Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.mft
File:                     J9QGnis6k_cQuUMOpksNXsQXP80.mft (raw, json)
Hash identifier:          i+WG4wG4UmxbwjZpy2fzk6mqrOX+K0wXoFroCNbwqP4=
Subject key identifier:   2D:81:1F:6B:C3:25:A1:87:A7:A6:13:A8:30:29:92:BF:4E:C4:A5:41
Authority key identifier: 27:D4:06:9E:2B:3A:93:F7:10:B9:43:0E:A6:4B:0D:5E:C4:17:3F:CD
Certificate issuer:       /CN=27d4069e2b3a93f710b9430ea64b0d5ec4173fcd
Certificate serial:       019FF7FEA92F62D39CBA962366F9C252B93B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9QGnis6k_cQuUMOpksNXsQXP80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.mft
Manifest number:          76
Signing time:             Wed 12 Aug 2026 22:01:29 +0000
Manifest this update:     Wed 12 Aug 2026 22:01:29 +0000
Manifest next update:     Thu 13 Aug 2026 22:01:29 +0000
Files and hashes:         1: 1PS3xn2HlB_EI2o2MOu2IRguZ5k.asa (hash: DdJ9Ve9Dta4cddkV96/sbiGA4xK8D4nCSE99B4jzPGw=)
                          2: HGkIWoXWSJAFqMPKvyGdKZB4SL4.roa (hash: nurfiqGU75vRrs8eoR9CqeesWK96CZD5f0FnSgTblxU=)
                          3: J9QGnis6k_cQuUMOpksNXsQXP80.crl (hash: YwjBTkSNhj5Q8zKis/dHF173b0lATrhPz6Jokk8lOVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9QGnis6k_cQuUMOpksNXsQXP80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 22:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f7:fe:a9:2f:62:d3:9c:ba:96:23:66:f9:c2:52:b9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d4069e2b3a93f710b9430ea64b0d5ec4173fcd
        Validity
            Not Before: Aug 12 22:01:29 2026 GMT
            Not After : Aug 13 22:01:29 2026 GMT
        Subject: CN=2d811f6bc325a187a7a613a8302992bf4ec4a541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ae:5d:fd:56:ea:5a:ee:6b:6c:88:02:36:ce:
                    21:28:0d:16:02:17:fa:9f:bf:31:08:dc:d2:8b:20:
                    0a:b9:ce:6f:22:d0:15:65:cd:c2:b0:17:a2:de:50:
                    00:29:fd:99:6a:26:05:3e:68:0d:92:5e:55:12:4d:
                    54:3e:54:c4:be:4b:08:5a:f2:53:0f:9f:53:88:94:
                    87:aa:0f:df:8e:3f:06:40:b1:d0:63:72:67:1d:7a:
                    09:e4:e9:30:6d:b0:31:2b:37:2d:53:d3:34:08:21:
                    b5:f3:40:fa:3e:41:b6:e7:ae:46:26:78:de:e7:15:
                    26:97:2e:9a:fa:08:46:bd:74:52:7e:dc:e5:4b:8f:
                    b1:18:d4:d1:f4:b2:a9:7a:bb:e3:e7:a6:53:d3:ef:
                    0e:74:67:18:61:32:ca:81:cd:f8:79:c2:f6:8d:1c:
                    ae:32:21:02:96:34:c6:a1:eb:92:21:bb:6d:38:31:
                    c2:ee:16:af:de:d6:3e:8f:22:9d:5d:99:55:8f:b5:
                    b6:71:c2:b0:f3:cf:0a:6d:ad:f2:0b:33:ad:76:11:
                    a8:57:5b:17:b0:61:fe:a2:7e:b0:ac:bf:2e:96:f8:
                    60:5d:02:c1:c3:7a:c2:ca:39:58:c0:7a:0d:5e:b9:
                    57:5b:17:d3:13:b8:06:f3:76:31:fe:ea:63:2e:8e:
                    4a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:81:1F:6B:C3:25:A1:87:A7:A6:13:A8:30:29:92:BF:4E:C4:A5:41
            X509v3 Authority Key Identifier:
                keyid:27:D4:06:9E:2B:3A:93:F7:10:B9:43:0E:A6:4B:0D:5E:C4:17:3F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9QGnis6k_cQuUMOpksNXsQXP80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:bd:31:46:02:e5:47:17:73:a3:6d:e1:af:92:8d:65:06:8a:
         09:16:9a:db:d6:34:86:d6:90:d1:2d:a5:50:6d:e4:e8:ed:e2:
         1f:75:cc:98:e8:ff:91:66:5f:7f:52:a5:68:28:33:7b:e9:01:
         1a:9d:29:ce:eb:0e:19:32:41:83:d9:22:3d:c6:32:ec:8a:cd:
         3e:74:9a:ca:1b:f9:a1:90:8f:a3:05:66:75:92:63:1a:21:d3:
         11:e9:f4:c2:2d:ea:9f:51:0d:71:80:68:f3:4e:b2:80:83:22:
         ab:1a:88:65:6c:56:ae:3a:3b:da:99:79:28:7f:7b:69:34:95:
         68:de:ba:76:59:c5:bc:c1:5f:f2:08:17:1a:9a:4b:04:40:7b:
         0d:4d:17:c2:d5:56:7b:74:46:36:17:4c:f6:4f:d1:ca:13:75:
         f1:04:85:ce:cb:5c:eb:97:09:64:a1:a6:74:dc:d2:e2:50:34:
         9f:4f:e5:b0:5a:6e:86:fc:54:0b:1c:50:db:3f:b7:fe:36:e3:
         67:58:c7:bd:a3:0d:fc:2d:71:49:9a:75:98:17:1e:0f:97:99:
         dc:d6:f7:d2:82:78:31:38:ff:d6:19:2e:6f:52:18:78:17:8b:
         9d:69:0b:59:d2:73:5a:99:60:b7:98:9e:29:c5:e1:12:ad:d2:
         2c:86:df:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:46:13 2026 by rpki-client