Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File:                     J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier:          uGJXl2u/5FD5ARJ5Q1phTAASYQonyHId3SjlRoz3Cys=
Subject key identifier:   37:68:76:21:3A:ED:40:AA:11:53:81:89:4D:15:3C:5E:31:28:CE:E7
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer:       /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial:       01A0BC8B4D99E339994527F7596BDC4D39BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number:          1A6A
Signing time:             Sun 20 Sep 2026 02:00:40 +0000
Manifest this update:     Sun 20 Sep 2026 02:00:40 +0000
Manifest next update:     Mon 21 Sep 2026 02:00:40 +0000
Files and hashes:         1: 1-eXk56W1WcQXJBaon4jYvPO5XKk.asa (hash: 4kMcrktNRWgxl6BULeDgtu/gbF/92oPuNyR3Tirvwvs=)
                          2: 1KQsz8EMeMqO7bc9e9NUCyualHA.asa (hash: K+ABwTOia6am6qcpzwES7lTBokcCgw4GgL9iAZqzKrs=)
                          3: EaAMsvwoHBe4yq1jbHkVSMOCcms.roa (hash: tCewwDnNFA4yqzd0eb5IKas5uAfl5Rr1tmwDJ4VUURI=)
                          4: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: NcQJ6pZz1aC7FeGV0JK2BMTuXuxw5TrjzqRx1cncWPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 02:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bc:8b:4d:99:e3:39:99:45:27:f7:59:6b:dc:4d:39:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
        Validity
            Not Before: Sep 20 02:00:40 2026 GMT
            Not After : Sep 21 02:00:40 2026 GMT
        Subject: CN=376876213aed40aa115381894d153c5e3128cee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:15:59:48:b1:86:b7:ef:ab:ee:72:de:66:12:
                    8e:57:cd:8c:3f:72:c5:b7:36:6d:a9:fc:f1:f6:1d:
                    47:3a:cd:3d:56:ec:78:ff:15:b7:32:3b:6b:e5:c9:
                    98:40:a6:d5:3f:4d:45:88:1f:32:6f:4b:22:fa:94:
                    56:f8:b8:70:07:e9:89:a4:ec:4b:2b:9e:45:76:b4:
                    24:1d:9e:8b:33:5d:5d:c7:e2:4e:2b:29:5e:3c:8c:
                    96:ca:bf:b1:ef:25:39:96:d0:97:e4:3d:7e:c2:4e:
                    7a:de:18:15:2e:f6:97:0a:2b:6c:06:1b:06:5a:8e:
                    ec:cd:c4:3e:83:ae:2a:0a:54:e7:29:29:96:60:51:
                    00:19:46:09:30:6d:39:1e:a6:b4:39:e7:0e:25:99:
                    f2:d3:65:6c:5e:f7:90:8c:1f:ce:01:79:74:de:f5:
                    06:c8:5d:a3:74:cb:39:be:3d:5b:26:60:63:76:aa:
                    89:00:fc:7b:52:9e:ac:b8:bf:5b:46:58:92:ac:fe:
                    4e:7b:0d:d2:71:5b:7e:2a:ef:6f:e5:85:42:6d:d4:
                    3b:dd:11:d1:fd:49:bb:7a:45:70:58:3b:f6:22:d6:
                    a0:3f:c9:77:ca:c2:07:85:ac:5e:1e:cc:01:81:e4:
                    cc:18:c4:41:1a:cb:b7:ef:d4:10:44:61:0d:d7:63:
