Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.mft
File:                     jwo9-IOM805fpjnIbdD9WNo5D8o.mft (raw, json)
Hash identifier:          XcRWvbAZQFsKwelki4+vZOSSEOm5Pt09IPUXWe+sYJo=
Subject key identifier:   08:D2:28:EC:FD:CA:92:27:7D:2E:B8:F4:0F:26:D6:AF:A6:71:2A:0B
Authority key identifier: 8F:0A:3D:F8:83:8C:F3:4E:5F:A6:39:C8:6D:D0:FD:58:DA:39:0F:CA
Certificate issuer:       /CN=8f0a3df8838cf34e5fa639c86dd0fd58da390fca
Certificate serial:       01A0CDB5C600FFBB2B78FBBD9A3BDA2E15AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jwo9-IOM805fpjnIbdD9WNo5D8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.mft
Manifest number:          E4
Signing time:             Wed 23 Sep 2026 10:00:36 +0000
Manifest this update:     Wed 23 Sep 2026 10:00:36 +0000
Manifest next update:     Thu 24 Sep 2026 10:00:36 +0000
Files and hashes:         1: E5KdTXgtxdsHLW1Tlm6fA7TQdyU.roa (hash: SWyR5eHmyCP1QW40YbfgTf5cb8LLIQWxMpE2tBwF6Tc=)
                          2: UxJIkNFFgGyZ3Sx6FuTQTM_feak.roa (hash: uFaGUNwRr3rUdcztpsTcVQC4D2nmfv7IJ6nyqJNEfF8=)
                          3: jwo9-IOM805fpjnIbdD9WNo5D8o.crl (hash: 43QsTKCN5DnXiovOY3iW+oKfNNfPM+d7zNlFxSHcVPw=)
                          4: lGfVfyfCjOGPuM1XDP32hGeN36s.roa (hash: 8TQVC2yr/Ila9hB2GU7fW+CI0VF4Hq3Yu+npudfKOm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jwo9-IOM805fpjnIbdD9WNo5D8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:b5:c6:00:ff:bb:2b:78:fb:bd:9a:3b:da:2e:15:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0a3df8838cf34e5fa639c86dd0fd58da390fca
        Validity
            Not Before: Sep 23 10:00:36 2026 GMT
            Not After : Sep 24 10:00:36 2026 GMT
        Subject: CN=08d228ecfdca92277d2eb8f40f26d6afa6712a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:02:12:dc:5c:85:b3:08:00:8f:0c:b4:b3:2f:
                    15:10:5a:78:f4:38:05:53:e1:00:5a:83:08:47:99:
                    fd:ae:95:2a:09:33:ba:bf:85:04:66:85:a9:7a:4a:
                    57:a7:e6:d7:e3:c3:d6:6b:d5:4f:0b:00:83:18:c0:
                    e4:5c:ed:b3:8f:9c:30:2f:65:32:b8:7e:38:0b:e5:
                    e3:ce:49:e8:7e:d0:c0:15:ae:84:ea:c5:b8:e4:65:
                    e7:c2:4e:47:1f:40:a9:0f:a0:1d:cd:55:62:2d:d1:
                    eb:f6:df:e8:fa:12:5c:f5:87:88:28:7f:6a:d1:0b:
                    1e:67:66:81:1d:5e:e8:68:c0:79:c3:7a:33:1d:4a:
                    87:30:6e:f9:58:e7:13:30:cb:2d:b6:4b:82:22:95:
                    bf:20:44:77:5f:f4:89:08:3d:ef:6d:a0:25:db:c7:
                    6b:ca:e3:ad:70:21:88:66:13:08:b8:9c:80:99:d9:
                    0b:dc:39:5f:d7:76:19:58:d8:cd:a8:85:19:eb:82:
                    33:4f:f6:ea:b2:54:03:50:b2:f9:a3:59:f8:60:c1:
                    87:35:78:9b:f8:f8:e8:30:ab:25:43:49:29:09:29:
                    58:52:71:8b:f0:6e:cf:aa:88:08:8e:e2:d1:c7:e9:
                    9f:40:62:8b:8f:bd:2c:e9:cf:d2:40:43:7d:42:4b:
