Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
File:                     J4YXdA7NlbcE2pel-eU8AxFEQms.mft (raw, json)
Hash identifier:          zyhACYLqks4dxq3y8Zzd3PreEjvDH1yjrYpumZAZ1MU=
Subject key identifier:   DD:63:E6:ED:58:DB:39:F2:AC:0A:AD:33:EF:99:EB:8C:C9:EF:FB:95
Authority key identifier: 27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
Certificate issuer:       /CN=278617740ecd95b704da97a5f9e53c031144426b
Certificate serial:       01A14ACF9CAA621A65AF6A73208E45E8AEC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
Manifest number:          1654
Signing time:             Sat 17 Oct 2026 17:01:22 +0000
Manifest this update:     Sat 17 Oct 2026 17:01:22 +0000
Manifest next update:     Sun 18 Oct 2026 17:01:22 +0000
Files and hashes:         1: J4YXdA7NlbcE2pel-eU8AxFEQms.crl (hash: Cnyieb2ZWfIE1/rhtHXLP+GopGZKKiCNGdj7rxIEP+g=)
                          2: hv5F2fKm7cZ-fqlTGhS4HLwa_Mo.roa (hash: 3e8QQ5wpWIE1xn2kF+A/CiSMbxQICMGVp/zM+nv9PN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4a:cf:9c:aa:62:1a:65:af:6a:73:20:8e:45:e8:ae:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278617740ecd95b704da97a5f9e53c031144426b
        Validity
            Not Before: Oct 17 17:01:22 2026 GMT
            Not After : Oct 18 17:01:22 2026 GMT
        Subject: CN=dd63e6ed58db39f2ac0aad33ef99eb8cc9effb95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ae:54:24:e3:a0:ad:aa:18:a6:39:ba:3d:75:
                    8c:f7:9d:e1:04:82:95:ca:63:78:5c:03:bd:a3:96:
                    49:b1:27:60:b5:c1:b3:fe:07:39:1e:35:2f:fc:75:
                    74:86:d4:d0:2b:16:51:b0:25:c5:7a:6b:eb:96:d5:
                    bb:bd:6e:d2:da:6b:16:93:d3:5b:ea:d0:d5:47:1b:
                    1f:5e:30:e3:9f:be:eb:bd:1f:3f:ca:a9:8e:d9:f2:
                    8e:24:63:a5:b4:ef:16:80:bb:2b:c1:41:7f:91:08:
                    8d:38:7d:32:00:63:59:68:48:df:a3:d0:06:09:5e:
                    28:5a:29:1e:15:71:a9:4c:d8:81:a9:60:f2:b7:89:
                    2c:c8:9b:06:8d:37:44:03:0e:63:6d:6a:85:64:1a:
                    94:b3:5d:42:96:0f:73:62:1e:f2:39:c6:21:ee:68:
                    ea:74:ff:41:e4:d9:af:d0:9a:75:1e:4d:16:a1:f4:
                    e3:bc:9f:25:52:56:69:ea:c7:4f:7c:26:94:42:18:
                    1e:b8:26:c2:f9:ce:e0:91:a5:bd:0b:c7:05:ed:30:
                    ee:03:c3:74:71:e0:95:ad:ed:69:f1:dc:a3:e7:41:
                    0f:66:4a:3f:af:24:3e:19:f3:ef:ab:2b:f2:54:21:
                    d9:f2:86:ee:48:db:2c:fc:4d:87:70:b8:0d:70:4f:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:63:E6:ED:58:DB:39:F2:AC:0A:AD:33:EF:99:EB:8C:C9:EF:FB:95
            X509v3 Authority Key Identifier:
                keyid:27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:eb:17:c2:71:a3:6a:12:8f:7c:8e:62:12:e8:84:f3:5a:85:
         aa:b4:6c:ac:85:de:67:98:76:6a:4c:47:cb:d9:de:8e:46:6c:
         af:ce:3f:86:b3:a9:24:4c:b7:df:ce:30:89:99:d1:62:bf:09:
         59:f1:5c:fc:22:13:d5:97:51:2f:58:06:84:07:f6:a0:a6:0f:
         7f:42:68:1e:fc:d5:6d:c4:36:b8:76:62:68:67:6d:99:44:df:
         a2:f9:f7:bc:58:0f:77:06:35:76:56:18:f9:f7:8e:32:99:46:
         a7:22:67:ad:e9:8b:bc:51:0f:29:fe:3f:4e:0a:45:af:6e:6a:
         4b:21:ca:23:4a:82:09:40:55:b4:4c:56:37:ee:3d:b3:38:63:
         e7:7b:9d:30:ad:33:85:69:1b:d1:20:50:e1:27:7f:ce:04:78:
         e1:6a:43:2e:20:88:70:73:00:25:a0:6b:28:f1:f4:76:a6:19:
         fd:a5:58:8e:4c:f0:4d:57:9c:3a:64:f3:28:42:46:f7:bc:24:
         76:af:ff:1a:d8:c8:32:10:22:4a:51:ed:c2:c0:99:23:fa:f7:
         b0:5b:d8:5c:5b:61:16:52:61:a0:d5:39:19:36:9a:78:4d:38:
         b7:d6:be:ae:b3:df:14:b7:75:b5:b9:e3:6c:ca:7c:9b:d5:5e:
         72:8f:ab:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:28:52 2026 by rpki-client