Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
File:                     jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json)
Hash identifier:          wRS7zpQ1172lEfMV/B+UEPPlVU78hSH2N0VG1ndjV9M=
Subject key identifier:   47:40:B4:4D:80:DE:30:B9:46:BF:8F:39:2F:AD:0F:92:22:93:5A:69
Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
Certificate issuer:       /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Certificate serial:       01A1AA15522DA0FD7D808098A795242E6365
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
Manifest number:          1AE2
Signing time:             Thu 05 Nov 2026 05:01:26 +0000
Manifest this update:     Thu 05 Nov 2026 05:01:26 +0000
Manifest next update:     Fri 06 Nov 2026 05:01:26 +0000
Files and hashes:         1: AR0snb2WiBVjty2iEPK8q39KPZo.roa (hash: LRggRbjFzoUTOK1TTVfP+3KeKjujfqsLku1ZGYI58wk=)
                          2: F13pIjKslpUrOUGbjMV17CmkLWk.roa (hash: szqGRHA6NM3mWFGyDMMW+gpH0BvtN2cqf2OUgq/zN28=)
                          3: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: X/AWINUtFEX+pb557e8GdRymXP+oeUHYvmjgVmLM54Q=)
                          4: olmoqfzN7VFo-bxr_cK8ARodjJ4.asa (hash: DUkoDNJ/61GCLycft48nLmtAR70B8+qDz8ujkdLUM/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 05:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:aa:15:52:2d:a0:fd:7d:80:80:98:a7:95:24:2e:63:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
        Validity
            Not Before: Nov  5 05:01:26 2026 GMT
            Not After : Nov  6 05:01:26 2026 GMT
        Subject: CN=4740b44d80de30b946bf8f392fad0f9222935a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:35:35:6b:16:2c:e2:11:cd:00:9a:7f:fb:99:
                    3a:3e:34:b5:2c:55:c4:73:90:7c:ba:16:fc:80:60:
                    55:30:78:6f:a4:b8:19:67:ca:3f:e3:2e:15:ac:5e:
                    bb:80:b8:a6:67:cd:18:28:9d:cc:08:c0:7e:ca:1d:
                    2d:12:01:af:b9:e2:92:3a:1f:0f:49:c8:78:be:07:
                    bf:ff:13:f7:09:91:06:ad:7c:4b:ef:41:c7:4b:f3:
                    9f:f3:0a:77:fc:9a:b9:e7:b9:a3:2d:c6:8a:42:37:
                    c6:ae:25:75:03:30:b4:05:d7:6c:42:9c:0f:af:3f:
                    0c:1f:58:5b:40:6e:d2:0e:ec:35:7c:0e:8b:ff:99:
                    8c:a5:ba:59:9f:fd:a8:aa:ba:b3:07:96:5d:7d:d6:
                    f0:71:59:6a:ce:e2:4f:80:eb:bb:4b:d8:bc:ab:e2:
                    3c:f3:8c:cf:55:e5:71:23:e3:56:34:bf:6e:c4:83:
                    06:12:7c:91:97:ea:ff:48:4f:5d:44:ca:2f:40:3e:
                    17:f9:fb:26:e4:a6:a8:be:87:e3:fd:8d:01:0f:87:
                    46:41:71:14:52:71:0f:d5:ed:6a:ac:98:9e:13:90:
                    da:af:fb:27:b8:37:09:6f:01:f0:29:ed:84:8c:13:
                    2e:6c:b2:aa:ed:6f:b3:94:e5:b4:80:a6:c9:80:7c:
                    61:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:40:B4:4D:80:DE:30:B9:46:BF:8F:39:2F:AD:0F:92:22:93:5A:69
            X509v3 Authority Key Identifier:
                keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:2f:78:1b:2f:8e:99:29:78:8d:01:b3:33:6b:a0:d9:7f:b3:
         ed:72:a9:03:1a:a2:0c:66:65:c2:b6:c8:bb:16:c6:ab:0e:21:
         76:c9:ab:2c:07:28:7f:b4:2b:2e:72:0b:6f:84:65:a9:88:74:
         22:b7:5d:fe:1a:72:a2:78:cd:83:0b:7f:bc:b4:83:51:d9:17:
         40:f0:87:87:90:3a:a1:c1:94:84:cb:0d:06:1c:de:90:91:b7:
         e3:10:5a:e1:ca:1a:fb:8e:53:74:39:0d:b0:da:7d:51:b6:da:
         da:06:32:d4:19:b4:97:bd:a5:ff:0d:29:ae:f2:b2:c7:13:91:
         a8:0a:68:5a:e1:c6:8b:68:54:75:90:ec:39:20:12:fe:2e:a5:
         9e:35:55:50:da:f6:c5:d3:75:8f:41:b8:4e:f4:eb:7b:07:fc:
         5e:b7:42:f6:a3:ff:07:50:02:0c:0c:07:99:b7:32:ef:98:e2:
         e9:dd:61:1d:36:0d:39:2d:64:14:1b:4d:e8:73:db:52:01:36:
         64:be:a3:ee:b7:f0:c3:12:fd:e2:a5:ef:ed:99:0d:a7:f6:1f:
         11:58:97:f9:16:7d:77:42:ae:d2:a4:4b:44:82:02:9e:6e:6c:
         cd:c8:1c:f4:21:d6:67:e0:f8:2e:ce:a9:ce:2d:ec:af:51:bf:
         c7:39:61:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:48:32 2026 by rpki-client