Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File:                     j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier:          QlU2UC0u4p3/21APaIlZW4mGIRBajGnn/3kmc/UGuuI=
Subject key identifier:   62:BC:E7:E7:92:21:26:60:2E:23:4F:51:5D:15:9F:4F:F3:67:82:55
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer:       /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial:       01A15288F024357F822CC99CCEDDF2653540
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number:          1AAE
Signing time:             Mon 19 Oct 2026 05:01:08 +0000
Manifest this update:     Mon 19 Oct 2026 05:01:08 +0000
Manifest next update:     Tue 20 Oct 2026 05:01:08 +0000
Files and hashes:         1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: yqB4Kawe55b8k7fjeRFl9leAeBh5pHEk0KMPVNWtT10=)
                          2: psZNmPYVql98KxRd5_J9v8TyFDo.roa (hash: 83pmxITkPLNCEyrAljxQNeti1DcWIEULoY0Jkfv3Y08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 05:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:52:88:f0:24:35:7f:82:2c:c9:9c:ce:dd:f2:65:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
        Validity
            Not Before: Oct 19 05:01:08 2026 GMT
            Not After : Oct 20 05:01:08 2026 GMT
        Subject: CN=62bce7e7922126602e234f515d159f4ff3678255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:dc:af:81:48:5b:41:a3:bf:98:5c:71:25:
                    24:54:0e:ed:30:d8:89:6e:8a:02:a0:46:17:43:73:
                    b9:71:ad:54:c3:4c:92:33:81:d5:4e:82:84:aa:3f:
                    7d:83:ea:99:9d:bc:ba:dc:d3:11:6f:91:cb:ee:6b:
                    97:0f:06:65:c0:0f:b5:c5:49:b3:94:48:69:d2:c6:
                    38:9c:6b:a2:ef:52:22:93:07:b5:b0:48:ef:c1:1f:
                    ec:ac:b8:a6:4f:8c:e3:bc:ad:3a:30:bc:66:9d:af:
                    43:6a:d0:98:b8:38:d9:e6:09:7b:16:6f:02:0e:68:
                    9c:fc:e1:51:60:9d:24:0c:48:73:8d:33:db:3f:dc:
                    ff:48:9b:18:1c:f2:a8:b0:6d:d9:f6:ca:6a:59:86:
                    06:f6:43:8f:c0:41:76:81:6d:21:a5:5c:ec:53:dd:
                    b1:16:4d:13:56:83:6f:ca:b4:6d:f8:95:34:61:8d:
                    99:ef:c3:0f:93:e9:52:27:11:17:c0:92:47:93:23:
                    d4:ef:2b:2a:1f:be:af:53:b2:b7:96:9f:66:25:15:
                    a9:da:f6:dd:7c:67:54:fb:ed:86:da:d1:bd:90:19:
                    d1:12:fd:23:20:16:bc:61:7d:1b:11:88:9e:9b:c0:
                    07:f2:43:21:b5:ba:45:78:d2:11:49:41:03:87:0e:
                    b6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BC:E7:E7:92:21:26:60:2E:23:4F:51:5D:15:9F:4F:F3:67:82:55
            X509v3 Authority Key Identifier:
                keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c6:9c:60:31:bc:29:9b:b4:43:4d:84:14:1a:d3:e4:5d:32:
         22:dd:cc:55:71:49:62:9e:df:79:07:c2:22:ab:71:0e:1a:95:
         a1:1c:29:4e:77:74:b3:35:de:ea:8d:e9:12:64:73:84:51:97:
         2d:b2:f6:f9:df:35:c9:b1:69:a8:57:38:eb:c0:d7:17:67:05:
         c2:3e:fd:81:b7:19:83:bf:1d:a0:ca:38:5a:08:a3:8d:7d:ef:
         23:ae:c0:27:69:95:5f:dc:c7:59:ad:7e:28:99:92:b9:57:cb:
         bb:6a:06:9a:98:96:40:31:1c:71:dd:dd:ce:00:4a:36:13:e6:
         61:e8:c0:81:28:84:3a:38:51:3e:05:38:b4:8a:ba:85:33:95:
         22:a5:e6:9e:43:28:8a:e2:99:1f:a2:b9:a4:84:d5:de:fd:5f:
         39:3c:fe:f1:04:6f:2c:2a:32:de:31:04:6f:c3:35:68:ec:f0:
         54:31:1e:b8:19:1e:7e:36:97:78:c3:83:33:6b:97:66:be:3f:
         0a:d9:22:32:6b:05:6b:4a:aa:62:f7:cb:81:17:c8:9a:ee:f4:
         2e:37:7f:b9:3e:6d:d6:26:0c:dc:9d:96:a9:65:8d:49:0c:c7:
         fa:00:ae:eb:b0:81:46:b1:38:4c:79:fa:a6:0e:91:74:f9:d6:
         9c:dd:de:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 14:31:07 2026 by rpki-client