Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/2807b1-c795-4783-9331-28ae3e548219/1/cjqC_hu-hvGmyHW40q9RkBYkGks.mft
File:                     cjqC_hu-hvGmyHW40q9RkBYkGks.mft (raw, json)
Hash identifier:          Xx9RELjzuwERjvdU6Je5dh1DA0UYrNhwVFbQMtuZ/ec=
Subject key identifier:   03:8D:4D:B5:BF:F4:CF:7B:A0:20:DF:6D:50:F5:9A:6B:32:6D:18:B6
Authority key identifier: 72:3A:82:FE:1B:BE:86:F1:A6:C8:75:B8:D2:AF:51:90:16:24:1A:4B
Certificate issuer:       /CN=723a82fe1bbe86f1a6c875b8d2af519016241a4b
Certificate serial:       01A13A805CA4A67BD44A872EF29B51D5A29E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cjqC_hu-hvGmyHW40q9RkBYkGks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2807b1-c795-4783-9331-28ae3e548219/1/cjqC_hu-hvGmyHW40q9RkBYkGks.mft
Manifest number:          011F
Signing time:             Wed 14 Oct 2026 13:00:53 +0000
Manifest this update:     Wed 14 Oct 2026 13:00:53 +0000
Manifest next update:     Thu 15 Oct 2026 13:00:53 +0000
Files and hashes:         1: PgyjT_elScjq4Gt4PqF9-Ofg7e8.asa (hash: ky7YhoYgmFzGRmiGiiZ6QIKd6OIlFLfWaYBdMuYaN60=)
                          2: cjqC_hu-hvGmyHW40q9RkBYkGks.crl (hash: T8UYMSnKLs6tD2DByvsbon+qSHoNASL6ucrCGkqfiK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/2807b1-c795-4783-9331-28ae3e548219/1/cjqC_hu-hvGmyHW40q9RkBYkGks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/2807b1-c795-4783-9331-28ae3e548219/1/cjqC_hu-hvGmyHW40q9RkBYkGks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cjqC_hu-hvGmyHW40q9RkBYkGks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 13:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3a:80:5c:a4:a6:7b:d4:4a:87:2e:f2:9b:51:d5:a2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=723a82fe1bbe86f1a6c875b8d2af519016241a4b
        Validity
            Not Before: Oct 14 13:00:53 2026 GMT
            Not After : Oct 15 13:00:53 2026 GMT
        Subject: CN=038d4db5bff4cf7ba020df6d50f59a6b326d18b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fa:d3:ce:68:7c:c3:2a:78:f9:a8:43:4d:cf:
                    ca:00:d6:3a:0b:9e:d3:de:fa:44:c4:21:a5:ed:eb:
                    ea:10:42:02:5c:d0:55:48:1e:59:c1:a2:85:df:8e:
                    6e:0f:3b:ce:c1:87:01:b1:36:be:76:74:56:0d:ca:
                    8e:d9:d4:a9:8b:10:0c:3f:03:6d:d4:1f:be:7c:01:
                    85:b7:7a:56:e7:72:04:1e:ef:60:79:b9:f0:30:0f:
                    37:a3:a8:08:e9:60:70:d0:d3:95:b5:a9:51:cf:b7:
                    18:c4:76:e4:64:6b:9b:24:b1:de:2e:22:48:a0:ad:
                    04:43:ba:70:79:70:a0:64:f2:59:d9:d7:89:2e:f1:
                    95:18:c1:a8:24:cc:a7:bd:72:ec:02:d8:9f:6c:22:
                    9c:a5:89:a7:9f:34:a3:bb:4f:11:17:9d:00:cb:98:
                    aa:bb:78:23:a3:30:16:78:12:44:57:a4:8b:5e:95:
                    9a:e7:60:01:21:db:46:b7:e1:75:a9:61:54:30:8d:
                    75:47:27:12:90:b0:bd:dd:7d:6f:90:05:51:df:7c:
                    fa:49:ae:b3:3e:51:db:f1:4c:f8:2a:d1:54:ba:49:
                    dc:1f:6c:f9:31:e3:04:71:88:b2:68:ea:2a:f9:ff:
                    56:e4:cb:9f:0a:11:31:45:ea:3f:2d:00:67:bc:ae:
