Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File:                     rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier:          tyrJWl8/xzx6z7uvozrmLW5+loVkHpOwyVJl46urGjQ=
Subject key identifier:   A5:97:C8:F0:A8:B4:67:DF:F3:1C:40:01:DC:6E:1C:5B:C4:3B:9E:92
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer:       /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial:       01A181502076A743015C08B28FBBF617B3EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number:          1597
Signing time:             Wed 28 Oct 2026 07:01:14 +0000
Manifest this update:     Wed 28 Oct 2026 07:01:14 +0000
Manifest next update:     Thu 29 Oct 2026 07:01:14 +0000
Files and hashes:         1: 0MDmf31Geq28sqW5uhK6N30LoZg.roa (hash: EpA+5vkgIFjeVI3itIuTpuLJ6aAzCK55k0xhYt0MpnY=)
                          2: 2pu1vkKFjna4Dm_cwSi5R4FE2g4.roa (hash: FM1p/9Yj7KBBXqnWBSoCV4VhHGxp22FujL3gdqNAgz0=)
                          3: Xvepx433VAtdgPI_baO5XGR3A8U.roa (hash: Hb64A6S05X/K5EFwUyHoMmk1FNOpGqOBloL7O8dOS+s=)
                          4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: f1jULjTKcYWKTwI68a2Y8QBFHiLAzV24tqyq6oSBiGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:50:20:76:a7:43:01:5c:08:b2:8f:bb:f6:17:b3:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
        Validity
            Not Before: Oct 28 07:01:14 2026 GMT
            Not After : Oct 29 07:01:14 2026 GMT
        Subject: CN=a597c8f0a8b467dff31c4001dc6e1c5bc43b9e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:97:75:5e:f4:c9:ae:44:14:32:85:8a:86:
                    0f:86:92:6b:85:9f:41:82:cb:cd:28:6d:ef:cc:46:
                    36:e4:df:25:b7:61:22:e2:ee:d5:d7:c9:b9:3e:b7:
                    64:ac:f6:c2:91:0d:a9:8e:a1:c5:c3:47:82:71:49:
                    4f:7d:8b:2d:a2:dd:b0:32:fc:b6:54:27:6f:ad:42:
                    b1:a0:5c:59:ca:47:6c:d9:4b:9b:c9:94:57:ab:09:
                    63:f7:26:7c:d5:04:12:db:81:96:a0:99:ee:19:ce:
                    3b:04:45:5b:a2:2e:d0:32:9f:ee:47:90:aa:47:2e:
                    49:f1:7f:f7:46:71:05:a4:d4:72:ba:64:fa:dd:a0:
                    8a:78:80:74:ac:0b:8f:87:21:fd:68:82:19:95:36:
                    ee:06:9f:f2:bf:1d:6b:14:83:00:72:4e:fb:ab:c4:
                    30:b2:d7:b2:77:85:89:92:da:9d:3b:b6:0f:cd:40:
                    cb:72:a3:25:39:de:9c:cd:21:4f:69:16:0e:4d:9a:
                    5d:9a:ac:a7:fb:6a:c1:a1:d8:65:81:00:78:d7:4b:
                    94:2d:cf:12:6d:14:c4:da:fb:3c:2d:cc:6b:74:1a:
                    cf:79:60:f3:a7:f1:9c:42:48:aa:d2:14:27:29:7b:
                    b1:5b:df:bf:bd:a8:f5:0e:55:90:0a:57:80:fa:6b:
                    24:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:97:C8:F0:A8:B4:67:DF:F3:1C:40:01:DC:6E:1C:5B:C4:3B:9E:92
            X509v3 Authority Key Identifier:
                keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:64:8c:b8:ae:cc:48:b9:59:7e:fd:10:0b:79:c9:9c:5e:31:
         05:28:ab:78:5c:ef:2e:7f:46:4d:ff:ae:66:4f:38:a8:06:44:
         7d:8b:29:2b:70:89:42:c1:0c:59:6a:33:65:95:17:5b:b6:3b:
         22:37:9f:7e:1b:6d:3e:51:06:df:37:b4:ae:23:e2:a9:14:ee:
         08:c3:50:3c:2e:6f:33:9b:3b:6b:48:c4:ef:2e:01:84:98:be:
         90:0a:10:68:58:ae:f1:d2:67:4b:e8:41:00:bf:12:4f:eb:25:
         8e:0d:d2:e8:3d:78:27:43:11:c5:0c:4d:ea:c6:f3:22:2c:b0:
         7e:09:34:83:97:31:3f:81:97:29:a0:80:56:ce:ef:cd:e8:e5:
         7d:80:f6:5f:b7:c7:4f:2a:e9:f7:89:c4:fa:f2:ce:e1:4f:e4:
         48:d1:88:b3:0f:99:96:8b:16:68:93:d8:9f:b6:86:de:dd:9b:
         ed:ad:b8:cb:3b:fc:7a:41:db:2a:73:a9:5c:cc:6e:7d:1b:a6:
         4b:38:99:0e:27:95:15:83:14:06:fc:ee:dc:fe:95:c3:c5:ec:
         aa:5a:c9:74:2b:f8:39:c1:82:82:86:0d:5e:a8:1c:a5:b4:07:
         11:43:50:4e:72:bd:d5:e2:e9:71:12:da:96:b0:0a:18:e1:0b:
         76:b6:52:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 17:23:24 2026 by rpki-client