Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
File:                     JYlBoze4yhX8rpFvy0IMWN8uC5w.mft (raw, json)
Hash identifier:          iU2aeNALSO+BG0AoibIjX2O+oJuu+HLExVUGn+NoB5c=
Subject key identifier:   7D:48:2A:35:B5:A1:BE:BD:CD:C9:C9:13:3F:B4:60:10:74:EF:DB:4A
Authority key identifier: 25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C
Certificate issuer:       /CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
Certificate serial:       01A11B99BCEEF9B9ECD3395C605BB83E68AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
Manifest number:          028C
Signing time:             Thu 08 Oct 2026 13:00:22 +0000
Manifest this update:     Thu 08 Oct 2026 13:00:22 +0000
Manifest next update:     Fri 09 Oct 2026 13:00:22 +0000
Files and hashes:         1: 1cIJB5t4VNf5k_S4SZQEVA_Gel8.roa (hash: uFnVMc18EiMQKDqx5qFS6Wxo2QGlSjbuLUdYiKMeKAw=)
                          2: JYlBoze4yhX8rpFvy0IMWN8uC5w.crl (hash: S/bDvfUsdU0TZb4xZ4C2QXaohDog6CzwCZxdjCwlXGk=)
                          3: UJipqVvqOrmneDNVOQTLWccD8RM.roa (hash: xUofYKFm/cJYmloG7elECsH0T5bTc28YNW12IlPh/zM=)
                          4: j98UV-BgExyb9adi5erOXscKqog.roa (hash: 88mctdTU6yo8PEQaJDy8QcI7oK95L6LpsJR0cE4Epq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 13:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:99:bc:ee:f9:b9:ec:d3:39:5c:60:5b:b8:3e:68:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
        Validity
            Not Before: Oct  8 13:00:22 2026 GMT
            Not After : Oct  9 13:00:22 2026 GMT
        Subject: CN=7d482a35b5a1bebdcdc9c9133fb4601074efdb4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3e:1c:13:fb:da:ea:f2:8e:f7:67:0c:84:7d:
                    c4:83:48:7a:cd:36:52:fb:06:d2:2b:0d:19:93:56:
                    bc:a9:65:cd:39:89:ba:a8:f9:03:79:90:05:82:9c:
                    b8:80:82:ff:09:6e:4d:a2:7b:12:b1:97:5e:bf:83:
                    e8:bb:82:22:bd:3d:0e:f0:fd:cb:aa:7d:20:b6:c4:
                    5b:fd:d5:41:5b:2e:dc:36:ca:2a:db:db:c0:96:d6:
                    b0:27:b0:70:d8:2c:33:3d:57:7c:b8:3c:c6:de:98:
                    df:02:b8:6d:f5:ea:82:f4:09:d1:e3:20:b1:82:0d:
                    0f:40:a5:78:d3:64:99:7f:3f:07:e8:14:26:4f:84:
                    3d:99:92:3d:89:ec:c5:1a:4d:3d:af:5e:9b:2d:ed:
                    d6:6f:19:f7:04:1c:00:71:e8:5f:22:9c:6e:1d:b5:
                    38:fa:ce:ba:26:d4:9a:bd:4f:72:9d:15:53:37:d6:
                    95:5d:11:0b:8d:42:18:8f:20:a7:20:b8:b5:4d:3f:
                    b8:98:a3:ca:eb:a6:b0:53:0f:62:aa:df:96:2a:96:
                    19:cc:f9:e8:d8:ef:75:46:16:3f:d8:c6:88:93:06:
                    92:ab:0b:84:30:40:91:59:73:de:31:f0:c8:b0:67:
                    b8:aa:bd:71:a0:1a:c9:64:83:7e:23:8a:20:d5:18:
                    2d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:48:2A:35:B5:A1:BE:BD:CD:C9:C9:13:3F:B4:60:10:74:EF:DB:4A
            X509v3 Authority Key Identifier:
                keyid:25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:08:0e:eb:8a:e8:c9:bf:9b:0d:15:d5:6c:c7:b4:df:ec:bb:
         52:0d:c8:66:9d:fa:a2:cf:6a:79:ee:73:95:fe:d9:d2:e9:9e:
         4f:9d:3e:1c:d9:46:24:61:d1:d6:96:c2:bf:f3:09:3d:bd:7c:
         69:b7:70:04:b7:5c:43:3d:21:b2:5e:7c:28:4d:1b:48:3f:85:
         c7:38:f1:2c:e4:ab:fc:09:28:f0:e5:cb:a8:44:85:80:5a:73:
         93:ff:d5:7f:7a:a2:05:39:34:36:5d:fe:7a:4d:c3:95:6b:14:
         6a:11:ac:f7:aa:86:c3:8a:80:40:4f:ea:8d:82:b8:a7:e0:57:
         3d:94:a4:f7:10:33:c5:44:1a:47:d5:59:e9:e6:81:ce:9a:20:
         4e:d1:40:d6:60:f2:5e:13:34:74:c5:cd:73:3b:b4:41:ec:07:
         f6:a7:63:ba:5d:4f:f4:1f:60:f1:e4:9b:f0:1f:cb:14:af:c7:
         d4:b5:de:af:c4:79:bf:41:20:22:87:b4:95:63:94:5f:11:b7:
         a2:c2:8a:63:21:cb:63:7c:98:7c:2a:a4:f1:36:16:c8:34:43:
         77:52:13:90:56:f5:36:70:ea:ba:7f:82:3e:eb:20:80:71:06:
         7d:88:db:60:93:16:cd:1c:91:ac:75:73:d4:32:d6:0a:62:6f:
         8e:4a:b9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:30:47 2026 by rpki-client