Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/1J1wg4j_AyhokxHaGdp_739W2LY.mft
File:                     1J1wg4j_AyhokxHaGdp_739W2LY.mft (raw, json)
Hash identifier:          zgl22yOL8vFQn6CZAoUmiCSgxuqfgLWOYAvmJFo4xFM=
Subject key identifier:   76:08:BA:B0:EC:9F:09:B8:BE:5A:13:79:F3:23:B2:FF:89:78:20:62
Authority key identifier: D4:9D:70:83:88:FF:03:28:68:93:11:DA:19:DA:7F:EF:7F:56:D8:B6
Certificate issuer:       /CN=d49d708388ff0328689311da19da7fef7f56d8b6
Certificate serial:       01A0412979A1F818F6FD2C2EBD5038AE9907
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1J1wg4j_AyhokxHaGdp_739W2LY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/1J1wg4j_AyhokxHaGdp_739W2LY.mft
Manifest number:          9B
Signing time:             Thu 27 Aug 2026 03:00:32 +0000
Manifest this update:     Thu 27 Aug 2026 03:00:32 +0000
Manifest next update:     Fri 28 Aug 2026 03:00:32 +0000
Files and hashes:         1: 1J1wg4j_AyhokxHaGdp_739W2LY.crl (hash: ZY+sXjyXYrq5F1XLXhpqJ/fBMbxCgPNWA6HTKiA0VJM=)
                          2: jvM4PnIsoK-M1fMYfByGiC5thx0.roa (hash: 8SuPOUTpaRe3fwMYlvBgvK2dTEPcw/0mWRCq/h+2VGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/1J1wg4j_AyhokxHaGdp_739W2LY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/1J1wg4j_AyhokxHaGdp_739W2LY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1J1wg4j_AyhokxHaGdp_739W2LY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:29:79:a1:f8:18:f6:fd:2c:2e:bd:50:38:ae:99:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49d708388ff0328689311da19da7fef7f56d8b6
        Validity
            Not Before: Aug 27 03:00:32 2026 GMT
            Not After : Aug 28 03:00:32 2026 GMT
        Subject: CN=7608bab0ec9f09b8be5a1379f323b2ff89782062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1a:cb:ec:66:ff:bf:1f:63:99:13:36:b5:95:
                    31:f3:58:ef:c3:4b:86:de:22:7b:8a:d8:f5:4e:ec:
                    63:c4:97:6f:37:47:cd:51:28:bb:b6:c0:d0:e3:41:
                    0c:c0:4d:a1:18:7c:3b:72:14:33:a5:67:b0:40:5a:
                    54:1d:03:d0:29:03:cc:02:4b:24:a7:16:8f:21:a4:
                    8e:db:ac:92:7a:13:26:d5:23:0c:8f:8a:1d:61:5a:
                    a6:6d:9d:b3:42:8f:be:03:a7:f9:fe:8d:ad:2a:72:
                    c6:45:40:d0:d1:f7:7a:27:44:8b:10:73:64:4f:fa:
                    bc:08:8c:74:46:fa:65:c0:1b:ab:99:58:48:8e:42:
                    61:e2:f8:16:bc:a7:01:9e:c0:0f:c9:ec:88:e6:c4:
                    51:b8:4c:62:6a:0c:16:ca:6e:4b:61:ef:54:7b:1a:
                    cd:69:81:8f:8c:4a:43:c9:59:d3:00:d2:f4:7f:49:
                    34:9e:ae:e7:f1:43:92:13:b3:20:7d:3a:f6:f5:68:
                    3f:29:a3:1d:18:77:2e:ef:17:f8:7c:4f:f3:ba:93:
                    04:9e:dd:12:99:2f:a8:af:1b:3b:84:7a:89:f8:56:
                    7e:8e:f3:fd:58:aa:52:8f:7e:fe:52:ec:b7:f2:16:
                    1c:03:ac:6c:99:4f:0b:c4:77:d6:4e:e2:d1:b8:1a:
                    c3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:08:BA:B0:EC:9F:09:B8:BE:5A:13:79:F3:23:B2:FF:89:78:20:62
            X509v3 Authority Key Identifier:
                keyid:D4:9D:70:83:88:FF:03:28:68:93:11:DA:19:DA:7F:EF:7F:56:D8:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1J1wg4j_AyhokxHaGdp_739W2LY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/1J1wg4j_AyhokxHaGdp_739W2LY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/1J1wg4j_AyhokxHaGdp_739W2LY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:fa:41:01:ec:a7:7d:d6:1b:ab:2f:eb:4e:6c:db:91:5a:b7:
         44:54:30:95:42:76:e2:61:81:4b:b0:28:db:02:63:ac:30:33:
         ec:a9:86:00:6d:1f:81:d4:af:f9:6c:de:a5:96:f6:d4:97:c5:
         97:8a:0c:6b:af:91:fd:67:6b:2b:4c:ee:30:96:cc:c8:44:f2:
         e4:b7:af:53:0e:4f:ea:8a:e6:a6:cc:a1:b4:17:21:7f:70:03:
         66:cf:41:7b:57:b1:ec:cb:c6:4b:b1:d1:93:e1:e0:2b:1e:53:
         00:53:0d:35:83:7a:09:a2:64:55:5e:e7:a8:1b:1a:23:7d:63:
         b3:55:4e:c7:ee:0b:ac:27:5a:50:93:97:2d:aa:7c:88:19:45:
         86:b8:ce:7e:b5:09:24:98:34:d8:8c:f7:22:aa:7b:11:c3:95:
         d3:ab:d3:5e:0a:40:88:a2:b9:19:2f:2f:e7:e8:18:2f:6f:2c:
         28:31:ac:d4:b6:ae:40:35:01:49:32:d9:65:f4:cf:ea:7e:44:
         e6:ad:b6:9b:32:d4:ee:69:15:7e:db:9b:f4:23:33:c6:7a:c1:
         d5:ff:a3:77:5d:74:ab:1d:04:3d:be:a4:61:47:b3:48:a6:44:
         68:77:e1:00:ac:9b:c8:ca:5f:33:87:e7:a6:cf:8a:01:08:ab:
         cf:82:52:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:04:21 2026 by rpki-client