Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/7e62df-26b5-4ed9-99d6-c70f72336622/1/Jkntt3fYRPYt85gp_3tmdVJMGXw.mft
File:                     Jkntt3fYRPYt85gp_3tmdVJMGXw.mft (raw, json)
Hash identifier:          hWsbvcVB37Kk+GO0ow46MZQ9scloUPZTul+aBJuUBr8=
Subject key identifier:   62:BE:3B:CE:8C:9B:1F:C7:D3:19:83:61:1A:54:11:6F:57:49:C5:99
Authority key identifier: 26:49:ED:B7:77:D8:44:F6:2D:F3:98:29:FF:7B:66:75:52:4C:19:7C
Certificate issuer:       /CN=2649edb777d844f62df39829ff7b6675524c197c
Certificate serial:       01A11DF675A1B9DCD9713381064CA3243B56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jkntt3fYRPYt85gp_3tmdVJMGXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/7e62df-26b5-4ed9-99d6-c70f72336622/1/Jkntt3fYRPYt85gp_3tmdVJMGXw.mft
Manifest number:          DE
Signing time:             Fri 09 Oct 2026 00:00:53 +0000
Manifest this update:     Fri 09 Oct 2026 00:00:53 +0000
Manifest next update:     Sat 10 Oct 2026 00:00:53 +0000
Files and hashes:         1: 9yWd6XRJpPbXU6BtQ4b4ycBqt0Y.roa (hash: n0OesgJjlawYzjCz9VRVHbTYEYTlkAqbiCq2tcO+Y9I=)
                          2: Jkntt3fYRPYt85gp_3tmdVJMGXw.crl (hash: +dUbWiWm1b1FpnPO2gS5meuXTm2U37jRed0wqQOeO6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/7e62df-26b5-4ed9-99d6-c70f72336622/1/Jkntt3fYRPYt85gp_3tmdVJMGXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/7e62df-26b5-4ed9-99d6-c70f72336622/1/Jkntt3fYRPYt85gp_3tmdVJMGXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jkntt3fYRPYt85gp_3tmdVJMGXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 22:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1d:f6:75:a1:b9:dc:d9:71:33:81:06:4c:a3:24:3b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2649edb777d844f62df39829ff7b6675524c197c
        Validity
            Not Before: Oct  9 00:00:53 2026 GMT
            Not After : Oct 10 00:00:53 2026 GMT
        Subject: CN=62be3bce8c9b1fc7d31983611a54116f5749c599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2c:14:d6:0d:64:c4:77:a5:a2:40:a5:5c:d2:
                    b9:97:9a:55:ec:1b:2e:95:eb:06:f9:f8:13:cf:7c:
                    8c:cf:6c:af:9f:e0:86:3a:a9:27:51:1d:55:70:01:
                    56:cd:a0:7e:8e:ef:57:05:14:9d:a8:b5:f8:d7:9d:
                    0a:b3:92:96:b6:d4:a2:e3:08:8a:ea:1b:d5:54:64:
                    26:67:b7:95:c3:cf:aa:5d:37:5e:2d:c6:71:46:bc:
                    72:99:c3:d1:53:d1:a0:55:4d:29:a1:36:30:c6:88:
                    e1:50:bc:44:b3:46:7f:c9:cf:2c:72:ad:ab:2a:31:
                    68:9b:57:96:c5:53:58:d8:11:b9:3d:55:95:67:7a:
                    94:dd:fb:40:85:cd:0f:66:94:81:e7:65:7a:4d:0d:
                    10:0c:b6:69:a2:77:aa:c6:53:56:b2:fd:76:84:d3:
                    42:00:6a:55:d8:9b:79:e7:09:b9:3d:ff:77:f1:71:
                    22:be:4b:0d:ff:37:99:33:82:fb:2b:47:ce:2b:b0:
                    a7:c3:14:7e:97:57:f0:2e:1e:a6:aa:72:7a:5b:50:
                    3e:b9:aa:69:55:12:e9:54:3e:7d:f7:cf:52:87:3a:
                    b0:1f:81:a6:99:d3:4f:bb:21:bd:c6:62:ff:37:51:
                    b3:c4:30:8f:64:27:7e:0d:3a:3f:b4:e8:57:33:2f:
                    6a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BE:3B:CE:8C:9B:1F:C7:D3:19:83:61:1A:54:11:6F:57:49:C5:99
            X509v3 Authority Key Identifier:
                keyid:26:49:ED:B7:77:D8:44:F6:2D:F3:98:29:FF:7B:66:75:52:4C:19:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jkntt3fYRPYt85gp_3tmdVJMGXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e62df-26b5-4ed9-99d6-c70f72336622/1/Jkntt3fYRPYt85gp_3tmdVJMGXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e62df-26b5-4ed9-99d6-c70f72336622/1/Jkntt3fYRPYt85gp_3tmdVJMGXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:6e:0c:23:e8:70:a1:9e:a3:9b:11:1a:54:4f:5d:d0:26:39:
         ce:2a:5b:b1:25:45:d8:ea:c1:f4:ad:09:a8:55:b9:03:12:99:
         ae:58:af:02:f3:6c:62:e5:8f:9c:0f:28:c8:74:28:3f:81:db:
         10:c2:65:aa:f8:8b:d4:62:54:26:bc:9b:e3:9c:8a:85:2f:92:
         ed:83:0e:8b:38:bc:ea:90:dc:3b:65:36:8e:93:ac:18:27:c0:
         a1:af:f9:81:a0:21:32:09:ad:4b:c0:e8:8f:3c:dd:ae:bb:c1:
         1a:65:5a:b7:de:bb:18:e4:07:80:b0:db:e7:88:e5:95:e3:b3:
         1b:1b:5a:22:ae:10:d3:4b:76:07:7c:cc:2f:b5:a0:1f:8f:1e:
         e2:b1:0c:15:a2:67:07:c4:15:4f:e8:60:8b:0a:61:e8:65:a0:
         41:39:fb:44:5a:b2:34:ce:5f:b4:4c:86:c4:57:2c:02:c0:40:
         d0:43:33:fe:26:72:5b:dc:55:9e:d9:ba:90:dc:7f:4c:92:5e:
         63:be:17:ff:92:2c:53:dd:dd:22:cb:c2:86:63:e8:d4:b2:ab:
         1d:67:7a:3b:40:55:ea:77:00:f2:c2:bd:fd:27:f5:85:05:7e:
         95:9b:69:4b:4a:e2:aa:02:fd:58:fb:ea:9b:ea:3b:14:9a:07:
         f1:8a:4d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 06:01:52 2026 by rpki-client