Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
File:                     JGdgNiMUO9G8eo_J2OedlVlhGGA.mft (raw, json)
Hash identifier:          sTI3XgiR3dLz+crhaPT2h2hmu1QuylUXuuZdpG/ebGU=
Subject key identifier:   F9:91:85:57:55:F0:BB:9B:73:8B:BA:76:2A:55:5E:6D:92:E7:18:45
Authority key identifier: 24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60
Certificate issuer:       /CN=2467603623143bd1bc7a8fc9d8e79d9559611860
Certificate serial:       01A169F6FD2E957A12B8993FF8A4D01C2F90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
Manifest number:          1990
Signing time:             Fri 23 Oct 2026 18:12:36 +0000
Manifest this update:     Fri 23 Oct 2026 18:12:36 +0000
Manifest next update:     Sat 24 Oct 2026 18:12:36 +0000
Files and hashes:         1: JGdgNiMUO9G8eo_J2OedlVlhGGA.crl (hash: KmRtCkNpPDP45fKMfmKV/sCXMHiSRhMn0XpDB+1TGeI=)
                          2: KsLpYaplYWekI62QRi3E0G61Ms4.roa (hash: PFuTGnOnXeAK/sML2FBSdaIxc5MVu6TA5GmDr9dlzjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 18:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:69:f6:fd:2e:95:7a:12:b8:99:3f:f8:a4:d0:1c:2f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2467603623143bd1bc7a8fc9d8e79d9559611860
        Validity
            Not Before: Oct 23 18:12:36 2026 GMT
            Not After : Oct 24 18:12:36 2026 GMT
        Subject: CN=f991855755f0bb9b738bba762a555e6d92e71845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b9:74:cb:56:ed:f5:de:c9:de:1f:a2:bf:8d:
                    96:13:3f:30:69:2f:ef:78:5c:3d:e3:6d:a0:2d:da:
                    b4:04:47:a9:a3:6d:e8:63:2c:3e:9d:70:68:86:83:
                    af:a2:06:19:33:72:e1:b2:22:fc:14:63:e8:0b:80:
                    a5:30:be:5d:10:8a:9f:ba:82:49:04:6b:10:39:fd:
                    5d:95:a8:d4:1d:df:9c:ba:8d:85:7d:27:ac:aa:1d:
                    6b:a6:61:ed:e0:20:b2:0f:d0:09:49:b2:f0:a9:ea:
                    4f:2f:49:8c:3f:91:af:04:dc:78:20:2d:d3:e1:2c:
                    ec:0b:8a:74:ad:3c:35:e6:dd:9a:1f:c4:5f:f1:dc:
                    fd:97:60:81:c4:c2:63:b3:62:e1:5f:b6:95:7e:8b:
                    5e:be:7a:f4:ce:72:0a:17:ce:a8:10:7d:d2:1c:69:
                    14:a5:c5:92:87:b8:53:3e:df:f5:87:c5:6c:52:7a:
                    f7:89:10:57:43:81:93:d5:81:96:8a:92:fc:16:7c:
                    48:3b:5b:56:5b:80:58:b3:45:25:4e:22:8e:cf:1b:
                    14:d2:e0:28:bc:a4:ee:d2:f6:f4:f4:e4:38:6b:0d:
                    d2:3d:d5:d6:53:31:cd:b3:b2:37:79:70:84:4d:58:
                    48:2c:be:81:9f:a7:b8:f2:37:02:9f:1d:c4:57:f5:
