Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File:                     jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier:          CYmN8GT8uLdZVJJ0gvyqf56KPlXF6XzLhxYJZ2Ie78o=
Subject key identifier:   B9:15:00:00:73:0A:FD:6B:C9:A0:52:BB:3F:6E:BC:60:D2:2E:8D:0E
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer:       /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial:       01A0852EDEFB50B02ABB161EFCFD1D68A40E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number:          1A47
Signing time:             Wed 09 Sep 2026 08:00:36 +0000
Manifest this update:     Wed 09 Sep 2026 08:00:36 +0000
Manifest next update:     Thu 10 Sep 2026 08:00:36 +0000
Files and hashes:         1: D8C_fac31Ie3Mlmm0iY26zsUpPQ.roa (hash: aXM4Hau7o88WQaKHyho1aeWalezo3Xwt0vRqN6L/8TQ=)
                          2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: WIqijyxRQa9s+BqkT+dj54XHpqhkrXxnW6/Nu/CH8aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:85:2e:de:fb:50:b0:2a:bb:16:1e:fc:fd:1d:68:a4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
        Validity
            Not Before: Sep  9 08:00:36 2026 GMT
            Not After : Sep 10 08:00:36 2026 GMT
        Subject: CN=b9150000730afd6bc9a052bb3f6ebc60d22e8d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cb:6c:cd:ec:a1:86:cf:52:92:69:d9:f8:8e:
                    9c:c6:8b:ab:23:51:cd:9b:6b:88:63:78:ef:9d:02:
                    c9:df:56:ee:12:29:b1:8d:00:f8:7f:6b:63:d2:8d:
                    a7:60:c6:f4:b4:f1:bd:f6:60:67:d8:1a:73:cd:e0:
                    06:a4:40:42:4c:8d:de:7a:b7:cd:1d:f7:6a:c3:64:
                    cd:61:7b:3f:6c:56:e6:83:81:ff:72:d8:a9:00:13:
                    0a:f7:b0:40:d7:ba:01:1b:d7:5f:45:25:b1:75:5a:
                    37:9a:2e:ec:de:94:6e:59:c0:f5:22:84:98:ad:f3:
                    69:d6:be:8e:ef:f9:26:ae:73:7b:88:f8:26:db:80:
                    c4:8c:02:23:b2:2e:be:4e:83:32:62:a7:94:5b:23:
                    8e:58:17:cf:82:66:80:1c:30:b8:eb:ba:95:37:df:
                    e5:ac:5b:94:ec:08:12:e0:aa:ef:21:1e:a2:9b:f9:
                    97:12:df:b5:ed:00:80:85:89:39:3f:d5:4c:8d:51:
                    56:7e:b6:fd:a5:32:33:0f:8b:73:34:02:a3:24:eb:
                    5e:a4:1d:63:da:3c:f2:13:ae:45:b6:7e:0e:6e:38:
                    31:ad:df:ed:19:f8:26:bc:3c:d0:9d:a0:15:eb:05:
                    68:78:4a:c7:be:28:37:8b:1d:57:55:28:96:e8:30:
                    0b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:15:00:00:73:0A:FD:6B:C9:A0:52:BB:3F:6E:BC:60:D2:2E:8D:0E
            X509v3 Authority Key Identifier:
                keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:32:2f:77:d7:3d:35:91:66:a3:43:50:75:db:66:e2:7a:c9:
         72:17:ae:7a:86:47:c4:4e:95:8b:1c:6a:64:48:ff:9e:7b:02:
         8a:61:6c:de:72:dd:c3:1b:07:49:03:01:06:56:52:d8:d3:78:
         38:7f:f5:66:40:44:a1:a5:38:cd:e3:90:9e:d8:e9:ba:35:72:
         68:52:80:ae:45:2c:87:bd:b3:d6:32:8b:03:56:48:ba:1f:30:
         7d:b4:3c:e3:5f:af:42:11:c5:37:c1:b6:39:a6:92:a4:fd:0e:
         27:66:f2:54:30:96:fb:31:5f:c8:ac:aa:00:86:b1:20:47:75:
         cd:8f:76:1d:1b:34:88:c0:49:0a:88:19:c0:ef:cf:29:da:04:
         81:b2:62:40:7d:f0:7f:04:3b:7b:76:b2:1f:df:6c:11:65:2a:
         71:3c:07:7c:ec:10:44:e0:59:72:ff:a2:66:41:b1:28:15:82:
         84:2b:ee:05:66:d8:c1:7f:e6:01:a8:99:96:b8:49:94:9b:d6:
         49:4a:a2:55:3f:86:17:8b:49:6e:d3:e1:78:18:75:33:ba:6b:
         e8:ef:40:de:69:01:d3:19:45:9f:62:2b:15:1a:ee:e8:aa:24:
         e7:69:97:81:60:a1:03:9f:ef:8e:62:b2:26:7b:cf:ed:95:83:
         7d:8f:8d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:23:16 2026 by rpki-client