Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
File:                     JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json)
Hash identifier:          L1ds26GCeD/OSb2Whk/I7cLSrAvX3w99sVSGxCywFiA=
Subject key identifier:   3A:19:96:9F:3B:F5:43:24:9C:5B:D2:96:2A:37:C6:E1:CB:5F:68:65
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Certificate issuer:       /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial:       01A0D68254759AE1FEBDBFEF27A2F50CCA67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
Manifest number:          1746
Signing time:             Fri 25 Sep 2026 03:01:00 +0000
Manifest this update:     Fri 25 Sep 2026 03:01:00 +0000
Manifest next update:     Sat 26 Sep 2026 03:01:00 +0000
Files and hashes:         1: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: eODEJ2i7rncA0SteayLG38J6lWwTWOCMX/CsauZa2T0=)
                          2: M2jHykXP5tshdup3cmW0BBbfpFc.roa (hash: GerABurddckbNTOvcsAmSJXKIfhdD87hJkB99cOoWFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:82:54:75:9a:e1:fe:bd:bf:ef:27:a2:f5:0c:ca:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
        Validity
            Not Before: Sep 25 03:01:00 2026 GMT
            Not After : Sep 26 03:01:00 2026 GMT
        Subject: CN=3a19969f3bf543249c5bd2962a37c6e1cb5f6865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8e:af:96:71:f4:a0:6c:17:81:c8:21:dc:a2:
                    3f:f4:be:1a:1c:41:e1:0d:46:09:91:dc:e3:67:c7:
                    24:2c:d7:2e:7b:0e:26:e0:f5:e9:71:0a:97:bc:21:
                    7a:c1:0d:79:22:38:a0:1e:1a:64:31:ec:38:22:de:
                    e4:42:06:82:f0:4a:0f:5e:56:7f:09:36:70:dd:32:
                    83:dd:89:d3:2e:ec:28:dc:0c:ae:31:44:b6:ae:44:
                    72:8b:8c:10:ad:80:44:ce:65:38:67:40:1c:45:56:
                    ee:5d:bb:0e:5f:fd:d0:b2:a6:00:20:78:02:02:5c:
                    af:cf:a0:16:77:c9:1f:f9:2a:97:24:3a:9f:f5:23:
                    29:e4:99:3f:5c:c8:a8:82:d0:dd:3b:ec:e5:e2:53:
                    fc:75:d9:e8:36:ea:19:55:21:a0:db:12:77:dc:0c:
                    36:d9:4c:2b:a5:f6:56:8a:4c:63:ba:d0:b3:b3:6b:
                    ce:26:92:4b:83:8b:69:50:bf:b6:9d:37:ed:a2:bc:
                    81:d1:69:74:ae:4e:75:e0:88:92:42:d8:36:e1:83:
                    24:89:e7:2d:f4:28:3f:9d:b9:de:d4:e1:31:83:a2:
                    51:31:1e:7a:a3:14:3a:53:26:b9:f1:fa:49:39:ef:
                    3b:08:36:e7:77:34:e9:84:59:fa:8b:7e:8f:e3:d3:
                    08:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:19:96:9F:3B:F5:43:24:9C:5B:D2:96:2A:37:C6:E1:CB:5F:68:65
            X509v3 Authority Key Identifier:
                keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:93:96:c2:f5:02:d2:b9:b2:8f:be:81:5e:de:d8:86:c9:a9:
         44:ca:c3:1f:aa:60:4a:a4:9c:1a:b7:a3:e1:9f:07:c0:b3:16:
         f0:54:8e:95:96:74:4b:d4:37:90:94:0b:99:df:a0:f0:d0:86:
         00:ac:92:c7:a6:22:d2:95:d7:63:cd:dd:d7:d7:a8:67:1a:9f:
         c4:ff:da:06:ba:2b:86:31:83:6f:7e:1c:c6:bf:83:75:f6:49:
         73:71:b1:93:b3:3d:2a:50:47:1a:75:58:16:3e:e4:68:9a:46:
         9c:89:bf:b7:72:76:06:6a:e7:62:78:54:7d:64:13:2c:be:43:
         c0:25:e9:0f:de:fd:f4:6f:5f:09:da:c6:5d:08:6a:b5:1b:91:
         ee:5b:08:4e:fe:f5:85:12:e7:f1:91:23:ae:f2:41:92:36:4b:
         41:b9:8a:45:ba:2e:58:55:51:07:bb:e4:2c:7d:40:c0:49:54:
         bc:cd:3f:9f:75:98:18:59:b7:09:9a:c9:24:10:29:4f:35:87:
         8d:02:bb:c8:29:8f:f7:b8:5b:0b:ad:97:d8:f0:15:13:42:74:
         86:e9:13:45:30:78:e8:67:e0:4c:53:19:56:fc:81:ca:ca:ec:
         67:df:9c:8e:45:55:34:8b:d4:1f:77:11:91:2d:74:fc:81:d7:
         ef:79:a0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:11:43 2026 by rpki-client