Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
File:                     Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft (raw, json)
Hash identifier:          +UCDP1AvfV/RtaTwXDg9OQoTtppJgfs+4jPSi4FdLbI=
Subject key identifier:   57:37:AB:BB:B0:06:CD:4D:58:8C:00:2A:CA:61:28:41:FB:B0:99:18
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Certificate issuer:       /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial:       01A17A3B015F39B5393A856CB517AD52FA99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
Manifest number:          1228
Signing time:             Mon 26 Oct 2026 22:00:49 +0000
Manifest this update:     Mon 26 Oct 2026 22:00:49 +0000
Manifest next update:     Tue 27 Oct 2026 22:00:49 +0000
Files and hashes:         1: BmTt_K_BLwv-pJIWhVhf0HoNBHI.roa (hash: 7LYJkFKH+ULhI+BQpkEXahBALgXPwOMMlmmdsz27u58=)
                          2: Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl (hash: HT2OI+cQWSr6cq1P93Eqbzi72UlyoB+24qdyje4HIFM=)
                          3: Vgo75o1byZ75srMc1A2hc4DB5JM.roa (hash: qe0LN4rfy4gZig75QZhjlSmuXCiHXIfLzzagGqaLMRA=)
                          4: z3jiOX0l8XrsI6phSwPZ5D4UGqs.roa (hash: CcVgaMQKxvkfawhUGWzE3K5Xi3BSkw5Z4uMhoNWWbsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7a:3b:01:5f:39:b5:39:3a:85:6c:b5:17:ad:52:fa:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
        Validity
            Not Before: Oct 26 22:00:49 2026 GMT
            Not After : Oct 27 22:00:49 2026 GMT
        Subject: CN=5737abbbb006cd4d588c002aca612841fbb09918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d9:0f:bc:4a:ad:df:51:83:de:72:fb:48:26:
                    8e:4c:c3:4a:ff:6a:8a:4c:c0:d7:93:15:cf:47:8d:
                    ad:0b:00:95:e6:56:02:37:5a:54:0b:78:69:fd:9f:
                    e0:80:26:e9:53:0f:a6:ea:64:e8:a7:64:2e:2f:1f:
                    e5:e1:68:f2:00:67:51:4f:a0:35:8d:c3:f9:dd:10:
                    3c:12:bd:e7:6c:49:43:45:2a:d3:b5:83:ab:2f:0f:
                    de:91:fc:74:f7:bf:92:4b:92:42:45:c5:34:6b:5d:
                    7b:2a:b1:22:da:44:bf:1f:c6:fd:d1:f5:0b:5e:2a:
                    f1:84:80:3e:e4:c6:f0:af:ab:f1:39:c7:0c:41:2c:
                    3e:17:d8:af:29:41:f5:0f:08:ab:2d:c9:28:59:02:
                    4f:2b:31:1e:84:54:2e:dd:de:29:9c:f8:89:49:01:
                    c7:33:da:df:a2:18:e1:63:ad:36:7d:0b:e9:7c:e3:
                    d8:7f:40:67:0f:8c:e0:c5:8b:06:b9:9c:11:a5:be:
                    44:28:ef:8b:ec:54:a6:35:9a:a7:af:e6:4b:92:07:
                    6c:16:af:25:b9:8b:49:42:5b:30:d0:6e:a6:d4:91:
                    72:b0:17:8e:59:78:36:bd:7f:0a:d4:27:fc:8e:9f:
                    09:d8:5b:d2:f4:78:c2:69:5f:92:c0:35:21:94:ab:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:37:AB:BB:B0:06:CD:4D:58:8C:00:2A:CA:61:28:41:FB:B0:99:18
            X509v3 Authority Key Identifier:
                keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:13:e9:5f:62:c6:8f:ec:6b:d3:bb:01:63:ed:cd:f7:5a:05:
         95:74:b4:70:20:7d:4b:7d:76:2b:b2:85:32:34:9c:6b:05:33:
         ce:74:9e:81:3e:dd:9c:2b:9c:cc:03:29:6d:78:68:25:f2:ae:
         03:55:3d:32:ea:b5:25:83:6a:fa:9c:5e:1a:fa:f5:82:52:46:
         43:4e:0b:bc:6d:1d:ce:76:71:fe:1e:0a:ec:6e:64:f4:b1:55:
         e7:04:90:57:b3:fb:db:f4:b5:9d:af:f7:81:31:dd:b9:58:2a:
         40:dc:81:72:b5:15:37:ff:83:56:18:9a:55:c6:21:40:fa:d2:
         e4:5a:df:4c:24:a1:3f:a1:ac:9a:62:fa:3a:77:ed:22:12:79:
         d8:0f:13:ca:80:16:c3:81:1c:51:c6:1e:c8:c3:68:ce:e1:20:
         b4:75:c2:ec:9d:26:68:64:18:91:2a:0a:1d:62:f2:1c:02:83:
         62:e9:10:79:1a:32:53:84:75:18:04:51:08:52:b3:d4:16:d7:
         d0:03:e3:42:3c:dd:0f:d6:22:dd:63:81:9c:ca:74:67:b9:39:
         60:4b:36:da:0b:76:de:e4:33:10:cd:7a:1c:36:5a:2a:93:24:
         3e:17:77:b1:5d:85:73:84:db:2f:f5:0e:fc:1d:15:58:2b:c7:
         c5:a7:9b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:01:34 2026 by rpki-client