Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
File:                     rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json)
Hash identifier:          wryJQzSBp6om8uqpxJEpgY0f0rHkOL84deu8ewT5ILg=
Subject key identifier:   3E:45:E9:64:FD:A0:F8:FC:2F:3C:6B:D5:9E:FD:EA:6B:C1:24:9B:B9
Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
Certificate issuer:       /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Certificate serial:       01A06E7057BF5EE1BA6BD0EA75B72690755D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
Manifest number:          0D02
Signing time:             Fri 04 Sep 2026 22:00:51 +0000
Manifest this update:     Fri 04 Sep 2026 22:00:51 +0000
Manifest next update:     Sat 05 Sep 2026 22:00:51 +0000
Files and hashes:         1: cFj2gabjb2A6OS2M4OWiTy7sjlY.roa (hash: c2wHgi8z7Wquh1Yiowi4MCoX8zsu06SPgPbyIoYnmLY=)
                          2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: 6YIGjt1Sxsj4OYR6K7mqsFOkpzLoCJo5iBII19AtHdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:70:57:bf:5e:e1:ba:6b:d0:ea:75:b7:26:90:75:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
        Validity
            Not Before: Sep  4 22:00:51 2026 GMT
            Not After : Sep  5 22:00:51 2026 GMT
        Subject: CN=3e45e964fda0f8fc2f3c6bd59efdea6bc1249bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cf:d7:ab:23:25:f6:32:77:24:07:a2:d2:17:
                    81:c5:26:7f:ca:16:3b:a6:30:0e:b3:fc:aa:9c:29:
                    7a:0b:e5:b9:64:7b:7a:da:a9:7c:62:18:a0:0e:bf:
                    ab:95:a4:d5:a8:38:da:e8:51:2d:7e:8c:40:80:b1:
                    ab:1e:74:54:3e:db:7b:59:b4:56:22:09:a2:5c:80:
                    33:4e:53:a3:78:a0:41:31:65:0b:ff:60:4c:f4:08:
                    a5:cc:b3:5d:8e:ce:c4:a0:df:69:bd:da:43:6f:38:
                    64:4e:02:8f:8d:33:f5:64:f6:45:af:99:1f:8e:08:
                    27:1d:4e:bb:f7:49:8c:6f:2a:a9:eb:c6:19:50:da:
                    f0:fb:4a:f4:41:f3:5d:ea:63:8d:f7:bc:db:86:65:
                    ad:4c:b8:20:65:8b:0c:2e:f4:ce:eb:52:b9:a7:b3:
                    d4:ab:d2:a9:e6:a4:8f:a2:81:af:44:2d:91:55:2a:
                    d4:7c:0d:a6:5d:99:19:2f:61:1f:71:89:ad:85:54:
                    81:0a:08:a5:5c:cc:e9:f8:50:fd:e0:5d:58:70:67:
                    16:c7:6b:be:04:64:28:70:50:30:65:dc:45:70:6d:
                    72:78:2c:6d:1f:ef:f1:b3:cc:dc:d2:72:11:14:a8:
                    3d:a6:03:45:9a:eb:c6:3e:d6:33:36:34:ff:e8:2f:
                    78:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:45:E9:64:FD:A0:F8:FC:2F:3C:6B:D5:9E:FD:EA:6B:C1:24:9B:B9
            X509v3 Authority Key Identifier:
                keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d3:92:bc:bb:11:80:da:a8:02:dc:73:7d:a4:db:b3:d0:f9:
         00:92:84:ab:4f:85:3c:df:7f:fa:c3:f9:0a:89:5d:f4:bf:6f:
         c8:c0:d6:42:d4:59:f7:00:f0:71:55:17:1a:39:94:bd:79:73:
         a8:13:70:82:49:20:10:11:c2:32:26:e8:9d:8f:50:4d:17:e4:
         04:b4:62:2b:0a:0e:1b:bd:e3:f3:8a:3d:4e:1a:62:b2:6a:ec:
         76:e5:ea:b8:73:24:df:6b:dd:69:b3:67:25:61:b0:a5:ed:4a:
         09:84:8c:1a:0f:a6:70:86:d0:5f:2e:4e:2e:bd:c1:93:25:69:
         17:5a:71:3f:77:ae:86:2c:08:d6:77:7b:c8:46:bb:03:60:e6:
         b2:28:bb:a9:4d:27:75:c6:79:ea:94:01:1c:34:a9:b4:e1:52:
         57:e4:65:b0:8d:b8:73:41:19:b7:f4:4e:7e:bd:d8:ac:ea:18:
         1d:46:52:3a:d7:81:58:68:39:86:e9:8d:2c:54:a3:20:a6:45:
         aa:b9:f8:4d:fc:2d:59:ce:23:d4:08:0a:11:ce:cf:03:87:4d:
         85:a2:79:b1:ab:74:5a:1c:10:f5:83:02:65:ea:c3:a4:a0:d9:
         ba:cb:04:93:80:e2:24:5d:27:8f:b1:38:95:9e:be:4c:50:0c:
         8a:da:3b:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBucFe/XuG6a9DqdbcmkHVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOWJiZjlmNjIzMzEzZWIyYjE4MjczNTBiNDVhOWJhMWZk
OWRhNWYwHhcNMjYwOTA0MjIwMDUxWhcNMjYwOTA1MjIwMDUxWjAzMTEwLwYDVQQD
EygzZTQ1ZTk2NGZkYTBmOGZjMmYzYzZiZDU5ZWZkZWE2YmMxMjQ5YmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8/XqyMl9jJ3JAei0heBxSZ/yhY7
pjAOs/yqnCl6C+W5ZHt62ql8YhigDr+rlaTVqDja6FEtfoxAgLGrHnRUPtt7WbRW
IgmiXIAzTlOjeKBBMWUL/2BM9AilzLNdjs7EoN9pvdpDbzhkTgKPjTP1ZPZFr5kf
jggnHU6790mMbyqp68YZUNrw+0r0QfNd6mON97zbhmWtTLggZYsMLvTO61K5p7PU
q9Kp5qSPooGvRC2RVSrUfA2mXZkZL2EfcYmthVSBCgilXMzp+FD94F1YcGcWx2u+
BGQocFAwZdxFcG1yeCxtH+/xs8zc0nIRFKg9pgNFmuvGPtYzNjT/6C94mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5F6WT9oPj8Lzxr1Z796mvBJJu5MB8GA1UdIwQY
MBaAFKybv59iMxPrKxgnNQtFqbof2dpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jN2I1NzMtMjc2OC00NzNjLWE1YzQt
NTdlZjdmZWU3NTljLzEvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jN2I1NzMtMjc2OC00NzNjLWE1YzQtNTdlZjdmZWU3NTlj
LzEvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONOSvLsR
gNqoAtxzfaTbs9D5AJKEq0+FPN9/+sP5Cold9L9vyMDWQtRZ9wDwcVUXGjmUvXlz
qBNwgkkgEBHCMibonY9QTRfkBLRiKwoOG73j84o9ThpismrsduXquHMk32vdabNn
JWGwpe1KCYSMGg+mcIbQXy5OLr3BkyVpF1pxP3euhiwI1nd7yEa7A2Dmsii7qU0n
dcZ56pQBHDSptOFSV+RlsI24c0EZt/ROfr3YrOoYHUZSOteBWGg5humNLFSjIKZF
qrn4TfwtWc4j1AgKEc7PA4dNhaJ5sat0WhwQ9YMCZerDpKDZussEk4DiJF0nj7E4
lZ6+TFAMito78g==
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:23:33 2026 by rpki-client