Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File:                     j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier:          o0Cai32TCx0hJywsAM4kquS6BzD4/lQS+xaWxtO5OyE=
Subject key identifier:   36:44:11:22:EA:F7:24:1E:A2:C3:61:F1:47:CF:16:D7:2C:3A:21:43
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer:       /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial:       01A0BDD483045FECFEEA59497BB3F1A496D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number:          1A61
Signing time:             Sun 20 Sep 2026 08:00:15 +0000
Manifest this update:     Sun 20 Sep 2026 08:00:15 +0000
Manifest next update:     Mon 21 Sep 2026 08:00:15 +0000
Files and hashes:         1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: n2dE/lN9dMILoa14jDY0tCJliKXC/kzGRdVBXNV8tPo=)
                          2: psZNmPYVql98KxRd5_J9v8TyFDo.roa (hash: 83pmxITkPLNCEyrAljxQNeti1DcWIEULoY0Jkfv3Y08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 08:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:d4:83:04:5f:ec:fe:ea:59:49:7b:b3:f1:a4:96:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
        Validity
            Not Before: Sep 20 08:00:15 2026 GMT
            Not After : Sep 21 08:00:15 2026 GMT
        Subject: CN=36441122eaf7241ea2c361f147cf16d72c3a2143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:10:a9:e6:7d:1a:19:7e:48:8a:81:a0:a1:00:
                    bf:70:61:54:d9:69:ec:0f:b2:a1:69:a7:35:a7:92:
                    73:d3:40:eb:2e:17:6f:ab:46:f6:b8:30:da:4c:0a:
                    6c:62:90:ac:6f:20:af:4d:aa:8f:c8:73:fb:9f:d3:
                    44:a1:58:94:c3:cf:2c:7d:d0:1d:d3:56:1c:b2:f9:
                    10:7f:59:36:58:67:a2:6b:d8:72:c0:92:e7:0c:79:
                    1e:5e:ad:83:09:f1:19:db:ef:61:12:53:f3:dd:98:
                    21:37:fc:49:73:13:70:56:29:c7:d9:9c:24:83:2c:
                    2d:13:b8:f3:55:ce:d9:b1:ea:3b:2f:cd:cb:ad:40:
                    5d:2d:d5:0d:6f:e1:65:3e:97:75:9d:ae:ef:4b:48:
                    1f:2e:4e:f0:a7:7d:eb:e5:4c:14:90:ac:89:29:ff:
                    eb:62:eb:7a:4d:c2:df:97:fa:a1:ca:ab:7a:99:95:
                    59:2a:88:eb:ec:28:b3:ae:1b:af:36:c5:a7:34:11:
                    19:b5:5a:96:9c:77:06:94:e9:08:2e:32:d6:5d:fc:
                    31:28:a6:81:8d:17:9a:55:3e:27:13:b2:28:24:b2:
                    e7:9e:b0:f4:cd:05:43:c3:87:2f:bf:3e:6e:0d:f7:
                    8e:dc:9c:36:25:a9:6c:0c:86:8e:27:d8:06:d5:1a:
                    15:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:44:11:22:EA:F7:24:1E:A2:C3:61:F1:47:CF:16:D7:2C:3A:21:43
            X509v3 Authority Key Identifier:
                keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:88:24:df:55:f6:ef:e8:2d:0d:6d:d8:40:d0:ce:94:2e:01:
         2c:26:9a:67:44:22:a1:3f:db:99:12:52:68:9b:5e:f5:44:7b:
         a8:b6:06:41:de:84:c0:a6:56:9f:ad:98:c6:20:32:5c:bb:52:
         e2:ed:4f:2b:d5:d4:9b:fe:34:07:cd:d1:52:15:95:9c:34:3d:
         34:01:de:8e:54:ac:f2:ec:bd:d1:3a:8f:2e:bc:11:9e:79:c1:
         75:15:b0:a3:4d:98:f9:ac:b1:cb:0e:e0:81:af:1f:99:0b:02:
         de:66:77:35:6c:7d:75:0b:92:f7:99:c5:31:04:0c:89:3f:6e:
         c3:03:19:0c:30:80:67:b7:d7:8f:af:84:31:99:b0:e0:9b:2f:
         94:dc:1a:a5:cb:4c:38:d0:18:7e:c0:d9:29:96:61:f2:1e:a3:
         01:c0:1c:e9:79:f2:fa:ba:fb:cf:b9:58:b1:d2:b8:19:9f:6c:
         69:ad:b8:7b:ec:b8:fd:37:22:29:42:b0:76:a9:e2:fc:09:3f:
         07:48:39:2b:71:82:6e:22:90:5d:83:03:02:3c:cd:08:b6:90:
         37:7c:a1:03:9a:98:4b:0f:79:2c:49:53:4d:ea:89:0c:c4:67:
         cd:9c:cc:96:82:62:9b:d6:5c:26:4d:cf:a7:95:4f:30:12:42:
         ad:ec:e3:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC91IMEX+z+6llJe7PxpJbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZDM4ZmI0ZDNiOWEyYzdjOGZmZjU5NzcxOGM5MDViOWUy
Zjg0Y2QwHhcNMjYwOTIwMDgwMDE1WhcNMjYwOTIxMDgwMDE1WjAzMTEwLwYDVQQD
EygzNjQ0MTEyMmVhZjcyNDFlYTJjMzYxZjE0N2NmMTZkNzJjM2EyMTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxCp5n0aGX5IioGgoQC/cGFU2Wns
D7Khaac1p5Jz00DrLhdvq0b2uDDaTApsYpCsbyCvTaqPyHP7n9NEoViUw88sfdAd
01YcsvkQf1k2WGeia9hywJLnDHkeXq2DCfEZ2+9hElPz3ZghN/xJcxNwVinH2Zwk
gywtE7jzVc7Zseo7L83LrUBdLdUNb+FlPpd1na7vS0gfLk7wp33r5UwUkKyJKf/r
Yut6TcLfl/qhyqt6mZVZKojr7CizrhuvNsWnNBEZtVqWnHcGlOkILjLWXfwxKKaB
jReaVT4nE7IoJLLnnrD0zQVDw4cvvz5uDfeO3Jw2JalsDIaOJ9gG1RoVjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZEESLq9yQeosNh8UfPFtcsOiFDMB8GA1UdIwQY
MBaAFI/Tj7TTuaLHyP/1l3GMkFueL4TNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajlPUHROTzVvc2ZJX19XWGNZeVFXNTR2aE0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iZWFmOWQtNWIyOC00ZGY0LWI2N2Qt
NmE3ZmE4MjI5NmM5LzEvajlPUHROTzVvc2ZJX19XWGNZeVFXNTR2aE0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9iZWFmOWQtNWIyOC00ZGY0LWI2N2QtNmE3ZmE4MjI5NmM5
LzEvajlPUHROTzVvc2ZJX19XWGNZeVFXNTR2aE0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYgk31X2
7+gtDW3YQNDOlC4BLCaaZ0QioT/bmRJSaJte9UR7qLYGQd6EwKZWn62YxiAyXLtS
4u1PK9XUm/40B83RUhWVnDQ9NAHejlSs8uy90TqPLrwRnnnBdRWwo02Y+ayxyw7g
ga8fmQsC3mZ3NWx9dQuS95nFMQQMiT9uwwMZDDCAZ7fXj6+EMZmw4JsvlNwapctM
ONAYfsDZKZZh8h6jAcAc6Xny+rr7z7lYsdK4GZ9saa24e+y4/TciKUKwdqni/Ak/
B0g5K3GCbiKQXYMDAjzNCLaQN3yhA5qYSw95LElTTeqJDMRnzZzMloJim9ZcJk3P
p5VPMBJCrezjDw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:19:54 2026 by rpki-client