Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft
File:                     JQQakk7oOTLBjogOQerd-nzyy7M.mft (raw, json)
Hash identifier:          6ibWYXfjkv6Z64trI9UkdwR6ACh4W6dMJ+SFk6lKsIc=
Subject key identifier:   A5:A6:4B:B1:06:96:36:EB:BE:72:AF:F1:42:3C:FE:30:C9:EA:16:AA
Authority key identifier: 25:04:1A:92:4E:E8:39:32:C1:8E:88:0E:41:EA:DD:FA:7C:F2:CB:B3
Certificate issuer:       /CN=25041a924ee83932c18e880e41eaddfa7cf2cbb3
Certificate serial:       01A12EB3F2E0EFC056A5961EF9775DA2943A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JQQakk7oOTLBjogOQerd-nzyy7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft
Manifest number:          0116
Signing time:             Mon 12 Oct 2026 06:01:47 +0000
Manifest this update:     Mon 12 Oct 2026 06:01:47 +0000
Manifest next update:     Tue 13 Oct 2026 06:01:47 +0000
Files and hashes:         1: JQQakk7oOTLBjogOQerd-nzyy7M.crl (hash: koRsuK+55NSt3FqfSv686G/u/siiU6nh54cgojFCGWE=)
                          2: gqBVZEVuiZ-zx9jxMYipRTJwia4.roa (hash: j0pbo/Vqg06cGHRaMHKMNgMf3A2mm2wCn/7xVagvqms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JQQakk7oOTLBjogOQerd-nzyy7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 06:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2e:b3:f2:e0:ef:c0:56:a5:96:1e:f9:77:5d:a2:94:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25041a924ee83932c18e880e41eaddfa7cf2cbb3
        Validity
            Not Before: Oct 12 06:01:47 2026 GMT
            Not After : Oct 13 06:01:47 2026 GMT
        Subject: CN=a5a64bb1069636ebbe72aff1423cfe30c9ea16aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:ee:08:55:d4:09:c3:8e:39:2d:c5:96:cd:
                    38:c0:62:2f:32:6b:65:50:28:35:02:3c:c4:34:c8:
                    0b:94:82:c7:d8:7f:91:eb:70:cd:28:8f:9b:b2:15:
                    8a:a0:05:4d:c6:af:39:0e:15:74:34:7d:a1:13:b5:
                    18:3a:b7:04:8b:66:bc:b7:42:53:67:90:bb:b1:12:
                    7b:68:7c:22:9d:c4:da:dd:13:fb:f6:f4:cc:d8:6d:
                    5e:92:c5:50:57:05:90:ba:27:cf:0e:67:e0:0a:2e:
                    20:7c:94:8f:43:90:7b:8b:6f:8f:8c:4d:c9:b5:72:
                    6d:cc:e9:5d:8d:b8:d2:ba:5b:8f:58:0e:f9:d3:86:
                    31:4a:e0:0d:5b:0e:89:ab:e1:81:c8:4d:c7:3b:d6:
                    5e:f0:20:9e:ab:d8:f4:ee:36:50:ee:38:46:f8:76:
                    ba:62:de:2c:35:90:eb:30:f8:5a:18:9c:c0:1c:35:
                    87:84:3e:b8:ee:f6:c6:4d:a5:b2:c8:2b:99:33:f8:
                    5c:f1:60:01:ad:49:f2:8b:83:6e:c7:9b:98:d3:f7:
                    00:dd:f0:09:b9:37:2b:a9:99:c4:af:95:bd:a7:4e:
                    ec:dd:18:3e:ee:6b:12:7d:26:57:40:62:15:ea:16:
                    7f:f4:c7:c2:fc:37:d5:62:4a:6b:bf:ad:58:c7:99:
                    b6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A6:4B:B1:06:96:36:EB:BE:72:AF:F1:42:3C:FE:30:C9:EA:16:AA
            X509v3 Authority Key Identifier:
                keyid:25:04:1A:92:4E:E8:39:32:C1:8E:88:0E:41:EA:DD:FA:7C:F2:CB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQQakk7oOTLBjogOQerd-nzyy7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:67:ab:a7:e3:41:14:25:4c:f1:3e:09:47:ab:93:4a:62:9d:
         ad:3a:b3:01:e5:40:79:6b:6a:2b:de:1d:7e:b8:a7:3d:ce:ac:
         e4:bd:81:f9:82:b0:72:07:c9:cc:79:d4:8e:63:d2:ae:8f:92:
         57:18:8f:9b:21:0d:a1:68:35:06:4c:49:0f:36:8f:98:5e:d6:
         a7:68:2d:02:88:c6:13:b8:36:9f:8a:9a:20:40:29:92:e9:09:
         e3:65:e1:48:9f:ea:28:84:e5:39:ac:49:db:91:89:8b:22:2a:
         bb:6f:41:c5:87:dc:1e:5a:e5:7f:05:0c:76:26:fb:52:ed:ed:
         23:b3:7b:7a:ea:f8:e2:a6:56:7c:bf:b2:36:b9:c3:97:05:dd:
         0c:12:11:73:d0:76:8b:aa:8f:9b:e0:eb:a2:21:3e:ea:29:5a:
         c0:01:7f:62:3d:82:87:8e:08:2a:5b:35:35:03:5c:26:f3:a7:
         e7:9e:42:60:5d:0b:3f:f0:bf:db:9f:0a:c2:32:c9:c2:53:61:
         f3:5a:b3:30:d0:13:47:92:7b:26:c6:7e:f7:ff:57:ac:f3:fd:
         86:d2:e3:91:77:6e:50:d2:0f:e6:37:7e:5d:74:71:14:66:64:
         c8:dc:0f:02:d1:8e:ca:8a:82:a6:eb:21:74:e5:ef:b1:a0:c9:
         ae:c8:b9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:27:05 2026 by rpki-client