50FEF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
Manifest number:          11C9
Signing time:             Mon 21 Sep 2026 07:00:22 +0000
Manifest this update:     Mon 21 Sep 2026 07:00:22 +0000
Manifest next update:     Tue 22 Sep 2026 07:00:22 +0000
Files and hashes:         1: BmTt_K_BLwv-pJIWhVhf0HoNBHI.roa (hash: 7LYJkFKH+ULhI+BQpkEXahBALgXPwOMMlmmdsz27u58=)
                          2: Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl (hash: wu6VavY6pZNUauBTl4nY2WntAscaHo3l7v1VT6E4C9s=)
                          3: Vgo75o1byZ75srMc1A2hc4DB5JM.roa (hash: qe0LN4rfy4gZig75QZhjlSmuXCiHXIfLzzagGqaLMRA=)
                          4: z3jiOX0l8XrsI6phSwPZ5D4UGqs.roa (hash: CcVgaMQKxvkfawhUGWzE3K5Xi3BSkw5Z4uMhoNWWbsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 07:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:c4:0a:5e:cd:8a:92:0e:ce:48:08:ad:2c:50:fe:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
        Validity
            Not Before: Sep 21 07:00:22 2026 GMT
            Not After : Sep 22 07:00:22 2026 GMT
        Subject: CN=d5efd8f8fee1d665ac340d35b3da3a50887deffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0f:a1:6f:04:f8:98:62:63:d0:7e:ae:c1:40:
                    8b:f4:62:a6:94:37:df:4e:de:e0:97:cf:d6:6d:99:
                    0d:2d:2e:d7:f8:be:ec:03:7e:71:ad:b1:02:15:d9:
                    28:96:1a:29:4b:51:e1:39:f1:ac:2a:3c:f9:8c:b2:
                    d0:7d:4f:36:f1:bf:10:10:32:80:ff:88:bd:b4:13:
                    f2:58:85:0d:8c:51:b3:0e:1c:1e:bb:ac:df:0b:f5:
                    df:e5:a8:54:60:44:6a:78:71:49:08:b6:aa:4e:27:
                    14:ff:d9:c6:ff:97:2b:56:a5:8a:2b:2d:11:30:80:
                    9a:be:e2:35:e0:f3:9c:eb:d7:dc:2b:d7:e2:cc:1f:
                    8c:45:70:49:58:3f:fe:4d:9c:53:40:8b:8e:e8:aa:
                    f0:a3:b7:50:16:b4:f6:14:97:90:91:7d:5e:24:bf:
                    26:fc:47:7a:8c:b1:12:8f:e3:f6:98:05:69:e1:45:
                    f0:a5:47:3d:7e:01:c3:1a:15:df:89:ec:9b:31:bf:
                    ee:bd:ca:b4:fc:50:af:59:a8:50:d1:62:75:06:e6:
                    06:46:cf:44:4c:93:c8:d9:19:a0:67:03:50:b5:ca:
                    b1:27:87:64:3f:01:2a:83:9e:66:53:40:af:c1:20:
                    5a:b0:47:ec:14:be:dc:b6:36:17:75:d7:b5:86:86:
                    e9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EF:D8:F8:FE:E1:D6:65:AC:34:0D:35:B3:DA:3A:50:88:7D:EF:FD
            X509v3 Authority Key Identifier:
                keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b9:bc:9b:66:24:b5:2a:7c:b4:4f:66:76:59:dc:57:8a:16:
         5f:60:cc:79:5e:2c:90:23:fd:a8:cc:70:65:71:34:dd:c1:b3:
         ce:22:24:fa:9a:6a:b3:32:0c:72:bc:78:1c:68:a6:1d:d8:d5:
         ca:18:bd:dd:62:05:95:b0:f4:5e:09:6d:0b:e5:3d:c5:04:69:
         ca:1d:dc:00:3f:82:05:1a:6f:02:15:79:86:ab:11:d6:55:87:
         60:3b:e1:aa:63:b7:e8:1c:6a:b8:e9:a6:e5:e4:52:ba:d9:6e:
         52:f4:07:22:27:26:ad:9c:4e:95:a5:fb:91:9f:57:e3:d5:58:
         d1:75:48:4e:d0:e7:a8:b3:f4:92:b8:fd:c5:d9:f7:3f:63:b8:
         5a:ff:84:cc:73:cc:88:74:6e:7a:6d:cc:5e:b1:be:2a:26:6a:
         9e:8e:91:de:c3:60:6e:0b:d5:eb:f5:34:e7:17:b7:14:71:a7:
         1c:92:c5:18:1b:6b:46:eb:ce:2c:23:99:d2:24:87:80:96:5b:
         12:c2:c1:57:74:ce:45:86:85:0f:fd:df:92:2e:81:d7:7f:f9:
         d5:8c:98:3f:11:73:2c:31:14:5c:ca:42:3b:ab:8d:d4:aa:e2:
         47:2b:d3:91:57:0d:a3:5f:07:56:95:23:81:da:ee:af:ee:bf:
         b6:95:65:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:36:44 2026 by rpki-client