Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
File:                     JwafGIPczJOnhpxB7D6XL_X9SwE.mft (raw, json)
Hash identifier:          9q58tKY8lbV4qToJz1JZV90hh4IY7L6zmbEEiw7pvrM=
Subject key identifier:   23:B0:51:9C:45:48:6D:FB:07:D4:1E:E7:56:72:84:A0:3E:83:1B:AA
Authority key identifier: 27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
Certificate issuer:       /CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Certificate serial:       01A181BDF593B319CCDA67A491090613358F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
Manifest number:          0550
Signing time:             Wed 28 Oct 2026 09:01:12 +0000
Manifest this update:     Wed 28 Oct 2026 09:01:12 +0000
Manifest next update:     Thu 29 Oct 2026 09:01:12 +0000
Files and hashes:         1: JwafGIPczJOnhpxB7D6XL_X9SwE.crl (hash: uyrnmYy8W6QrifCiQdHGryrGDIspksgV2OK0LySeRKk=)
                          2: c-F07oW418TCkLIDuM4bPsepLlw.roa (hash: HiwmaaNLgIsPLCrsmNEOGqUJ63k1RwsqFon6JmR4rWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:bd:f5:93:b3:19:cc:da:67:a4:91:09:06:13:35:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
        Validity
            Not Before: Oct 28 09:01:12 2026 GMT
            Not After : Oct 29 09:01:12 2026 GMT
        Subject: CN=23b0519c45486dfb07d41ee7567284a03e831baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:45:4e:bf:14:77:5c:e9:eb:64:3e:bb:df:8d:
                    e8:83:80:f4:ca:27:24:7e:30:f3:ca:75:3d:06:00:
                    cf:35:72:5f:04:a7:91:47:15:c8:07:75:76:60:70:
                    44:39:d3:8b:87:30:02:b0:b7:8f:93:8d:57:24:95:
                    60:cd:1b:31:95:3a:b8:a4:8c:8f:83:4c:cf:bb:d7:
                    38:2c:50:a2:ce:96:da:a2:1b:c5:79:58:5e:8e:09:
                    e8:4b:91:3d:00:ed:4f:b9:92:5a:34:b9:99:d4:1d:
                    2c:0a:58:bc:5b:2b:12:f8:14:eb:6d:18:0b:5f:f0:
                    ec:af:c0:03:e0:da:f4:c7:56:6b:67:a9:8c:0d:83:
                    82:94:0a:ce:63:6a:5a:2b:66:67:eb:c0:8d:58:df:
                    dd:29:ee:b9:0d:6a:b9:6f:75:f8:02:ac:4c:4e:ec:
                    e5:df:44:d2:32:11:4b:cf:7a:b4:14:88:06:7a:5e:
                    7c:a6:4b:55:d7:d5:5b:50:ce:8c:47:e2:ca:5a:3b:
                    7a:ab:9b:7a:26:54:8c:e8:cd:fd:26:cf:34:fe:fb:
                    df:0d:6a:d1:0c:a5:f4:d4:90:8f:bc:8b:b0:e8:4a:
                    f1:fa:12:68:30:db:58:37:d8:8e:61:8d:63:87:c5:
                    12:55:46:b7:97:d4:ed:d0:99:e4:45:fb:c3:2b:3d:
                    25:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B0:51:9C:45:48:6D:FB:07:D4:1E:E7:56:72:84:A0:3E:83:1B:AA
            X509v3 Authority Key Identifier:
                keyid:27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f8:05:9b:29:5b:54:3a:fb:8e:d7:b2:3c:a4:9b:9c:53:6e:
         34:5a:f7:cb:d8:a9:38:f7:b2:4a:cc:ae:a5:6e:67:82:03:44:
         56:59:3f:dc:52:a9:6d:d0:97:60:ec:d4:13:b2:97:e8:f6:b5:
         ea:36:28:10:84:da:fd:b2:aa:d5:c7:2a:08:16:f3:48:98:56:
         7b:38:98:a4:99:93:4f:92:71:91:69:28:48:ce:95:ec:66:cb:
         15:83:bf:de:4e:8b:de:c2:61:d0:7e:e6:14:ad:fc:10:0b:52:
         96:b6:08:d5:e2:53:62:58:aa:b9:74:26:65:91:9f:e3:08:01:
         b1:97:d1:bc:d9:69:c6:9e:de:58:1e:47:ab:17:ca:e8:66:6b:
         95:93:1d:dc:ee:a5:5f:05:8a:ef:3a:d7:f5:a8:92:1f:0a:7b:
         32:5c:19:b3:7a:de:96:8f:91:f9:14:40:44:fd:5a:51:06:98:
         f2:d3:5a:64:a8:a0:24:b0:9a:e0:91:76:f5:82:fd:e9:de:96:
         7a:c5:cc:1e:96:45:88:af:6a:98:2c:94:38:1f:f2:a0:0a:18:
         aa:33:e7:91:67:aa:d5:3c:6d:1d:2c:54:3e:ef:8a:1c:3e:34:
         cc:41:3f:ea:cf:0b:63:28:2e:4b:e2:dc:3e:d8:66:08:e7:2a:
         be:8e:55:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:12 2026 by rpki-client