Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
File:                     _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json)
Hash identifier:          VbhAYVrCVrmWWxsetxzdTcD8u2CNuUyZJyUW8kd4y5g=
Subject key identifier:   EF:AB:C8:B0:03:A7:65:6C:17:1A:5B:E0:87:3A:B7:4F:98:5C:13:3B
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Certificate issuer:       /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial:       01A0C10CA8EAB74C631568162646079461A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
Manifest number:          08CB
Signing time:             Sun 20 Sep 2026 23:00:27 +0000
Manifest this update:     Sun 20 Sep 2026 23:00:27 +0000
Manifest next update:     Mon 21 Sep 2026 23:00:27 +0000
Files and hashes:         1: 1y_PVDrf292ypVubKlcfPa0VLTs.roa (hash: 0XpTQ3RyKshZ7qbm+aFTzxAKabtVi92GLDrjmKUXNmw=)
                          2: OzQYkhg3U6SPEppTB5KeCir3I54.roa (hash: pkZLPVt0U4vONG6pCB0IupbzzE3+kAThVfHoxE9CIfo=)
                          3: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: skvmpnfas+TJ2gnoVnvM7DVXLSEcsrFXG6xFOKUbea8=)
                          4: gy24Ea8BsuXB1XC8engI4KEXF4A.roa (hash: 2h0DlQ9bxyg8udmh82iK9dYgkvfs9qOrlDFcUWd8VWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:0c:a8:ea:b7:4c:63:15:68:16:26:46:07:94:61:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
        Validity
            Not Before: Sep 20 23:00:27 2026 GMT
            Not After : Sep 21 23:00:27 2026 GMT
        Subject: CN=efabc8b003a7656c171a5be0873ab74f985c133b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7b:1d:59:0a:f7:6d:ec:1c:f8:1c:8d:7d:b0:
                    f1:b3:ee:f3:c4:81:b2:7c:56:c5:c5:bd:3b:f8:43:
                    b7:c3:fa:9e:26:4f:4d:0a:31:5b:f4:f1:9f:fc:dc:
                    56:83:86:a8:d1:a5:70:2c:93:82:ce:af:f8:79:a9:
                    88:df:6d:02:29:92:9b:a0:34:70:ee:b0:73:11:04:
                    b0:e2:26:28:e7:85:79:2b:ee:27:5f:83:39:15:5e:
                    fe:b1:5a:07:c1:c9:31:b4:2f:9d:46:ad:96:d4:62:
                    51:2d:d2:f8:f8:8e:81:b4:28:14:6e:fa:16:69:bb:
                    28:16:db:4b:15:09:ab:c1:94:a8:cf:08:0b:a9:f0:
                    ab:2b:c6:99:fe:fa:47:0b:e8:51:32:f4:6e:d6:f7:
                    d1:b1:f2:9e:83:0a:4a:97:48:38:fb:8f:5e:4d:3d:
                    fd:77:51:b0:23:c2:e7:b4:b4:59:04:5b:97:e5:68:
                    32:49:26:8a:eb:88:b3:94:53:b6:00:df:16:32:a4:
                    cc:c6:08:3a:da:bc:19:e3:fc:10:f2:3f:35:0f:b2:
                    64:47:ab:bd:8e:b8:33:83:f1:bd:e3:32:a8:5f:41:
                    ef:94:dd:e0:4b:3a:21:4f:9c:12:47:94:91:c4:af:
                    15:d5:59:18:2a:d0:38:b6:2f:5a:09:1f:92:00:88:
                    a7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AB:C8:B0:03:A7:65:6C:17:1A:5B:E0:87:3A:B7:4F:98:5C:13:3B
            X509v3 Authority Key Identifier:
                keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:dc:1e:55:0e:aa:45:50:55:d5:f1:1a:70:27:ff:f1:e6:16:
         7d:cb:68:b3:d4:ee:de:89:65:91:86:71:23:53:17:ab:da:27:
         d6:96:e2:17:81:1b:62:c4:53:43:8c:fa:cc:5d:46:84:ca:fb:
         3d:c8:03:70:3a:74:77:f8:34:12:9a:c1:1c:35:e7:69:4e:22:
         6f:7a:25:73:26:88:79:51:fa:21:65:98:fd:58:77:ad:a5:62:
         5e:22:07:b3:37:58:b9:fe:43:4f:16:58:75:7c:83:87:b3:ef:
         50:25:a6:23:cf:a3:d2:35:66:a5:a9:17:20:12:2f:70:09:d3:
         85:46:bf:ce:ec:a7:f6:bb:0b:38:aa:ae:04:f6:bd:9e:0d:6b:
         fe:1b:b1:b7:b6:d6:a0:e1:68:84:6d:05:47:25:f7:3f:07:18:
         7e:da:43:d2:33:f5:72:b1:f5:72:f0:7b:94:bd:29:54:df:31:
         cb:62:e6:d8:20:53:c7:fe:41:74:f2:2b:ee:43:9d:70:c0:48:
         01:b0:87:f2:c6:d4:e8:34:18:27:0e:fe:fe:64:72:14:b1:37:
         0a:f6:d0:5d:ae:84:23:19:7c:1f:75:55:6a:ef:b7:dd:84:10:
         cf:4c:5e:50:41:d3:4f:7c:4e:55:9e:2f:47:65:da:f9:82:59:
         7b:94:ce:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:25:50 2026 by rpki-client