Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.mft
File:                     jFdSEbjx8EzuCr3brasqBsw05gA.mft (raw, json)
Hash identifier:          ob/jibsVAoPqDBJWZzQBPHJzhKveKUAEXcNRg9bOHQo=
Subject key identifier:   2C:2A:1E:94:A7:EC:EF:E5:4B:E8:CA:33:6A:99:7D:4E:69:78:C8:91
Authority key identifier: 8C:57:52:11:B8:F1:F0:4C:EE:0A:BD:DB:AD:AB:2A:06:CC:34:E6:00
Certificate issuer:       /CN=8c575211b8f1f04cee0abddbadab2a06cc34e600
Certificate serial:       01A0F37A204EFBF226CEE8799CEEBDBF348E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jFdSEbjx8EzuCr3brasqBsw05gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.mft
Manifest number:          026B
Signing time:             Wed 30 Sep 2026 18:01:02 +0000
Manifest this update:     Wed 30 Sep 2026 18:01:02 +0000
Manifest next update:     Thu 01 Oct 2026 18:01:02 +0000
Files and hashes:         1: b4mQrv2JTgcWO8F1cjJyeYQBVb8.roa (hash: iaSN44aIIFU4B37XMu9thx+iSA2kuFPJ2xwDFwtro2U=)
                          2: jFdSEbjx8EzuCr3brasqBsw05gA.crl (hash: EeFPACKKDucojvbnZTKa8RKCgc2ytOLnkr3igNgwGGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jFdSEbjx8EzuCr3brasqBsw05gA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 18:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f3:7a:20:4e:fb:f2:26:ce:e8:79:9c:ee:bd:bf:34:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c575211b8f1f04cee0abddbadab2a06cc34e600
        Validity
            Not Before: Sep 30 18:01:02 2026 GMT
            Not After : Oct  1 18:01:02 2026 GMT
        Subject: CN=2c2a1e94a7ecefe54be8ca336a997d4e6978c891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:12:86:36:28:c9:19:d2:b2:8b:ef:68:ad:d4:
                    e8:7f:66:39:49:e1:44:7a:88:4f:d0:50:d5:71:2f:
                    ca:35:df:24:ec:9c:ae:fe:5e:31:91:e4:e6:84:ea:
                    72:12:eb:a8:ff:ab:ac:85:09:30:f0:64:93:82:21:
                    fb:0a:9c:5a:6d:7d:48:33:a1:de:7a:9e:d4:95:2d:
                    67:43:32:32:15:96:3f:1c:79:94:c0:b1:98:aa:6e:
                    f5:6b:23:c9:a3:70:d3:a7:de:1e:e9:c5:e1:e8:11:
                    c0:4f:89:b6:7b:d8:99:88:35:6d:15:43:57:64:fe:
                    27:15:0b:e2:56:ad:67:f0:5b:97:f5:3e:c7:8d:8b:
                    5b:e9:02:97:65:6d:3b:e1:4e:29:9b:45:8d:21:e5:
                    3a:0d:32:f3:8c:13:ad:e1:f0:15:c5:01:e3:7c:a4:
                    ac:d9:a5:42:fb:4c:04:2a:89:6f:a5:92:fc:0a:0d:
                    c3:1d:02:87:1f:0d:51:b9:9b:e6:af:b4:0a:91:ca:
                    6a:59:2d:e7:ef:3f:9c:b6:f1:30:ef:39:78:5f:bf:
                    c9:4e:3e:d6:e6:a9:20:ae:57:b8:d5:ae:74:ff:c4:
                    c2:b4:f6:be:b8:9e:c9:de:7e:0a:76:20:77:a1:16:
                    03:e2:0c:50:a0:a7:3f:40:e7:34:5a:6e:70:f0:18:
                    cd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2A:1E:94:A7:EC:EF:E5:4B:E8:CA:33:6A:99:7D:4E:69:78:C8:91
            X509v3 Authority Key Identifier:
                keyid:8C:57:52:11:B8:F1:F0:4C:EE:0A:BD:DB:AD:AB:2A:06:CC:34:E6:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFdSEbjx8EzuCr3brasqBsw05gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:4b:28:05:bd:a8:9c:9c:2e:13:b7:10:ab:9c:8f:81:19:92:
         f5:3f:a8:fc:30:de:cc:cb:08:08:27:36:2e:5e:72:16:b0:e3:
         88:41:70:37:25:9a:f9:ff:07:d4:f3:08:3c:f2:5c:59:16:ee:
         0b:2b:dc:4a:54:cc:b1:6b:7c:ca:83:9b:73:38:c5:8d:44:dc:
         94:88:6e:e6:62:1a:50:03:c4:39:b3:3f:e9:b0:b1:e9:95:15:
         2c:2a:a1:fd:a1:f3:2f:2b:b7:24:78:8a:89:d1:8e:3c:cf:a2:
         96:74:99:50:02:61:1c:8b:ab:4a:d0:32:37:80:f2:79:d9:62:
         dd:c0:3b:48:a4:cf:a8:2c:5f:88:ae:eb:c6:29:0e:ed:2f:6e:
         09:09:b2:0d:c1:63:6c:c3:b7:19:6f:d1:e3:2d:5d:22:6e:aa:
         69:f6:21:09:f0:cc:4d:4c:ac:21:55:6e:f5:8e:b5:be:b1:56:
         1b:3d:b0:36:b2:d7:32:99:a7:d2:14:42:0e:c2:76:a0:a9:99:
         36:e6:6a:75:3f:f8:14:10:0e:9f:93:1e:ed:07:be:e7:97:6f:
         3f:fd:53:ee:8c:51:46:09:6e:75:e2:0c:8c:07:60:60:64:32:
         6e:51:f8:eb:5c:75:f1:ff:19:b4:b8:54:3d:3b:77:be:6c:ff:
         fc:fe:cf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 05:03:27 2026 by rpki-client