Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
File:                     JrFSTsAdz0BfRBcYKe1nopkqpC0.mft (raw, json)
Hash identifier:          XhSyGMXFLnql+kfKLiT7/qeUW6gNoY32jFIvN52md60=
Subject key identifier:   AB:5C:D0:0F:53:69:FA:82:CE:01:83:AA:61:16:CF:C5:92:46:D5:9C
Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
Certificate issuer:       /CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Certificate serial:       01A163B39FDB39B14916DC20DE906C54F74B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
Manifest number:          07E7
Signing time:             Thu 22 Oct 2026 13:01:18 +0000
Manifest this update:     Thu 22 Oct 2026 13:01:18 +0000
Manifest next update:     Fri 23 Oct 2026 13:01:18 +0000
Files and hashes:         1: JrFSTsAdz0BfRBcYKe1nopkqpC0.crl (hash: j6k6hC68wog1a8sNLfBaH7LS6HkaR3N3z4dF3uNZQn0=)
                          2: _Y_601F6eAt7O-baCpdg3BQDJXc.roa (hash: vyG9YG54wVQIAnIU/YKZPIrIY0HUdh61Oh6KNWA0bnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:63:b3:9f:db:39:b1:49:16:dc:20:de:90:6c:54:f7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d
        Validity
            Not Before: Oct 22 13:01:18 2026 GMT
            Not After : Oct 23 13:01:18 2026 GMT
        Subject: CN=ab5cd00f5369fa82ce0183aa6116cfc59246d59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a0:8a:d5:05:b4:17:df:c2:a4:52:ec:df:40:
                    b3:1a:e6:9d:8d:36:50:c9:3a:b2:bb:89:4b:97:3f:
                    64:64:da:28:79:03:7f:c8:e1:ae:c7:be:1f:c9:e8:
                    9a:ef:6f:ef:8c:0f:d2:ec:d7:a0:2e:31:75:d9:7b:
                    82:b9:1a:7c:2a:28:b3:57:96:23:08:22:be:8c:08:
                    60:d6:a2:2b:47:ee:52:0d:cc:82:9c:29:b9:15:3a:
                    02:22:88:4f:a4:6e:cc:1f:c5:69:fc:0b:0e:d7:28:
                    1f:ed:59:c2:43:39:a3:de:84:29:23:b8:dd:ef:e0:
                    03:a6:d5:55:ac:0e:05:ee:08:a0:74:09:b8:a6:50:
                    f0:8c:4f:bc:bf:16:29:19:fd:c6:c5:05:19:aa:f0:
                    51:dd:ce:1b:b8:60:be:ae:fa:48:38:b1:4c:a2:fc:
                    3e:3b:c3:15:76:3a:93:2f:fb:92:f5:a6:c7:cc:33:
                    00:ba:ee:03:e1:78:62:b7:62:50:4d:59:e0:91:1f:
                    3e:a3:de:da:51:65:ad:ed:2e:23:69:3c:58:d2:9d:
                    66:80:b1:23:9c:53:cc:00:a0:86:87:75:d8:58:58:
                    84:46:10:3c:09:92:a0:e7:4e:58:00:e1:ad:30:bf:
                    17:d5:8f:1f:ad:f2:95:fd:1a:af:08:0e:37:e0:6a:
                    e0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5C:D0:0F:53:69:FA:82:CE:01:83:AA:61:16:CF:C5:92:46:D5:9C
            X509v3 Authority Key Identifier:
                keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:7d:6e:db:54:df:d4:6c:cb:b1:a9:58:2b:4a:ad:9c:af:f9:
         d5:82:9a:c1:3c:6e:32:d4:51:f8:69:a5:22:37:88:a8:63:00:
         f1:44:ac:ff:b7:3f:03:10:8b:8c:0d:06:e9:91:0a:48:ab:e0:
         14:c8:60:62:c2:ed:b4:ab:fe:a0:07:10:9e:17:69:7a:7e:6b:
         96:07:de:03:c0:f2:83:d1:55:dd:f4:bd:80:e4:a3:42:f7:58:
         1a:e2:3f:63:6c:dd:85:bd:97:66:f0:f2:67:7e:45:ce:ca:bf:
         a7:9c:24:52:c2:4d:e7:11:0d:c2:e3:b2:14:4c:64:0a:40:7c:
         05:c9:54:88:ef:32:88:36:2f:c9:33:dd:24:29:3e:6e:03:8e:
         cc:fd:b7:d9:12:aa:dc:d1:0b:49:e0:ca:b0:5a:b0:54:02:dc:
         84:82:b1:4c:02:5c:51:9f:ed:ab:69:04:6b:64:c1:21:fe:df:
         01:99:c8:83:a0:cb:85:78:fc:9b:2d:35:1a:72:bf:31:71:fa:
         06:3e:58:eb:82:c6:c8:a1:07:11:92:8a:4f:0f:01:68:cc:d6:
         9e:3e:47:0f:be:5a:7d:4d:5a:23:ee:6d:5b:67:99:74:eb:7e:
         d8:85:a6:e2:c1:9c:b7:e6:e5:23:b4:83:12:26:48:95:78:76:
         67:ce:d4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:39:56 2026 by rpki-client