Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
File:                     JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft (raw, json)
Hash identifier:          sQFUsVn9rpv+4AC9bGLVL98SGDNxtBnxs34tKRv2tHI=
Subject key identifier:   25:2B:BB:05:BF:6B:DC:9E:51:0E:E0:2B:C5:A0:24:02:51:CC:80:D5
Authority key identifier: 26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6
Certificate issuer:       /CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
Certificate serial:       01A001DD1D6A248FB68AB867AFAA74EC21CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 20:01:03 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:03 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:03 +0000
Files and hashes:         1: 1-etkEpJT5huTCkvp4nk0dydE9KA.roa (hash: eid4ChJhHIbdTu3ltYjDcXJHFhgZsYu7s5rAP/A4Ugo=)
                          2: JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl (hash: IK2bVqq83yf3lDBRgC0b5bu7ZN75aTavY9f+PafKow0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:1d:6a:24:8f:b6:8a:b8:67:af:aa:74:ec:21:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
        Validity
            Not Before: Aug 14 20:01:03 2026 GMT
            Not After : Aug 15 20:01:03 2026 GMT
        Subject: CN=252bbb05bf6bdc9e510ee02bc5a0240251cc80d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f3:1a:4c:9e:70:34:99:db:3a:88:3e:50:cb:
                    f4:cd:b7:0a:92:6d:2e:55:e4:da:84:35:1f:dc:34:
                    82:63:f1:d5:23:3e:ae:6b:a9:e2:bf:22:6f:63:9c:
                    75:5d:4e:60:66:4f:20:6e:83:38:2f:8a:62:85:c9:
                    5d:55:61:9c:ee:12:61:a7:46:a3:5f:a0:73:95:04:
                    8d:38:e3:47:0a:70:79:ad:3e:5c:63:be:6e:fb:03:
                    42:27:2b:81:d9:34:ca:46:33:a5:e5:52:fe:e7:23:
                    44:0a:6c:c5:c0:f8:16:87:37:a5:b5:10:1b:ad:6a:
                    19:bb:57:6c:b6:3b:ed:af:77:6f:40:f7:24:4c:c5:
                    45:55:60:97:26:ba:00:67:ca:7f:6f:cb:b6:15:35:
                    d8:23:5c:c2:45:9b:34:ae:5a:fb:a5:bf:32:63:91:
                    89:04:7c:a1:4f:90:3b:73:c3:30:78:86:dd:7e:c5:
                    4b:79:ad:8e:86:16:a1:bd:63:53:6e:41:cb:2e:dd:
                    95:7c:2f:95:83:4a:03:43:ea:9a:69:55:8b:38:0c:
                    4e:7c:5e:de:b2:3b:2c:0e:fe:32:63:68:43:7e:a8:
                    99:c0:ec:5a:82:6d:76:b0:7b:98:fa:46:28:58:4a:
                    50:02:26:8f:9a:30:c1:29:4c:0e:31:2e:34:2a:7f:
                    8d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2B:BB:05:BF:6B:DC:9E:51:0E:E0:2B:C5:A0:24:02:51:CC:80:D5
            X509v3 Authority Key Identifier:
                keyid:26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:71:c5:e6:4d:26:33:d0:fa:e7:92:91:8f:f7:22:e5:e0:93:
         cf:e3:9c:92:d8:9f:e8:e4:2c:d0:61:f8:fd:79:e7:36:1a:c7:
         35:80:2a:db:0f:70:f4:e3:2c:aa:49:8c:01:b1:47:f1:a6:0e:
         86:f5:a4:04:92:b9:8d:cf:4f:74:22:9c:cb:78:c5:27:7f:4a:
         00:77:b1:62:81:ed:1a:7e:da:a6:cb:eb:bc:92:4d:f9:f2:24:
         90:b9:99:bd:3b:a8:c8:64:1f:34:ab:ff:7a:08:62:9e:1d:6d:
         cb:a1:6b:79:17:0d:71:70:55:e8:02:43:8a:69:68:13:9f:72:
         f2:ec:0d:42:d3:ea:f2:45:bd:bc:63:66:dc:57:78:70:63:e8:
         79:f6:dd:46:10:9a:c1:1e:04:2f:42:78:e2:20:6c:1f:11:e0:
         66:d2:f2:60:4d:01:c1:d8:81:4f:f6:c5:6f:7d:8a:50:29:11:
         9d:5b:bd:ad:76:47:ee:05:a8:59:71:f9:2a:73:b6:94:ec:f0:
         fd:18:74:3e:f1:ab:65:84:34:33:4e:96:26:f3:89:d0:9e:08:
         0e:f8:c0:3b:0a:ee:42:48:34:38:44:7b:aa:73:7c:54:bf:ff:
         e7:4d:f2:30:92:00:8b:2e:74:c1:4e:e9:be:ed:73:2d:58:db:
         52:0c:42:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:06:50 2026 by rpki-client