Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
File:                     JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json)
Hash identifier:          acpcUCFOgrWHTPxokP6ADoUsd7ocifPzONLDTmFxW78=
Subject key identifier:   4A:21:0C:CD:D0:F0:BB:12:9A:B9:DE:64:12:78:CF:57:BB:F3:F2:2D
Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
Certificate issuer:       /CN=24cacceee35ff87cd678ef6a92262cefce8492df
Certificate serial:       01A17DAA767C06E3677787153E2D60BF6CFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
Manifest number:          1801
Signing time:             Tue 27 Oct 2026 14:01:25 +0000
Manifest this update:     Tue 27 Oct 2026 14:01:25 +0000
Manifest next update:     Wed 28 Oct 2026 14:01:25 +0000
Files and hashes:         1: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: SGUrjbBcjEJTYzHOy81LF7LCiaQPM5acJv3eme0rEg8=)
                          2: gC8xECPXIz3izz_wPFR4--x3dfA.roa (hash: 8tJModKEf7OvBOeGVxRABAMXSwEYcpcHv0L6opRUwuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:aa:76:7c:06:e3:67:77:87:15:3e:2d:60:bf:6c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df
        Validity
            Not Before: Oct 27 14:01:25 2026 GMT
            Not After : Oct 28 14:01:25 2026 GMT
        Subject: CN=4a210ccdd0f0bb129ab9de641278cf57bbf3f22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:63:23:4d:13:e0:39:a6:84:5b:6c:88:f8:10:
                    29:0d:0a:92:2f:2e:2d:de:3b:d0:cb:f3:c3:09:38:
                    3c:d3:64:49:59:e8:61:f5:5c:e4:6c:ea:0c:8e:48:
                    f6:92:e0:8a:b1:58:a4:e4:e1:b2:c6:2e:90:50:24:
                    07:71:6d:3d:76:98:6c:01:a6:3f:02:b3:86:cf:a2:
                    ce:59:d4:ec:c3:05:c7:d2:41:4e:04:35:4a:4e:9e:
                    cb:96:25:bc:c2:88:18:6e:a9:8c:98:c8:df:7e:be:
                    8d:ba:81:d3:ef:92:53:0e:09:0d:e8:83:7f:f9:77:
                    0e:d7:c0:56:8c:17:31:0d:8e:0f:8d:2a:b2:78:d7:
                    c4:97:98:87:4a:54:d7:42:14:ec:3b:98:dd:a8:76:
                    76:6c:59:bc:48:43:21:f8:e5:97:ab:39:85:39:34:
                    b2:47:c2:f4:60:d9:3c:a5:16:b3:ff:fe:90:89:d7:
                    a5:1a:be:f5:b8:ac:24:b6:bc:92:86:32:bf:74:ef:
                    d8:8d:56:21:06:6d:9a:83:4c:8e:0d:b8:2e:5f:f2:
                    19:df:b6:de:6d:11:e8:57:e7:22:c5:39:e7:ec:81:
                    fd:d7:20:71:95:6a:a6:89:5d:7b:2b:2f:11:a6:03:
                    4b:a2:21:f8:04:fa:5c:54:4e:8b:e1:c3:33:a9:f5:
                    ad:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:21:0C:CD:D0:F0:BB:12:9A:B9:DE:64:12:78:CF:57:BB:F3:F2:2D
            X509v3 Authority Key Identifier:
                keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:50:7b:8d:f3:70:e8:7f:a7:bb:9a:93:7c:8b:f0:76:ec:89:
         56:2c:ac:78:ea:20:87:ba:05:46:b7:01:e8:da:f5:95:cf:d6:
         86:49:87:4a:b0:d5:34:ba:da:88:f3:1a:27:82:64:45:a1:f4:
         54:f9:c5:82:91:ae:0a:9e:a1:06:84:d8:c3:a4:37:b4:01:a1:
         71:b8:29:c0:14:6c:f3:72:c9:13:e8:44:39:14:f8:78:b5:99:
         8a:40:a8:aa:95:d3:cd:96:96:1c:5b:3c:54:f2:d8:9a:7f:e5:
         5a:ee:b3:3c:60:cd:ce:74:a8:48:60:b9:af:e6:8a:81:b5:e2:
         66:2d:be:4a:f4:47:a4:ab:16:d0:c4:79:e2:14:c4:04:da:ae:
         9c:ed:8f:e1:7e:2b:dd:95:3e:a6:69:f7:ea:84:b0:50:c8:3d:
         31:18:6e:f4:a2:e0:81:5a:54:3b:b4:74:44:1f:18:a9:61:2a:
         7c:62:30:e9:3d:1d:ec:2f:23:8b:d9:aa:f6:02:13:cb:ee:4f:
         20:13:40:39:19:0e:cb:db:5d:2a:6d:9e:8f:01:c8:fd:f3:52:
         c4:a7:07:9f:70:9f:ae:2e:7f:77:3a:d3:f9:3a:d2:3b:f4:40:
         f3:9b:c5:27:47:1f:b5:6a:d0:b0:8f:f9:30:b7:0c:9e:93:c4:
         27:9a:29:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:03:08 2026 by rpki-client