Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File:                     hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier:          EAF2ai7hrm+Ru2Z1A9LqiyLb6jgnvG1zmTE8GnRy0UM=
Subject key identifier:   0E:9D:CB:22:B1:80:E3:49:1A:22:C4:82:56:76:79:41:40:9C:DC:73
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer:       /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial:       01A1818716D31CED5BCDFF1370F048010748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number:          1AC6
Signing time:             Wed 28 Oct 2026 08:01:16 +0000
Manifest this update:     Wed 28 Oct 2026 08:01:16 +0000
Manifest next update:     Thu 29 Oct 2026 08:01:16 +0000
Files and hashes:         1: SHJi1Hg3BYSDVLWuUF3dUC_y5Qc.roa (hash: hbtSVIptoXiMe4xO8q5DDqQ1ZQZBnOOJmENfX4ZeP2E=)
                          2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: n8uewyc7/gq0kHaxR76Ad4SPFt5vywkq02byeK+9hgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 08:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:87:16:d3:1c:ed:5b:cd:ff:13:70:f0:48:01:07:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
        Validity
            Not Before: Oct 28 08:01:16 2026 GMT
            Not After : Oct 29 08:01:16 2026 GMT
        Subject: CN=0e9dcb22b180e3491a22c48256767941409cdc73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:37:94:72:25:37:62:f6:28:89:53:1d:83:ff:
                    b5:b1:f1:5e:96:ac:2a:52:f3:9b:b5:52:5e:2f:c4:
                    59:c8:1b:28:b7:d2:6b:e2:fd:51:8a:56:67:05:75:
                    02:e0:44:bf:da:57:f1:79:48:5d:da:d7:c5:bd:dc:
                    b6:bb:18:f9:cc:2d:f2:94:92:1f:39:2a:9a:60:ff:
                    a7:6e:28:52:e4:6a:81:be:7c:cc:31:72:10:b6:0a:
                    83:26:77:fc:c4:ef:50:4c:36:d3:87:94:71:3c:51:
                    64:53:04:98:6b:ec:4a:b7:b9:10:e9:1d:dc:5c:11:
                    3b:e8:ce:ed:ce:8d:88:7b:00:e9:6f:a1:56:ba:2d:
                    8b:fb:7d:ce:cd:0c:05:65:b2:02:2a:1c:bc:54:b0:
                    36:63:2a:51:46:a3:b6:50:8d:e0:d4:55:c2:14:f9:
                    9e:5d:f5:4a:1f:93:f2:13:43:fb:62:48:93:9e:c2:
                    b0:42:a0:f0:67:be:c9:51:3f:c5:0b:76:73:42:68:
                    e5:89:76:07:cf:c5:3b:ae:af:d8:26:e0:60:18:8e:
                    51:5b:11:62:e5:78:7b:2f:07:7b:b8:bf:f1:e5:73:
                    a5:f3:ba:92:b8:b9:ec:23:4e:5c:bf:b1:3d:9e:dc:
                    15:91:93:b8:cb:de:e1:ad:4d:65:07:27:c2:58:02:
                    5b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9D:CB:22:B1:80:E3:49:1A:22:C4:82:56:76:79:41:40:9C:DC:73
            X509v3 Authority Key Identifier:
                keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:84:b3:04:72:60:d4:0d:2f:d2:15:5f:84:dc:97:27:6d:9f:
         83:42:5d:5f:e9:4e:4f:99:f8:3a:55:f4:cd:eb:70:d8:e5:fa:
         8d:af:98:42:5e:8c:96:d3:aa:66:ee:f2:a0:b8:b1:8f:c5:78:
         ba:b7:c2:37:e0:2f:7f:4b:34:6f:6f:21:8b:97:c6:ee:3b:40:
         dd:20:7a:81:a8:92:2c:d3:26:c7:89:70:c0:f4:b9:f1:5d:43:
         ba:78:7c:3f:f5:02:57:c3:76:f5:46:b1:a8:df:e7:88:03:30:
         7a:ac:ac:93:d7:09:5d:9b:b3:9c:f3:f2:ba:9b:c0:fb:01:00:
         08:1a:b9:90:91:ce:8b:25:3c:42:be:40:2a:9d:52:b6:00:93:
         34:db:41:ee:40:5f:77:60:0f:9c:01:90:b2:19:39:29:14:0c:
         fa:7b:fe:51:4e:3c:9c:a0:55:30:6f:0c:d4:5f:ad:eb:4a:dc:
         01:b5:87:af:b2:f8:c0:22:fa:86:e3:c2:15:63:03:26:58:2d:
         37:5f:39:8d:47:90:ab:db:1a:02:f5:26:d0:8d:60:de:e3:91:
         ec:59:d2:db:3f:07:90:8e:a5:92:e5:6e:62:2b:6e:ca:bb:e8:
         4f:9d:29:fa:11:21:19:43:29:67:a3:8f:d4:46:22:60:17:33:
         13:e1:5b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:23:46 2026 by rpki-client