Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
File:                     J5_fPkke9m13cUOJrjbwRXFfJ2g.mft (raw, json)
Hash identifier:          UQT3Z2g6d822GnOLrgt5LvpZAYmmVu/4A6kyApmLCOc=
Subject key identifier:   95:E4:8F:0B:76:CA:FD:FA:41:00:BD:D6:86:8B:C5:A7:23:E0:47:8D
Authority key identifier: 27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
Certificate issuer:       /CN=279fdf3e491ef66d77714389ae36f045715f2768
Certificate serial:       01A16A5A1703672AA698A35776A4E3569D1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
Manifest number:          01C0
Signing time:             Fri 23 Oct 2026 20:00:51 +0000
Manifest this update:     Fri 23 Oct 2026 20:00:51 +0000
Manifest next update:     Sat 24 Oct 2026 20:00:51 +0000
Files and hashes:         1: J5_fPkke9m13cUOJrjbwRXFfJ2g.crl (hash: UXBthcroXJ9YfeNR14p/+JzCZRBkcdY7K13iEo/0gs0=)
                          2: dbhJ2mgiwrEXRHzGR6WxaKNKqQI.roa (hash: DiPMBIkLGWdMB24tY0k21oVl4yJWUGtPKzqDuGYtkB4=)
                          3: eYIU0lgIGbeRVl2e4lvrfNL_AGI.roa (hash: +E4U6Wwkj+cuvgvS94OAueMPchhfOUf2dvj5+HfKbkc=)
                          4: jx2IrehBfGIoz07HNrnJbRx1Ie8.roa (hash: elgg0Zp0doZnyv6v09SX8lS/zVSrNYK42ElsTeAO/Dk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6a:5a:17:03:67:2a:a6:98:a3:57:76:a4:e3:56:9d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279fdf3e491ef66d77714389ae36f045715f2768
        Validity
            Not Before: Oct 23 20:00:51 2026 GMT
            Not After : Oct 24 20:00:51 2026 GMT
        Subject: CN=95e48f0b76cafdfa4100bdd6868bc5a723e0478d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:ab:f6:a4:78:2c:65:65:0c:0a:89:91:2d:
                    4e:8f:c1:a5:88:dc:c6:65:34:10:ab:3b:46:20:83:
                    6b:f7:c1:ab:af:d4:c7:bc:ab:89:b8:4c:f8:3c:88:
                    e7:d8:35:bc:72:25:fd:c2:dd:05:0c:67:ee:bb:cf:
                    4b:a1:21:92:50:ad:23:df:01:79:84:29:2b:b2:50:
                    93:e5:db:8a:cb:ac:15:ba:58:10:f1:ca:31:c2:7b:
                    9d:17:8d:15:97:fe:3e:c8:3e:91:b5:53:55:82:26:
                    8b:f7:b4:68:5c:9b:77:a1:fb:a5:37:ee:60:13:75:
                    55:9e:fc:af:61:4a:2f:ee:35:e3:2d:a1:c7:56:5b:
                    3b:c4:e8:5b:a1:01:80:af:51:c6:7b:9b:2f:1a:f4:
                    10:a8:20:45:2b:66:04:1a:3a:79:8c:7e:db:98:9c:
                    68:c1:4a:ac:62:d7:b2:e4:bf:1f:c7:0d:20:27:d4:
                    fb:a9:bd:11:19:33:c0:ab:eb:f7:40:67:2d:f4:a0:
                    41:8c:d5:6b:f0:da:0c:d1:91:21:a6:7f:28:d3:73:
                    e0:95:9d:6d:cf:e2:a5:5b:90:af:d0:a8:40:fc:4c:
                    6e:c6:6b:9a:c8:2d:4e:73:c2:46:8c:67:f1:64:e0:
                    5c:f4:3a:3d:fd:10:98:65:c1:4f:e8:06:d3:62:af:
                    9b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E4:8F:0B:76:CA:FD:FA:41:00:BD:D6:86:8B:C5:A7:23:E0:47:8D
            X509v3 Authority Key Identifier:
                keyid:27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:80:e0:bf:c9:d5:9c:26:35:b3:46:08:b9:b2:30:a7:de:3b:
         3f:4e:5f:f0:2e:d5:5e:26:bc:38:95:af:cb:d3:e4:0d:2c:8e:
         98:c4:4f:9d:ae:83:c3:96:1b:ce:43:18:6a:c0:0d:ee:57:97:
         e4:fc:33:2b:80:af:9a:17:7e:49:a0:f9:3d:92:cb:04:9e:b0:
         43:3b:f6:a9:fe:b6:aa:4b:74:3f:6e:56:1a:09:25:f0:1a:3c:
         e5:ef:81:1d:6f:bd:64:43:7b:60:8e:df:50:3d:b3:22:da:c2:
         1d:a7:ac:1b:f1:6c:36:98:e9:eb:83:4b:6d:38:2b:58:47:80:
         b0:cf:0d:d3:e1:9b:dd:a8:fa:1c:f8:31:32:09:73:e6:df:41:
         9f:9b:c2:5d:19:ba:62:67:ae:c9:5f:c3:5f:5e:1b:71:ed:c3:
         15:f9:dc:0c:42:95:0d:13:e8:a9:14:3f:18:6a:66:c2:3e:93:
         23:6b:2b:ae:e5:a6:c4:bf:f8:47:f4:da:93:a3:56:72:62:a4:
         c9:d4:f2:d9:9f:41:c2:0b:87:ff:00:f4:7d:a2:14:05:94:a4:
         3b:55:73:3d:39:f0:95:b1:58:c4:c1:6c:e9:f1:1d:05:fd:47:
         10:82:c7:5e:7e:f6:29:1e:73:f6:2b:2a:6b:c4:2a:04:b0:b6:
         15:1d:37:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:51:23 2026 by rpki-client