Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File:                     jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier:          BmNJrvtlMlnRb9SW0qKM9HsHZjWOizVSFlkhd4v5Wqw=
Subject key identifier:   FF:69:42:37:97:45:7E:C4:79:5B:E4:5C:8F:08:BC:F5:39:9F:27:36
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer:       /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial:       01A13C6ED854DB3694A9A70FBD8F671FFFB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number:          1556
Signing time:             Wed 14 Oct 2026 22:00:59 +0000
Manifest this update:     Wed 14 Oct 2026 22:00:59 +0000
Manifest next update:     Thu 15 Oct 2026 22:00:59 +0000
Files and hashes:         1: 70JHdnkKgsjKCsL3ulG1wQpZGp4.roa (hash: +7UX7nSd4wTkbsTAwwas6oJrJFj4JuJ4qtAQ6S+C8Y8=)
                          2: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: WvHmLpmi7Ak9HlYAGngvvDy/t3Lj06zYMyO0nlCfAOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 22:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:6e:d8:54:db:36:94:a9:a7:0f:bd:8f:67:1f:ff:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
        Validity
            Not Before: Oct 14 22:00:59 2026 GMT
            Not After : Oct 15 22:00:59 2026 GMT
        Subject: CN=ff69423797457ec4795be45c8f08bcf5399f2736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:2e:30:a1:89:ca:b7:1e:30:d8:17:dc:d0:
                    d0:05:25:b7:b2:a7:e6:db:63:9a:e9:e1:cf:e7:e4:
                    ec:bc:c8:59:11:28:42:e9:ea:48:67:00:05:a7:97:
                    75:a7:b6:c1:17:7f:39:5f:c1:69:04:02:65:00:80:
                    4f:b7:c0:1f:d6:4a:09:5d:f0:48:51:5d:dd:bc:d7:
                    8c:7b:79:e5:8c:05:07:21:fc:95:84:de:a6:d0:c6:
                    1b:af:02:48:58:db:06:a6:75:93:8f:80:b1:1a:51:
                    f4:05:b4:68:48:ae:b1:67:a2:80:e4:c8:bb:e4:1b:
                    a3:bf:ce:87:6a:7b:3e:fc:6c:53:6e:d3:59:46:60:
                    e0:a3:02:cb:1a:fd:c1:6d:72:2c:1d:53:4e:75:79:
                    91:e0:ae:57:e5:af:5b:69:77:6a:2b:54:34:02:5e:
                    af:13:9f:03:6e:38:be:bb:a6:cc:f0:3b:5d:43:8f:
                    15:80:7d:f2:54:90:4a:4e:bd:5b:00:79:24:ea:92:
                    ab:6f:dc:5e:42:f0:50:1b:24:9a:0a:78:fe:02:00:
                    a2:5b:a2:ec:c9:67:ce:c2:86:3b:0b:1d:98:3a:09:
                    83:7d:77:24:ea:89:ce:61:94:d1:10:0e:ec:73:34:
                    dc:5e:6d:d2:44:fb:4d:81:41:19:c5:65:8e:ca:06:
                    7e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:69:42:37:97:45:7E:C4:79:5B:E4:5C:8F:08:BC:F5:39:9F:27:36
            X509v3 Authority Key Identifier:
                keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c7:a8:44:f1:a2:90:46:b7:4b:f5:9d:0a:67:2f:26:6c:30:
         88:3a:9e:90:ef:32:02:fb:24:7b:ec:58:b2:3e:56:af:9b:7b:
         46:8b:3c:f3:76:91:a3:38:a2:91:40:35:43:e7:68:9a:2a:32:
         27:fb:00:30:66:8b:4d:34:6a:3e:8f:92:a7:9e:61:ea:a6:8f:
         a3:b9:37:8e:00:22:72:8d:b0:57:59:ab:59:54:51:39:60:4b:
         d0:12:ec:61:6f:6a:90:72:91:f3:eb:9a:37:33:d2:74:cf:96:
         08:87:4e:31:89:86:c3:61:b0:3b:85:f4:bd:05:1c:3f:ab:f1:
         9a:6c:0d:6e:00:c8:e8:0f:dc:bb:94:f0:c8:17:12:10:16:86:
         c2:94:76:05:a9:07:f4:aa:7c:17:39:ea:b6:57:14:ff:dd:46:
         31:6d:d7:86:d2:fc:6a:ba:58:2a:52:bf:80:7d:6d:ec:26:c1:
         f6:3f:fc:24:92:b8:6b:cf:a8:25:d3:fe:5c:f9:15:24:eb:3f:
         be:1e:7e:37:14:72:5a:5a:c7:b1:26:27:9f:7f:b9:3a:c8:3e:
         5e:43:d6:24:9f:67:39:28:41:ae:cd:73:57:07:51:0b:35:9b:
         b1:62:83:76:90:60:e2:5b:88:57:c6:2c:51:4a:d8:c4:cb:1d:
         e8:49:03:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8bthU2zaUqacPvY9nH/+2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTQwMDNkNjU3ZWNiZTVmOWI2ZjQ5NDdiOGNhNzJhZGFj
ZTlkMjkwHhcNMjYxMDE0MjIwMDU5WhcNMjYxMDE1MjIwMDU5WjAzMTEwLwYDVQQD
EyhmZjY5NDIzNzk3NDU3ZWM0Nzk1YmU0NWM4ZjA4YmNmNTM5OWYyNzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse8uMKGJyrceMNgX3NDQBSW3sqfm
22Oa6eHP5+TsvMhZEShC6epIZwAFp5d1p7bBF385X8FpBAJlAIBPt8Af1koJXfBI
UV3dvNeMe3nljAUHIfyVhN6m0MYbrwJIWNsGpnWTj4CxGlH0BbRoSK6xZ6KA5Mi7
5Bujv86Hans+/GxTbtNZRmDgowLLGv3BbXIsHVNOdXmR4K5X5a9baXdqK1Q0Al6v
E58Dbji+u6bM8DtdQ48VgH3yVJBKTr1bAHkk6pKrb9xeQvBQGySaCnj+AgCiW6Ls
yWfOwoY7Cx2YOgmDfXck6onOYZTREA7sczTcXm3SRPtNgUEZxWWOygZ+DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9pQjeXRX7EeVvkXI8IvPU5nyc2MB8GA1UdIwQY
MBaAFI8UAD1lfsvl+bb0lHuMpyrazp0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjct
ZWIzYzlhMmU3ZWVhLzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjctZWIzYzlhMmU3ZWVh
LzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMeoRPGi
kEa3S/WdCmcvJmwwiDqekO8yAvske+xYsj5Wr5t7Ros883aRoziikUA1Q+domioy
J/sAMGaLTTRqPo+Sp55h6qaPo7k3jgAico2wV1mrWVRROWBL0BLsYW9qkHKR8+ua
NzPSdM+WCIdOMYmGw2GwO4X0vQUcP6vxmmwNbgDI6A/cu5TwyBcSEBaGwpR2BakH
9Kp8FznqtlcU/91GMW3XhtL8arpYKlK/gH1t7CbB9j/8JJK4a8+oJdP+XPkVJOs/
vh5+NxRyWlrHsSYnn3+5Osg+XkPWJJ9nOShBrs1zVwdRCzWbsWKDdpBg4luIV8Ys
UUrYxMsd6EkDWA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:15:23 2026 by rpki-client