Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
File:                     jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json)
Hash identifier:          CFYM9b3O6mSlIrArpJVzhVUb3jWtkXnVdLXtNayC1Es=
Subject key identifier:   81:19:2B:8D:09:91:39:50:CE:2E:D1:C7:7C:AA:27:F5:3A:1C:AD:E4
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Certificate issuer:       /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial:       01A03ECE211CF264E388BAF4B2EC3A6D5635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
Manifest number:          1763
Signing time:             Wed 26 Aug 2026 16:01:31 +0000
Manifest this update:     Wed 26 Aug 2026 16:01:31 +0000
Manifest next update:     Thu 27 Aug 2026 16:01:31 +0000
Files and hashes:         1: 17ZzXQIgaPFFjeqMhwt3zOxvx1s.roa (hash: 86lU48qvlXKv6saptuHXqJOZusprYtOpfN/ZmUTRc2c=)
                          2: EozSJCiP9Cygcyge5GyOuN1Brck.roa (hash: FC5zsNMnxd0ekJD3hWuMDKKtr4NZV7IGmew1wZKk3hk=)
                          3: SJ04ay6mMnNqXRQ46nJIK4oxSlw.asa (hash: 2SJn970nGzja/+MwrBnP0LJ7l6DR9foN++GvgJnVlAw=)
                          4: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: hmlBncald3P9CSaLGZzl94J+WLmyak+IoL0fkVg+Y2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3e:ce:21:1c:f2:64:e3:88:ba:f4:b2:ec:3a:6d:56:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
        Validity
            Not Before: Aug 26 16:01:31 2026 GMT
            Not After : Aug 27 16:01:31 2026 GMT
        Subject: CN=81192b8d09913950ce2ed1c77caa27f53a1cade4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c2:a8:ee:dc:88:49:fe:5f:dd:4a:71:05:3b:
                    8a:f2:76:cd:76:68:7c:92:ce:79:49:43:03:5d:85:
                    bd:a7:49:29:f7:3f:8d:31:8b:71:65:a1:36:d8:03:
                    2c:8f:86:b9:84:7b:6f:a2:e8:d5:a6:3a:5a:4e:14:
                    8c:03:4e:b2:67:d3:af:56:f6:e9:16:83:a0:db:a6:
                    fa:d7:9f:cf:c1:99:39:a0:c4:9e:fb:4b:5b:f7:fe:
                    91:67:0c:45:ea:93:96:1b:df:b3:96:96:7c:32:b9:
                    f3:99:d4:3b:f1:0a:59:23:c1:37:3f:2e:7e:06:b5:
                    3f:3c:eb:d2:16:78:1e:ed:1b:3f:e9:6d:6d:96:84:
                    bd:c9:29:ff:0d:4e:aa:21:69:fe:40:ac:da:25:42:
                    3f:e5:67:31:30:9a:91:7d:71:a5:8c:f4:40:bc:cf:
                    cf:39:10:c4:46:5c:dc:2f:1f:e5:1c:5d:43:c9:bd:
                    c9:51:7e:35:ad:cf:d6:ea:61:46:53:60:a6:1f:61:
                    89:60:31:49:d8:7a:aa:2f:25:fb:25:e6:a8:54:db:
                    5b:8e:07:6c:7f:fa:62:24:e9:0f:aa:70:57:0c:43:
                    7f:23:54:cb:19:ba:b9:b1:10:e0:9e:ac:58:7b:74:
                    b0:17:93:02:e7:d0:6d:65:e4:bf:4d:c5:3f:3c:e6:
                    22:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:19:2B:8D:09:91:39:50:CE:2E:D1:C7:7C:AA:27:F5:3A:1C:AD:E4
            X509v3 Authority Key Identifier:
                keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:31:32:d4:69:79:62:ac:d4:1b:0a:ec:4f:24:fa:97:11:62:
         35:3d:08:98:d7:8d:45:17:97:b0:4a:03:76:92:70:9c:db:e1:
         7d:3d:08:b1:6f:cd:c2:56:02:b9:50:65:b6:06:3c:bc:b3:3d:
         1b:1b:c5:a5:66:86:a0:f4:ce:b1:9b:aa:fe:d5:74:eb:55:25:
         cb:e5:84:4b:f4:5f:38:b3:f8:e4:fd:26:3c:bd:84:50:21:67:
         87:b6:eb:94:2d:ff:b6:cb:d4:e6:e6:d0:53:18:7e:8b:59:09:
         ce:6f:90:13:0c:58:ed:04:06:0d:3e:97:b1:98:58:e4:57:51:
         16:7e:ca:4c:36:0d:76:d1:27:48:e9:a1:d1:74:7c:b8:db:86:
         bc:9b:df:ea:d3:e7:cc:95:d7:13:29:a8:88:28:28:df:e5:5f:
         35:91:c3:0a:1d:3c:59:df:2d:75:2b:c7:29:f4:9f:50:ce:b2:
         9f:18:1e:0d:16:f6:65:b8:24:71:34:79:8b:d0:e9:1f:ec:69:
         2e:5e:ee:46:af:ca:9e:cd:90:ed:21:53:3c:46:f2:98:96:fb:
         4b:4d:f9:fb:cb:93:1a:6f:5f:16:35:98:b1:4a:f4:7d:e9:0e:
         6d:0d:67:e9:4b:bf:42:a4:2f:28:dd:8d:50:51:60:36:ed:bc:
         9a:65:f9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:52:08 2026 by rpki-client