Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
File:                     J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft (raw, json)
Hash identifier:          ovO2pcxPvKwXyr0XnSYmWgIpPrO0LrRVY1Dq5i2dfts=
Subject key identifier:   C3:54:CD:91:45:31:1B:07:F4:35:F6:FD:72:14:3A:22:F4:AD:0E:A4
Authority key identifier: 27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67
Certificate issuer:       /CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
Certificate serial:       01A0CA474E25608EF6C5EBF6F1A0D20D595C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
Manifest number:          0921
Signing time:             Tue 22 Sep 2026 18:01:05 +0000
Manifest this update:     Tue 22 Sep 2026 18:01:05 +0000
Manifest next update:     Wed 23 Sep 2026 18:01:05 +0000
Files and hashes:         1: 9feyUilfSjEo_XLo1dzvl57a9bQ.roa (hash: S8Z16IP2LZ4zVyGQzJuEBOFlT55zoNQXMTP+yqUtyb0=)
                          2: J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl (hash: utBw0YkHb70wQwBRRW6I5V4SxPg9Yv3OMYXzY33K0zs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:47:4e:25:60:8e:f6:c5:eb:f6:f1:a0:d2:0d:59:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
        Validity
            Not Before: Sep 22 18:01:05 2026 GMT
            Not After : Sep 23 18:01:05 2026 GMT
        Subject: CN=c354cd9145311b07f435f6fd72143a22f4ad0ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:0a:a4:8a:27:1d:4e:e8:4f:1e:41:b9:16:
                    9e:f1:62:9f:b1:85:9c:c1:a4:0b:fd:93:38:b3:bb:
                    74:f1:66:06:8b:0d:c2:c6:5a:4f:b9:44:bc:a6:15:
                    06:68:4a:e7:3a:e1:bc:5b:d1:d0:f0:c1:ac:3a:4f:
                    b1:a9:53:ed:cc:4b:0f:d7:90:df:18:21:61:02:a7:
                    19:a6:42:77:e6:37:c7:d1:42:5e:e2:6b:f7:12:3b:
                    f7:e1:8b:1b:c1:b1:8d:f3:5f:ee:ec:53:74:cb:20:
                    64:2f:e9:0a:41:63:ad:38:80:c6:f5:d9:e6:25:81:
                    1e:1c:3a:bf:dc:10:54:cf:e2:87:19:f5:93:e7:67:
                    b9:d0:e9:13:e1:df:bf:ee:bb:aa:ae:24:31:9c:31:
                    44:e3:f1:15:11:38:2c:88:eb:f1:b0:e1:1b:af:0b:
                    b0:3c:2b:8d:fa:22:52:30:24:e3:8c:6e:af:a4:5c:
                    ec:d8:03:c9:b1:3d:e5:0f:5f:a4:3d:d9:3d:87:be:
                    f4:e8:33:db:80:70:89:33:5f:15:b4:70:4b:e6:90:
                    d1:d4:a2:c7:ad:10:a3:5a:81:d3:26:0b:f9:2d:98:
                    52:ea:bb:64:f1:91:62:7e:ef:7c:d4:46:c2:bb:0a:
                    30:9b:e4:c7:e2:25:a4:4d:3d:e3:c7:80:6c:5e:06:
                    91:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:54:CD:91:45:31:1B:07:F4:35:F6:FD:72:14:3A:22:F4:AD:0E:A4
            X509v3 Authority Key Identifier:
                keyid:27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:70:93:d2:44:c7:ee:ff:52:f4:e4:43:a7:d6:32:93:bd:2c:
         5c:03:2e:c6:18:d1:6e:00:5f:0e:8b:f8:47:7d:98:ee:26:ff:
         3e:ba:23:8f:dc:64:64:08:1b:6c:0c:e1:8c:63:17:18:62:53:
         e5:84:95:10:55:9b:88:49:41:82:9b:d5:e4:ca:8f:4b:86:0e:
         35:df:6e:a5:bd:0c:fe:4f:e2:5a:47:43:3a:66:2a:50:8d:c2:
         b3:67:d0:a9:d2:19:8a:5e:9d:eb:e1:01:39:f2:da:5a:7a:c5:
         12:77:c3:36:55:fe:1c:bf:d0:b0:23:89:cd:d4:b7:b8:08:42:
         12:74:c5:09:dd:95:1b:5a:77:e5:82:a9:6a:39:80:c9:c1:cf:
         e5:85:b4:6e:79:02:b9:62:90:ce:fb:01:d3:be:41:49:6c:33:
         a9:de:96:37:09:2a:cd:2f:d1:92:79:82:83:b4:7e:e8:92:6b:
         ec:6b:ff:fc:97:1c:8d:fb:23:32:6e:08:40:e4:80:53:18:8b:
         3a:bd:c9:a9:6e:09:82:4b:3a:d6:d3:59:92:7f:5e:12:85:9c:
         35:e9:d6:b4:74:58:23:27:77:c7:f9:ab:e9:77:d6:ae:0b:75:
         a2:55:eb:11:f5:4f:bb:df:94:15:cb:1a:7a:ef:cb:7e:72:6c:
         20:16:58:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:28:49 2026 by rpki-client