                    5d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D2:28:EC:FD:CA:92:27:7D:2E:B8:F4:0F:26:D6:AF:A6:71:2A:0B
            X509v3 Authority Key Identifier:
                keyid:8F:0A:3D:F8:83:8C:F3:4E:5F:A6:39:C8:6D:D0:FD:58:DA:39:0F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwo9-IOM805fpjnIbdD9WNo5D8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:1c:0c:a4:ff:08:13:93:ec:d2:64:38:57:21:3a:2c:e0:5d:
         c0:25:df:79:a6:47:fc:51:67:d0:91:cc:ff:7d:e7:eb:b0:5b:
         aa:5b:5a:13:bc:04:19:6e:e3:4b:5e:8b:d2:19:70:a8:ca:3a:
         2d:86:3c:52:db:31:13:49:30:31:3e:25:c5:cf:68:29:71:ee:
         fb:0b:9f:39:f2:c6:2d:ce:61:59:4f:9a:91:d5:f7:aa:59:ff:
         b3:b3:60:7e:db:47:e8:0c:11:1c:bd:66:cf:8c:3e:9c:ae:6d:
         b0:33:53:19:d8:f9:68:ca:d3:81:ac:59:e4:25:6e:bd:e7:75:
         1b:70:22:bd:f8:36:a2:09:f5:0d:1e:91:1a:60:54:3f:82:52:
         fc:50:09:cd:5f:8c:4b:26:bd:90:87:b7:13:e9:11:2b:fe:02:
         78:cd:05:19:08:b3:c4:7a:59:f9:01:dc:0c:4e:df:11:fe:1b:
         0f:0a:1c:a9:c8:12:0e:db:24:2e:40:cc:89:e2:55:ee:cc:9d:
         a0:85:84:53:1d:20:e7:a7:dc:04:f2:34:d4:54:88:70:a8:cf:
         5f:0b:36:31:04:d9:fc:d1:4e:a7:32:1f:0e:62:f3:e2:60:aa:
         58:c8:54:02:66:24:38:c2:d0:7f:31:fe:b5:a1:31:5e:c3:88:
         99:f4:51:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNtcYA/7srePu9mjvaLhWuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMGEzZGY4ODM4Y2YzNGU1ZmE2MzljODZkZDBmZDU4ZGEz
OTBmY2EwHhcNMjYwOTIzMTAwMDM2WhcNMjYwOTI0MTAwMDM2WjAzMTEwLwYDVQQD
EygwOGQyMjhlY2ZkY2E5MjI3N2QyZWI4ZjQwZjI2ZDZhZmE2NzEyYTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wIS3FyFswgAjwy0sy8VEFp49DgF
U+EAWoMIR5n9rpUqCTO6v4UEZoWpekpXp+bX48PWa9VPCwCDGMDkXO2zj5wwL2Uy
uH44C+XjzknoftDAFa6E6sW45GXnwk5HH0CpD6AdzVViLdHr9t/o+hJc9YeIKH9q
0QseZ2aBHV7oaMB5w3ozHUqHMG75WOcTMMsttkuCIpW/IER3X/SJCD3vbaAl28dr
yuOtcCGIZhMIuJyAmdkL3Dlf13YZWNjNqIUZ64IzT/bqslQDULL5o1n4YMGHNXib
+PjoMKslQ0kpCSlYUnGL8G7PqogIjuLRx+mfQGKLj70s6c/SQEN9Qktd2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjSKOz9ypInfS649A8m1q+mcSoLMB8GA1UdIwQY
MBaAFI8KPfiDjPNOX6Y5yG3Q/VjaOQ/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandvOS1JT004MDVmcGpuSWJkRDlXTm81RDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iODA1OGUtNGViYS00Y2M0LThjMWQt
OWM4NGYyZmRkOGYwLzEvandvOS1JT004MDVmcGpuSWJkRDlXTm81RDhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9iODA1OGUtNGViYS00Y2M0LThjMWQtOWM4NGYyZmRkOGYw
LzEvandvOS1JT004MDVmcGpuSWJkRDlXTm81RDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBwMpP8I
E5Ps0mQ4VyE6LOBdwCXfeaZH/FFn0JHM/33n67BbqltaE7wEGW7jS16L0hlwqMo6
LYY8UtsxE0kwMT4lxc9oKXHu+wufOfLGLc5hWU+akdX3qln/s7NgfttH6AwRHL1m
z4w+nK5tsDNTGdj5aMrTgaxZ5CVuved1G3Aivfg2ogn1DR6RGmBUP4JS/FAJzV+M
Sya9kIe3E+kRK/4CeM0FGQizxHpZ+QHcDE7fEf4bDwocqcgSDtskLkDMieJV7syd
oIWEUx0g56fcBPI01FSIcKjPXws2MQTZ/NFOpzIfDmLz4mCqWMhUAmYkOMLQfzH+
taExXsOImfRRjQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 14:27:08 2026 by rpki-client