Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File:                     JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier:          vAIT6hVql93xkIjYWSMdIB+g9/4sMIMozOfjFkJfsIo=
Subject key identifier:   28:2E:EF:3C:EA:D6:6E:43:CB:FA:0C:7B:09:B5:AE:74:46:11:28:55
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer:       /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial:       01A0028225DB9EF61E488B0A187A8421D291
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number:          1873
Signing time:             Fri 14 Aug 2026 23:01:18 +0000
Manifest this update:     Fri 14 Aug 2026 23:01:18 +0000
Manifest next update:     Sat 15 Aug 2026 23:01:18 +0000
Files and hashes:         1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: d3/tWLYf8ILCN/xOneTAh2tJj0VHcwDn7fmjEA/bXWs=)
                          2: QT5YaQtwh10kjLMseFaZ5StOfCw.asa (hash: mXFjq/NajihGSXsqBXu5vBTGi2iI8iMdEQGHWiYPM84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:82:25:db:9e:f6:1e:48:8b:0a:18:7a:84:21:d2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
        Validity
            Not Before: Aug 14 23:01:18 2026 GMT
            Not After : Aug 15 23:01:18 2026 GMT
        Subject: CN=282eef3cead66e43cbfa0c7b09b5ae7446112855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f1:cc:70:ab:8e:4f:2f:4b:f4:d3:27:26:bc:
                    25:58:19:b1:24:4a:26:e3:88:68:cd:8e:94:85:61:
                    e5:a4:db:b2:f8:a8:c4:37:97:25:b8:57:3d:b9:f6:
                    14:2c:0a:16:fa:09:fa:1b:42:5e:1a:1e:94:69:e7:
                    a1:0b:a6:54:41:08:31:a9:a3:cb:e2:3d:9e:9b:4e:
                    65:5e:b0:9e:3e:33:ac:06:fb:82:6e:a6:4f:3a:d1:
                    21:2e:9c:d7:71:e3:25:e2:34:71:63:e3:38:31:13:
                    6e:92:9c:e0:85:b2:d9:2a:f4:eb:be:52:9c:fc:69:
                    24:a8:f6:42:a9:0a:44:d8:c1:d8:65:c4:e0:a6:36:
                    44:f0:a0:44:19:38:6d:b4:6b:f5:a3:ca:24:40:0c:
                    b2:fb:b5:7a:f0:69:21:71:46:1a:ba:70:03:2f:ba:
                    d2:59:8a:bb:bf:83:d3:8a:17:64:a5:70:ee:75:7b:
                    2f:77:d8:0c:a5:51:8e:b8:1e:8b:3c:71:d5:8d:b0:
                    9f:8c:4a:ec:a1:27:4f:9c:b2:56:4f:a4:c0:c9:2a:
                    4c:f3:47:46:7f:a6:3a:3b:6c:f2:7a:a2:a6:73:fe:
                    0f:44:2f:7a:1e:a6:5e:f6:ec:67:1d:69:d8:3e:6a:
                    4a:73:d6:10:cf:12:a3:84:94:23:b6:c5:92:1c:a9:
                    ac:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2E:EF:3C:EA:D6:6E:43:CB:FA:0C:7B:09:B5:AE:74:46:11:28:55
            X509v3 Authority Key Identifier:
                keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:00:01:cc:f1:27:42:d5:3c:35:0b:07:84:05:7b:0c:11:b6:
         b4:68:84:da:4a:cb:3e:25:f3:1d:ba:b9:32:2a:cb:1f:ee:89:
         ca:8a:da:ff:bf:15:61:4d:d9:ee:50:b9:44:4f:0f:cc:81:d8:
         d4:fe:fe:89:3d:f9:f0:e1:f0:0f:05:12:c7:20:ca:d8:52:e5:
         bd:d8:3d:23:c0:8e:18:64:3e:62:01:26:2c:40:e2:3e:c0:5f:
         84:18:04:26:76:0e:3d:45:4a:5c:39:9e:c9:f7:1f:54:9f:d3:
         b0:99:fa:83:ab:46:75:10:6f:aa:ba:71:9f:86:69:c9:98:e5:
         c8:05:c7:3b:a2:63:ab:e0:9d:cf:12:36:2b:90:07:19:fa:65:
         ab:f1:f9:e4:d8:c3:0d:8c:3c:60:44:13:16:8f:7a:52:00:9f:
         e2:2c:02:dd:79:3e:54:ac:ea:f5:73:71:c7:87:ca:03:9a:c0:
         c3:7c:f2:c1:8e:a2:25:74:a2:c9:af:49:83:fe:aa:70:45:48:
         de:c1:35:e9:61:47:e9:fd:10:e2:1e:23:f0:38:79:ac:fc:86:
         7d:84:2f:cb:bc:f7:27:7c:46:3b:e6:ea:c3:62:91:bb:e8:5b:
         34:81:ff:57:ea:12:32:95:6f:56:06:de:6a:b4:8e:5e:3f:b2:
         65:bd:68:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:32:20 2026 by rpki-client