                    52:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:91:85:57:55:F0:BB:9B:73:8B:BA:76:2A:55:5E:6D:92:E7:18:45
            X509v3 Authority Key Identifier:
                keyid:24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:04:22:ef:3b:54:32:0e:fd:45:6c:d3:8f:9d:30:95:00:a8:
         a6:71:b7:a6:8e:6a:94:b0:8c:d1:81:57:2c:e6:f6:4d:fd:93:
         56:dd:0e:0e:b5:dc:29:d6:30:ed:de:e4:10:f6:df:9b:c0:80:
         97:32:fc:b2:f8:b1:0e:b5:89:c4:7c:08:5c:46:74:c0:1d:eb:
         01:04:50:6e:e6:87:97:16:d8:d4:d1:20:f5:36:51:7d:03:17:
         80:b4:d8:e7:53:cd:e8:0e:33:bc:7d:37:3a:2f:4f:99:d2:a8:
         14:af:0f:c6:50:7d:f9:dc:a2:74:bf:2a:c9:d2:5b:f2:05:7d:
         ae:c2:d7:54:81:67:8d:dc:41:1a:6f:af:b5:c8:8b:f1:ac:b5:
         fe:e8:e1:91:7d:cd:08:6f:9f:14:4c:cb:3d:a5:be:de:9e:e4:
         82:d6:b0:c1:97:96:94:c5:d8:75:de:a5:91:48:37:0f:29:06:
         0e:9c:b9:d2:f6:8b:bb:23:9e:68:5f:d9:17:44:a2:6b:19:45:
         74:13:3e:3d:31:16:7a:28:07:5d:5b:5a:30:31:f2:46:4a:47:
         2d:93:08:0d:03:ee:b1:af:10:e2:1c:9b:c4:12:df:b7:58:5a:
         ce:55:60:68:12:73:30:53:cf:0b:eb:81:9d:97:9d:41:12:1d:
         43:8e:4b:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFp9v0ulXoSuJk/+KTQHC+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0Njc2MDM2MjMxNDNiZDFiYzdhOGZjOWQ4ZTc5ZDk1NTk2
MTE4NjAwHhcNMjYxMDIzMTgxMjM2WhcNMjYxMDI0MTgxMjM2WjAzMTEwLwYDVQQD
EyhmOTkxODU1NzU1ZjBiYjliNzM4YmJhNzYyYTU1NWU2ZDkyZTcxODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrl0y1bt9d7J3h+iv42WEz8waS/v
eFw9422gLdq0BEepo23oYyw+nXBohoOvogYZM3LhsiL8FGPoC4ClML5dEIqfuoJJ
BGsQOf1dlajUHd+cuo2FfSesqh1rpmHt4CCyD9AJSbLwqepPL0mMP5GvBNx4IC3T
4SzsC4p0rTw15t2aH8Rf8dz9l2CBxMJjs2LhX7aVfotevnr0znIKF86oEH3SHGkU
pcWSh7hTPt/1h8VsUnr3iRBXQ4GT1YGWipL8FnxIO1tWW4BYs0UlTiKOzxsU0uAo
vKTu0vb09OQ4aw3SPdXWUzHNs7I3eXCETVhILL6Bn6e48jcCnx3EV/VSOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmRhVdV8Lubc4u6dipVXm2S5xhFMB8GA1UdIwQY
MBaAFCRnYDYjFDvRvHqPydjnnZVZYRhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZGU0NGItZjJjMC00MWU0LWIxNDEt
ZmI0NjQyZDJkOWE2LzEvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZGU0NGItZjJjMC00MWU0LWIxNDEtZmI0NjQyZDJkOWE2
LzEvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgQi7ztU
Mg79RWzTj50wlQCopnG3po5qlLCM0YFXLOb2Tf2TVt0ODrXcKdYw7d7kEPbfm8CA
lzL8svixDrWJxHwIXEZ0wB3rAQRQbuaHlxbY1NEg9TZRfQMXgLTY51PN6A4zvH03
Oi9PmdKoFK8PxlB9+dyidL8qydJb8gV9rsLXVIFnjdxBGm+vtciL8ay1/ujhkX3N
CG+fFEzLPaW+3p7kgtawwZeWlMXYdd6lkUg3DykGDpy50vaLuyOeaF/ZF0SiaxlF
dBM+PTEWeigHXVtaMDHyRkpHLZMIDQPusa8Q4hybxBLft1hazlVgaBJzMFPPC+uB
nZedQRIdQ45LhA==
-----END CERTIFICATE-----
Generated at Sat Oct 24 05:29:33 2026 by rpki-client