Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File:                     jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier:          oAGbAoIo10Nc1kRVKZExHwkaFuqqP/zIlZ+zFlhmJwU=
Subject key identifier:   80:8B:A5:93:72:D8:C6:6B:BC:3C:15:3E:8E:9B:07:37:FC:F1:66:3F
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer:       /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial:       01A14D2B8FC1C42ADF6256019E5459FBF287
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number:          1AAC
Signing time:             Sun 18 Oct 2026 04:01:02 +0000
Manifest this update:     Sun 18 Oct 2026 04:01:02 +0000
Manifest next update:     Mon 19 Oct 2026 04:01:02 +0000
Files and hashes:         1: DW0L4TMX0k7NIxwBqURjmrgnl7k.roa (hash: 9bpHxyEG2FowJ+5wF/MX0mk7jznSAQlzUuYCWXpTFQM=)
                          2: MrTeH3244GhrsmktdFmsilQf7DQ.asa (hash: GC9kidXivmf55i4xsJViQsWGsdVImec2c8gAa1Wm8VM=)
                          3: fdMO8uKSbPAwkZWz81kW00ikw90.roa (hash: bDzUzfVEg3uUN6Y1DlBJvXf2YCZXufjYUiQMDPh+1vc=)
                          4: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: 6EomXuujJZiob2ubFAJLT61CpWgmykxxTb09eObqf2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 04:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:2b:8f:c1:c4:2a:df:62:56:01:9e:54:59:fb:f2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
        Validity
            Not Before: Oct 18 04:01:02 2026 GMT
            Not After : Oct 19 04:01:02 2026 GMT
        Subject: CN=808ba59372d8c66bbc3c153e8e9b0737fcf1663f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:fc:2e:06:e8:20:ab:56:bb:e8:29:2f:9d:
                    2d:a1:83:77:8e:fd:35:a7:7b:fa:28:4c:7f:42:38:
                    bb:86:6f:84:3d:f2:05:53:18:e6:9d:86:b0:e4:3e:
                    7c:33:eb:3a:1d:cb:7d:7e:90:aa:1c:25:17:eb:da:
                    91:a2:79:81:7a:40:95:90:cc:8f:15:77:d0:b9:e2:
                    15:34:5b:5c:16:8e:84:53:a8:47:71:26:cf:89:ce:
                    b4:2b:2d:27:ee:04:9f:72:23:e2:73:e6:f9:fd:d4:
                    4f:c3:98:9a:bb:bb:d0:ac:8b:03:af:9d:67:3c:bb:
                    36:d5:ba:ae:57:eb:83:b5:34:af:23:7e:d9:db:86:
                    09:0b:7a:05:6e:fe:b4:9c:6b:7d:14:b7:21:04:97:
                    14:77:31:16:ca:f9:da:2f:97:6b:43:f8:6f:60:c3:
                    f8:42:09:3f:a5:26:92:a9:77:c9:81:a6:08:40:60:
                    5e:06:a2:76:81:65:6a:dc:91:c5:ea:db:86:72:ff:
                    5a:49:64:39:ac:1b:7a:49:ed:11:58:60:60:20:18:
                    76:4f:09:2b:d1:a3:ce:2d:09:07:2e:d7:2a:db:04:
                    2d:90:02:d7:78:91:10:5a:b5:82:de:c3:f4:df:77:
                    52:6d:ff:e2:d0:38:e9:db:71:11:0c:8a:64:4f:26:
                    e5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8B:A5:93:72:D8:C6:6B:BC:3C:15:3E:8E:9B:07:37:FC:F1:66:3F
            X509v3 Authority Key Identifier:
                keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d6:f8:99:0e:4c:55:ee:6c:39:68:2f:1a:94:73:3a:bb:65:
         ba:e6:23:d5:a9:6e:bd:07:5a:d8:d3:5a:56:44:20:be:d9:34:
         6b:2a:00:aa:9b:41:e0:ce:5f:f5:c4:0c:87:98:58:73:00:d5:
         ad:c7:b8:88:15:16:2a:c9:9e:ef:f7:81:bb:96:d8:14:cc:21:
         9a:30:d8:61:28:ff:e3:8f:b1:79:ff:37:cc:07:4c:8a:5d:69:
         0f:ed:21:58:40:24:a7:77:5e:3b:84:03:2f:fc:4d:b4:6a:f3:
         31:f6:ec:bb:96:f7:ec:31:a2:6c:45:1b:bb:4d:e9:ea:ae:18:
         50:23:1f:c2:ee:aa:4d:19:09:90:d0:6e:f1:91:7b:f6:0c:25:
         aa:1e:a6:8b:29:ca:cc:ac:11:9b:ee:7e:df:d2:09:5c:c9:d9:
         d5:8d:e0:e6:77:8b:05:71:dd:05:aa:0a:04:dc:0a:73:01:ab:
         ee:5c:18:02:07:06:24:cc:e5:4e:8a:c0:8f:43:53:a2:6e:cb:
         9e:7f:09:12:0e:8f:99:94:a5:b1:76:dc:68:97:21:bf:b0:1e:
         36:30:1f:5e:58:e1:f5:45:c9:3b:34:d9:a2:13:5c:05:e7:89:
         72:96:19:b1:f9:5a:53:d5:cb:53:cb:42:dc:b1:73:f1:5b:e0:
         9d:9d:6f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:18:05 2026 by rpki-client