Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
File:                     Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft (raw, json)
Hash identifier:          VzwfL3njps07MGbgoluD3VPsbwuX0jYgSj2cPp/5Nc0=
Subject key identifier:   E3:11:90:52:EC:4C:E1:41:E6:34:F6:FE:58:E3:9C:63:7E:BD:D3:FE
Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Certificate issuer:       /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Certificate serial:       01A08B9EC6BA49EA030A15197B79B431D1FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
Manifest number:          1A4E
Signing time:             Thu 10 Sep 2026 14:00:33 +0000
Manifest this update:     Thu 10 Sep 2026 14:00:33 +0000
Manifest next update:     Fri 11 Sep 2026 14:00:33 +0000
Files and hashes:         1: 1tq3O762pd4piMgBW1bA4-OkYdE.roa (hash: 5SImQwh0Wwz5tGyZ+mkSamCxnSlJbvkXrVz7wNpOrGA=)
                          2: Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl (hash: ntYAMwcKe8JLBntR/bWLsb70acvna3oaX//5xz99t1o=)
                          3: Qkt4P-3ZvRUFITOdiTeOKgCxrkw.roa (hash: 3rqF0FN3C+u7VPFtuecMJP1cP04f2T4s71febW5rYck=)
                          4: T7Qloq1sVKmUvN2otUd3yqvPvi0.roa (hash: Z426zyvv0yt+vgk/xSAFr9Ff02ANySvAKoQ2RQiwE0A=)
                          5: kARVIlDBzF4gPohT6gRNl9dMH18.asa (hash: 7z/wKyEmpLOrAKMSn18/fQVblHqra7yUenbRNRt2qQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9e:c6:ba:49:ea:03:0a:15:19:7b:79:b4:31:d1:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
        Validity
            Not Before: Sep 10 14:00:33 2026 GMT
            Not After : Sep 11 14:00:33 2026 GMT
        Subject: CN=e3119052ec4ce141e634f6fe58e39c637ebdd3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:73:87:41:4c:aa:a8:74:cc:19:27:7c:18:6f:
                    7f:7e:0c:6f:59:54:31:5d:02:ec:03:f6:80:db:30:
                    5f:02:49:e2:dc:19:16:62:4c:30:3c:c8:a7:1d:88:
                    06:85:2b:a8:e8:21:b1:14:01:87:79:a7:0d:a1:33:
                    4e:ae:f3:74:7a:74:7a:fa:ee:df:7c:d5:ef:27:63:
                    c8:55:b1:76:f3:d8:81:25:fd:51:9a:bf:3e:4a:98:
                    d9:e6:fd:dd:54:97:f3:ed:bf:80:c2:af:77:cc:c0:
                    08:8d:cd:be:ad:ee:e1:83:83:d3:60:50:b9:14:b3:
                    4c:0f:64:6f:f2:1e:e3:78:b2:b2:5e:34:ab:e0:b4:
                    ff:45:f3:f5:59:d7:bb:37:35:59:a4:b3:db:4f:a3:
                    1b:d4:33:6e:4e:28:10:ab:bd:50:de:1d:a8:6e:4b:
                    1f:8a:71:a8:eb:0f:07:d3:75:74:60:e1:97:8e:90:
                    37:dd:a5:cc:1a:a8:a0:de:f0:ff:2d:f1:86:13:1e:
                    3c:11:7e:03:16:e3:c7:7d:7e:86:75:47:5d:27:df:
                    7b:9b:41:e9:34:ce:92:fe:07:b8:dc:66:48:cb:c2:
                    fa:93:63:b9:c3:8d:b3:30:52:a1:ce:5d:16:fc:44:
                    80:b9:50:28:bd:98:b2:cd:f9:63:19:4d:5b:75:dc:
                    7b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:11:90:52:EC:4C:E1:41:E6:34:F6:FE:58:E3:9C:63:7E:BD:D3:FE
            X509v3 Authority Key Identifier:
                keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:ab:b6:a3:a9:4e:20:ec:9b:c1:31:ab:c2:84:50:fb:44:a7:
         4b:81:1f:62:00:7d:78:ea:4a:cb:52:6f:e7:c4:44:fc:33:bc:
         2b:ad:ba:d8:21:1b:a2:d1:3b:d1:23:93:0e:a0:bd:6c:ab:dc:
         f3:20:03:b0:7a:86:35:da:d9:9c:95:9a:e0:54:3d:45:79:55:
         60:f6:7c:49:cf:ea:0a:23:9c:57:a1:2c:6a:31:1f:f9:83:da:
         1c:96:66:de:a1:6d:1f:bc:61:b5:60:79:12:bd:47:ab:df:40:
         a4:6a:34:27:92:bf:78:9e:40:59:40:2d:31:95:39:92:34:d7:
         b7:1a:99:de:35:bc:36:c9:23:b3:17:63:cf:62:ba:e8:c8:b1:
         39:0d:54:1d:76:52:00:0c:bd:f5:cc:73:41:ca:c3:e5:5f:3e:
         6e:c3:f3:7a:53:8e:ac:96:d2:6c:1b:7e:2a:a2:b2:27:44:6e:
         a6:b5:8b:4e:2f:4a:fd:d8:0d:19:fa:a2:98:0b:c4:d2:50:1a:
         af:1f:2f:a2:e6:a3:5c:66:b8:7f:71:c4:40:69:cb:4d:04:de:
         e3:ce:35:4c:e9:47:d3:15:01:57:26:d8:ee:1c:63:4e:4e:87:
         18:54:c9:c0:0d:e5:a2:a0:c9:15:f0:05:82:da:f4:92:89:d3:
         84:0c:e1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:57:57 2026 by rpki-client