                    c5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:68:76:21:3A:ED:40:AA:11:53:81:89:4D:15:3C:5E:31:28:CE:E7
            X509v3 Authority Key Identifier:
                keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:82:70:a5:27:6b:a2:6b:33:c0:18:d3:d2:c4:a1:76:c0:d3:
         9c:ce:62:f1:da:b0:b8:69:60:c9:65:3d:d3:55:6b:5b:23:db:
         37:da:95:b4:82:66:f5:18:0b:7b:94:e9:96:5c:22:68:5e:57:
         ce:aa:e0:6f:16:80:f1:74:47:59:01:6c:bb:6a:37:d2:19:00:
         1c:3e:d0:8c:e9:6b:a2:22:1a:c9:11:d1:23:b6:fb:5e:07:10:
         d9:57:41:48:62:41:b3:86:ca:91:7b:fd:34:58:91:18:08:13:
         64:f7:c9:e1:e4:8e:b0:cd:d8:03:42:3b:56:55:7d:30:d1:3b:
         26:f2:c2:88:14:37:42:c3:e8:e5:a4:4a:98:63:08:1b:00:7b:
         83:bf:fc:49:21:79:ee:97:b3:5c:a1:0f:b4:bf:46:9e:99:82:
         1f:2d:9b:12:e7:4d:ed:cb:0d:d5:80:5d:2d:6a:8f:1e:59:05:
         cc:e5:72:d2:16:a7:45:78:e1:ce:b4:05:ba:1b:7a:86:cb:88:
         68:1b:e2:9d:c0:c1:b2:67:ab:3e:0b:87:82:4e:c8:98:50:d9:
         8a:18:16:bd:4e:65:12:53:48:8a:e1:d7:7a:86:9f:83:b6:16:
         48:72:22:4d:09:1f:13:b5:5a:1c:bf:a9:a0:32:8b:17:80:6a:
         50:df:f5:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC8i02Z4zmZRSf3WWvcTTm/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZGYwNDI4MjQyNzNmY2ZmM2YwOTNkMGY5YjFkZWM2OTYw
YmFlNmEwHhcNMjYwOTIwMDIwMDQwWhcNMjYwOTIxMDIwMDQwWjAzMTEwLwYDVQQD
EygzNzY4NzYyMTNhZWQ0MGFhMTE1MzgxODk0ZDE1M2M1ZTMxMjhjZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxVZSLGGt++r7nLeZhKOV82MP3LF
tzZtqfzx9h1HOs09Vux4/xW3Mjtr5cmYQKbVP01FiB8yb0si+pRW+LhwB+mJpOxL
K55FdrQkHZ6LM11dx+JOKylePIyWyr+x7yU5ltCX5D1+wk563hgVLvaXCitsBhsG
Wo7szcQ+g64qClTnKSmWYFEAGUYJMG05Hqa0OecOJZny02VsXveQjB/OAXl03vUG
yF2jdMs5vj1bJmBjdqqJAPx7Up6suL9bRliSrP5Oew3ScVt+Ku9v5YVCbdQ73RHR
/Um7ekVwWDv2ItagP8l3ysIHhaxeHswBgeTMGMRBGsu379QQRGEN12PFyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdodiE67UCqEVOBiU0VPF4xKM7nMB8GA1UdIwQY
MBaAFCffBCgkJz/P8/CT0Pmx3saWC65qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hY2ZmZDYtZGMxZS00ZTBkLThkMjUt
Y2UyMmQ1ZWFiODJmLzEvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hY2ZmZDYtZGMxZS00ZTBkLThkMjUtY2UyMmQ1ZWFiODJm
LzEvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYJwpSdr
omszwBjT0sShdsDTnM5i8dqwuGlgyWU901VrWyPbN9qVtIJm9RgLe5TpllwiaF5X
zqrgbxaA8XRHWQFsu2o30hkAHD7QjOlroiIayRHRI7b7XgcQ2VdBSGJBs4bKkXv9
NFiRGAgTZPfJ4eSOsM3YA0I7VlV9MNE7JvLCiBQ3QsPo5aRKmGMIGwB7g7/8SSF5
7pezXKEPtL9GnpmCHy2bEudN7csN1YBdLWqPHlkFzOVy0hanRXjhzrQFuht6hsuI
aBvincDBsmerPguHgk7ImFDZihgWvU5lElNIiuHXeoafg7YWSHIiTQkfE7VaHL+p
oDKLF4BqUN/1hg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:47:21 2026 by rpki-client