Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
File:                     JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft (raw, json)
Hash identifier:          2E8oHxvyVRXwT4qs3wSP842fhObc67ETMCkD9eoRRuo=
Subject key identifier:   80:07:47:82:EF:31:12:90:EE:9E:2B:0D:58:7C:0D:C4:2B:8B:FA:71
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Certificate issuer:       /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial:       01A185D1B01D796590F5BCACC83007769459
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
Manifest number:          15A4
Signing time:             Thu 29 Oct 2026 04:01:14 +0000
Manifest this update:     Thu 29 Oct 2026 04:01:14 +0000
Manifest next update:     Fri 30 Oct 2026 04:01:14 +0000
Files and hashes:         1: 1-wqXuXVjU4DK7DThoDM4xKkLzpA.roa (hash: Ysd+kwqFCaatF0B+CxMd/0KKzo486Kn7yiW2Q4tdeXQ=)
                          2: 5e0tqH24BTM03yiq8eWs7gQhfjU.roa (hash: 2dooK4E+vB8Vi+8KxuvklQIHFbXhQITTT/Vg0tuOqZ0=)
                          3: BAVWZ2GqddVuzhP06KD0A_bCtt4.roa (hash: eKvOsbHOl1mbbSCZG1SoTdZdmz2aVvIhgRs7YLzoCNw=)
                          4: JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl (hash: MMwBhTFrCAYCamEjbJ/5d/cfLXUI+YkodkoUWj8gjFY=)
                          5: obhZjPoFU0GF5aoDtx8pszyeQNo.roa (hash: DtLP/BpnbtJiMnxxKHcSTdBX7T/DtG/NN3abv8oUzzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:85:d1:b0:1d:79:65:90:f5:bc:ac:c8:30:07:76:94:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
        Validity
            Not Before: Oct 29 04:01:14 2026 GMT
            Not After : Oct 30 04:01:14 2026 GMT
        Subject: CN=80074782ef311290ee9e2b0d587c0dc42b8bfa71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:7c:d1:09:f3:7e:df:b9:ea:6f:26:19:a1:
                    55:34:2c:20:04:69:07:f1:39:12:4c:54:73:f6:02:
                    70:55:23:f8:9c:a2:cd:fd:78:eb:ae:6d:1d:a5:fd:
                    5d:ad:a0:3d:31:75:23:e5:86:13:b2:a3:5e:ff:03:
                    c5:74:f9:b6:b9:58:0c:09:09:68:30:f7:9c:98:d3:
                    a3:48:ff:76:e4:d6:1b:5a:d0:f4:a7:4e:27:6b:ae:
                    7e:6a:06:70:cf:02:1c:9a:55:61:74:a4:0d:50:ad:
                    f7:e8:ef:df:9a:8e:0d:f4:b8:a1:dd:3b:dd:12:3c:
                    1e:73:2d:57:03:3d:8a:fa:55:90:de:d5:97:10:35:
                    35:c4:23:aa:46:52:df:df:11:ca:89:0a:a7:1a:0b:
                    37:50:c7:2f:ae:31:f3:04:a0:fa:e2:0b:6d:31:e5:
                    0c:eb:8b:a6:3b:1b:6a:95:9d:b1:90:96:bc:dd:8e:
                    eb:8b:a9:9f:ff:f7:89:20:e1:dd:89:d8:66:34:39:
                    8a:6d:a0:5a:bf:1e:40:0f:c8:2d:32:df:29:c9:97:
                    e2:37:c2:3d:c2:99:af:c6:21:91:4e:d1:9e:75:08:
                    33:bf:64:08:1f:52:ea:bd:ea:da:fc:5e:69:60:49:
                    9e:af:d4:5e:57:c0:c1:8b:d6:95:bc:64:94:88:09:
                    82:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:07:47:82:EF:31:12:90:EE:9E:2B:0D:58:7C:0D:C4:2B:8B:FA:71
            X509v3 Authority Key Identifier:
                keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:84:5e:4b:0b:40:85:86:f8:d6:85:23:17:ef:87:ae:63:ce:
         2b:97:5a:9c:f0:67:07:b2:c5:19:e1:6c:20:98:50:48:61:21:
         4e:24:3a:00:6c:70:35:d5:b7:dd:0a:e6:c0:55:eb:06:97:68:
         01:d2:fc:e8:6e:fc:70:f2:4c:0e:d9:07:99:22:fa:40:72:3b:
         fd:b3:1d:5f:8a:64:fc:d2:52:c8:8e:8b:71:26:49:fb:94:a5:
         b3:bf:50:39:3c:24:6f:33:68:1f:5e:48:7c:0d:05:ee:5a:c2:
         f4:67:ab:96:9c:6f:d9:14:02:57:cd:05:16:26:a6:2f:12:99:
         83:5e:ec:45:ef:7b:dc:25:03:e3:00:48:fa:1a:4a:72:15:4f:
         31:af:c4:c4:9f:ca:1a:11:15:17:ea:a5:c2:ca:e8:d1:da:b7:
         41:47:b5:25:cc:71:ff:ce:01:9a:bf:29:e8:c7:0b:67:2c:f4:
         63:49:99:05:c8:9d:f0:df:91:8b:57:26:50:6f:b1:7f:f0:08:
         6e:ac:9e:4c:35:f8:b9:d4:02:de:46:53:4f:08:68:cb:e0:c3:
         62:ac:d9:89:45:26:3f:ce:8c:c8:27:65:f2:84:91:ff:42:2b:
         cb:70:e4:6d:f3:98:d0:21:28:33:c1:3d:99:85:e4:82:6b:97:
         52:cd:cd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 09:36:42 2026 by rpki-client