                    ef:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8D:4D:B5:BF:F4:CF:7B:A0:20:DF:6D:50:F5:9A:6B:32:6D:18:B6
            X509v3 Authority Key Identifier:
                keyid:72:3A:82:FE:1B:BE:86:F1:A6:C8:75:B8:D2:AF:51:90:16:24:1A:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjqC_hu-hvGmyHW40q9RkBYkGks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2807b1-c795-4783-9331-28ae3e548219/1/cjqC_hu-hvGmyHW40q9RkBYkGks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2807b1-c795-4783-9331-28ae3e548219/1/cjqC_hu-hvGmyHW40q9RkBYkGks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:33:de:f2:1b:57:43:cc:af:7d:f2:5d:8a:2f:1e:a3:0c:8c:
         2f:a6:68:bf:49:08:7e:d9:c0:ad:db:27:90:4c:a7:e9:48:9a:
         2b:77:4b:61:27:b7:05:76:92:b3:e8:ba:a2:e5:4b:a8:1d:fc:
         f4:41:a0:8b:7f:1a:a0:bb:62:c8:b4:18:86:5e:1c:ce:29:6a:
         86:b3:bf:43:46:f1:c9:dc:0b:24:73:f2:08:d4:c2:bb:4e:61:
         64:61:61:5f:6d:34:d8:34:10:ae:1d:e8:4d:2d:3e:11:28:17:
         59:14:55:11:21:de:e5:8b:62:ea:d5:64:81:c7:53:1d:88:e4:
         85:8e:c0:f5:59:08:3b:95:d9:0b:75:b0:8e:af:2f:95:3a:c9:
         76:88:c5:24:28:62:a3:9a:f0:6d:ec:4f:8d:d4:c6:1c:67:33:
         6a:70:f7:0d:47:ba:50:12:82:46:de:59:de:b3:68:e5:d3:26:
         5a:a9:e9:0e:e7:b8:81:80:b0:d8:a7:2c:b9:80:a8:4e:5c:45:
         e1:6a:f0:6d:3e:f0:ef:0d:3a:a7:29:70:a5:02:90:67:9f:6b:
         0d:cb:78:74:68:ef:c5:45:bb:49:96:75:39:5e:99:ef:22:aa:
         1a:9d:cc:53:e8:86:8d:ad:91:77:71:5d:f7:85:5d:ed:89:2f:
         d1:06:fb:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE6gFykpnvUSocu8ptR1aKeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyM2E4MmZlMWJiZTg2ZjFhNmM4NzViOGQyYWY1MTkwMTYy
NDFhNGIwHhcNMjYxMDE0MTMwMDUzWhcNMjYxMDE1MTMwMDUzWjAzMTEwLwYDVQQD
EygwMzhkNGRiNWJmZjRjZjdiYTAyMGRmNmQ1MGY1OWE2YjMyNmQxOGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/rTzmh8wyp4+ahDTc/KANY6C57T
3vpExCGl7evqEEICXNBVSB5ZwaKF345uDzvOwYcBsTa+dnRWDcqO2dSpixAMPwNt
1B++fAGFt3pW53IEHu9gebnwMA83o6gI6WBw0NOVtalRz7cYxHbkZGubJLHeLiJI
oK0EQ7pweXCgZPJZ2deJLvGVGMGoJMynvXLsAtifbCKcpYmnnzSju08RF50Ay5iq
u3gjozAWeBJEV6SLXpWa52ABIdtGt+F1qWFUMI11RycSkLC93X1vkAVR33z6Sa6z
PlHb8Uz4KtFUukncH2z5MeMEcYiyaOoq+f9W5MufChExReo/LQBnvK7vNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAONTbW/9M97oCDfbVD1mmsybRi2MB8GA1UdIwQY
MBaAFHI6gv4bvobxpsh1uNKvUZAWJBpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2pxQ19odS1odkdteUhXNDBxOVJrQllrR2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yODA3YjEtYzc5NS00NzgzLTkzMzEt
MjhhZTNlNTQ4MjE5LzEvY2pxQ19odS1odkdteUhXNDBxOVJrQllrR2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yODA3YjEtYzc5NS00NzgzLTkzMzEtMjhhZTNlNTQ4MjE5
LzEvY2pxQ19odS1odkdteUhXNDBxOVJrQllrR2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTPe8htX
Q8yvffJdii8eowyML6Zov0kIftnArdsnkEyn6UiaK3dLYSe3BXaSs+i6ouVLqB38
9EGgi38aoLtiyLQYhl4czilqhrO/Q0bxydwLJHPyCNTCu05hZGFhX2002DQQrh3o
TS0+ESgXWRRVESHe5Yti6tVkgcdTHYjkhY7A9VkIO5XZC3Wwjq8vlTrJdojFJChi
o5rwbexPjdTGHGczanD3DUe6UBKCRt5Z3rNo5dMmWqnpDue4gYCw2KcsuYCoTlxF
4WrwbT7w7w06pylwpQKQZ59rDct4dGjvxUW7SZZ1OV6Z7yKqGp3MU+iGja2Rd3Fd
94Vd7Ykv0Qb7Lg==
-----END CERTIFICATE-----
Generated at Wed Oct 14 15:20:36 2026 by rpki-client