Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
File:                     jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft (raw, json)
Hash identifier:          g3fDhJqrLKqmOBIvE8FPhojWZjE2Xmu5tIpbDRwTg68=
Subject key identifier:   28:07:AD:40:D3:54:B0:FB:D5:F5:14:BD:30:5B:8D:32:85:E4:51:66
Authority key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
Certificate issuer:       /CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Certificate serial:       01A1751519D66DBA6F88DCC8316F99C5BAD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
Manifest number:          0AD3
Signing time:             Sun 25 Oct 2026 22:01:19 +0000
Manifest this update:     Sun 25 Oct 2026 22:01:19 +0000
Manifest next update:     Mon 26 Oct 2026 22:01:19 +0000
Files and hashes:         1: hzS81GvZENh5FRkGbicEF2LdARk.roa (hash: q8906Tblj2ap141UnuPHJfh6mZPh8QOzg/WX4QoWW8Q=)
                          2: jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl (hash: xFic/fwPCY4/ERY0ZJ2htHfsS4tcVrvOZ11R8Cd4nxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 15:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:15:19:d6:6d:ba:6f:88:dc:c8:31:6f:99:c5:ba:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
        Validity
            Not Before: Oct 25 22:01:19 2026 GMT
            Not After : Oct 26 22:01:19 2026 GMT
        Subject: CN=2807ad40d354b0fbd5f514bd305b8d3285e45166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:42:9f:a1:e0:2e:06:e7:6e:35:0a:b0:a0:b6:
                    a6:bd:d5:b7:da:76:22:aa:b8:a8:f9:ab:7a:cd:3a:
                    e5:6b:34:34:83:01:7f:f2:59:fe:74:b6:7a:65:5b:
                    d3:84:32:6c:21:b8:9d:30:6a:b2:6a:6c:16:cc:83:
                    ef:42:01:e0:5b:d5:c6:aa:0c:4d:5f:6b:74:e8:53:
                    c7:51:7f:17:13:6d:04:12:24:2a:ee:e7:a4:3d:3d:
                    3a:be:66:9e:c6:46:f5:0d:7b:28:20:2e:36:44:42:
                    a6:d6:46:53:24:44:b6:37:b3:94:5a:18:b5:40:1c:
                    de:59:7f:3b:9d:59:36:ce:19:50:df:42:36:51:7b:
                    1b:dc:8d:74:79:3d:94:4b:72:45:1b:58:e3:1d:f1:
                    16:46:ba:98:62:80:d5:72:51:3d:2a:91:36:41:16:
                    98:7d:b2:a9:97:ad:ec:5f:79:47:29:8e:49:90:3c:
                    e6:eb:7a:6c:1f:a8:86:ec:a6:74:c2:29:82:bb:7e:
                    3c:79:f1:b7:98:10:36:52:09:42:db:a0:5b:92:9e:
                    42:18:da:9e:32:ec:61:60:72:be:0e:45:24:ac:ca:
                    e4:02:77:da:ca:cf:ad:ec:be:63:a5:25:e8:c6:8d:
                    8e:b2:27:d2:ed:44:ef:62:fc:15:01:bc:0d:7f:6f:
                    fe:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:07:AD:40:D3:54:B0:FB:D5:F5:14:BD:30:5B:8D:32:85:E4:51:66
            X509v3 Authority Key Identifier:
                keyid:8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:cd:1f:2a:1b:a6:46:ce:7a:09:66:17:df:ed:d2:c6:5b:ee:
         38:fc:ff:88:ee:1d:33:64:6a:1d:e3:bf:05:d2:78:c8:2f:87:
         11:3f:35:84:3c:68:b8:58:b8:d4:38:58:92:69:bb:74:45:d3:
         83:10:3c:83:c0:d0:8d:3f:45:f4:48:00:16:12:66:90:3d:8a:
         17:6e:90:ae:fd:78:4f:03:8b:55:7a:fd:dc:4c:8b:6d:4a:78:
         46:33:7e:6a:22:1c:ce:f9:5f:0d:3d:96:90:52:fb:2d:67:f4:
         56:11:da:0b:11:aa:ea:ec:f5:36:81:fa:bf:d4:56:d4:e9:d8:
         48:7c:66:67:8c:07:b7:8a:93:41:6f:48:34:67:8d:f6:f9:d1:
         fa:fb:18:c1:e6:aa:5b:51:5a:be:07:4f:3f:ef:92:9e:82:dd:
         09:30:8d:42:72:00:29:6b:01:fd:eb:7e:76:97:fe:d6:b3:f4:
         da:9f:c8:6b:cf:2a:37:b9:15:22:fd:fc:81:a4:a1:60:e4:91:
         6d:ea:fd:0e:50:c2:d6:1a:7f:b1:5e:0f:98:73:43:c3:23:b4:
         cb:71:03:89:30:b4:be:63:bb:86:50:ea:e2:2c:67:9f:d2:09:
         66:00:e2:60:ed:fb:c5:f9:58:8f:e4:de:97:2f:ae:84:c4:79:
         61:47:75:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:51:05 2026 by rpki-client