Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File:                     JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier:          s6o0DlyvrRomPXO9dS7mTtzlFYo7HhVhN1+290FSfRw=
Subject key identifier:   9F:00:D0:81:41:3C:72:F2:16:15:7B:E9:64:7C:3C:C1:94:27:94:4B
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer:       /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial:       01A0D15BF36484FD33110AC3A9B7F6960416
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number:          1627
Signing time:             Thu 24 Sep 2026 03:00:59 +0000
Manifest this update:     Thu 24 Sep 2026 03:00:59 +0000
Manifest next update:     Fri 25 Sep 2026 03:00:59 +0000
Files and hashes:         1: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: 4Q+MSayWROBlaX2H87ytB27LJLX/941C56TZf2mdE1U=)
                          2: kJSjLOsWhAHko1FJjBJtE40W7yI.roa (hash: R5x4NpWCvDVLqww0J/ygaTqJQCiT5GP/47DNzH/f1HY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 03:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5b:f3:64:84:fd:33:11:0a:c3:a9:b7:f6:96:04:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
        Validity
            Not Before: Sep 24 03:00:59 2026 GMT
            Not After : Sep 25 03:00:59 2026 GMT
        Subject: CN=9f00d081413c72f216157be9647c3cc19427944b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:29:75:62:eb:9d:2f:a6:0a:05:09:bc:ae:ff:
                    bc:fd:64:22:e4:8d:66:90:4c:ac:08:b7:d8:6f:72:
                    50:70:d7:b0:a4:16:1f:cb:bb:a2:29:f9:a5:bf:86:
                    11:a1:fe:46:3f:36:19:58:02:c2:32:7d:7f:c7:5c:
                    64:2d:c9:72:85:29:f7:f8:07:83:57:7c:dc:e1:6b:
                    1c:3b:eb:c3:25:84:2f:04:5f:1b:9b:31:72:95:3e:
                    2f:91:08:6c:df:0c:5e:1d:0e:79:a2:2e:30:5f:4d:
                    29:73:81:67:f2:d2:ac:79:52:30:e4:93:bc:e1:4f:
                    f5:ee:88:01:d7:4e:b9:c0:1a:b0:ec:45:1e:c1:68:
                    f6:ad:6d:69:89:15:6b:0a:0b:34:88:ab:b5:6f:e4:
                    8f:1e:25:22:24:1c:c4:b8:36:d3:a1:1a:84:4c:e0:
                    2f:d0:7c:d9:53:cb:9f:15:71:de:72:40:48:a4:d6:
                    8a:6a:a5:92:0e:e9:0e:de:ab:a1:c1:e9:18:c3:26:
                    a1:86:09:82:26:0c:d1:70:52:6c:15:00:b7:b0:ec:
                    e3:e5:b2:8a:c5:d0:3f:d7:24:69:72:14:e1:a2:c7:
                    13:0d:b7:a4:10:c5:57:97:4f:1d:50:7a:44:7a:79:
                    42:9e:fb:d6:82:d5:38:28:55:19:31:ed:a0:9b:26:
                    a8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:00:D0:81:41:3C:72:F2:16:15:7B:E9:64:7C:3C:C1:94:27:94:4B
            X509v3 Authority Key Identifier:
                keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c8:98:6b:19:1c:20:9d:1f:f0:11:48:71:ef:79:ac:5d:de:
         81:fe:84:0b:6d:84:5d:0e:7c:ca:77:e0:9a:06:82:3b:c4:1f:
         02:c5:a2:89:4a:8b:0f:4f:83:1e:ec:b7:01:73:34:82:d8:b7:
         68:1b:f6:97:05:f6:eb:8c:4b:b0:1e:57:88:e3:b5:22:fd:c7:
         ce:b7:45:f7:0d:9b:1e:ad:77:c3:bd:09:2d:3f:ea:82:8f:9f:
         59:29:f5:e0:d8:38:1c:c8:34:4e:87:9b:bd:01:0f:52:49:4b:
         62:4f:f3:1c:9c:2e:f0:8c:14:7c:05:1c:0e:09:2c:58:70:a6:
         1e:6b:dd:15:f3:fb:fd:1e:f2:69:0c:44:6d:f7:55:d2:83:d5:
         f7:35:72:ec:28:38:2d:d3:1d:38:07:3c:d2:0f:69:3a:bf:c1:
         b2:f3:ce:e9:b8:90:72:3f:a2:68:76:7b:95:a5:c2:c2:77:a9:
         4a:52:0d:75:f9:44:6d:fe:56:72:ad:b9:9c:7e:ec:4b:2a:40:
         c5:c0:ce:b2:78:0a:bd:4e:aa:13:50:88:93:4e:02:2f:2a:89:
         3e:19:8a:bf:1c:c6:cd:7e:74:f6:38:17:c7:9e:c8:88:ff:d5:
         b0:04:70:51:e8:a4:29:b3:48:1b:94:60:a4:c7:c1:f0:c6:da:
         a8:73:86:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:33:04 2026 by rpki-client