Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File:                     JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier:          CcCFS06cXn48s3vmowEStdllNgmMCe7cowsknCITCcU=
Subject key identifier:   09:1B:20:CC:A5:72:CB:E5:9B:06:65:35:62:36:13:7A:BA:DC:77:B9
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer:       /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial:       01A0D72839DEAD85C2593C90B5FD909560E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number:          162A
Signing time:             Fri 25 Sep 2026 06:02:12 +0000
Manifest this update:     Fri 25 Sep 2026 06:02:12 +0000
Manifest next update:     Sat 26 Sep 2026 06:02:12 +0000
Files and hashes:         1: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: jkNs4AwKv6HZdSKXkLJJl/SWr4aQYp3d6+Z2En3xz5c=)
                          2: kJSjLOsWhAHko1FJjBJtE40W7yI.roa (hash: R5x4NpWCvDVLqww0J/ygaTqJQCiT5GP/47DNzH/f1HY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:28:39:de:ad:85:c2:59:3c:90:b5:fd:90:95:60:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
        Validity
            Not Before: Sep 25 06:02:12 2026 GMT
            Not After : Sep 26 06:02:12 2026 GMT
        Subject: CN=091b20cca572cbe59b0665356236137abadc77b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:42:8d:fd:63:f0:1b:c4:50:cd:ec:30:5e:5e:
                    61:9e:18:c6:ca:49:23:50:8e:be:f6:a0:de:c1:21:
                    a4:a6:ac:8e:b5:90:eb:fc:df:3b:77:b9:4d:f8:cb:
                    40:69:d8:6a:88:41:37:f6:9b:7f:dd:4a:2e:b0:75:
                    26:a3:e6:19:2e:bf:fc:68:4b:a8:42:f1:2f:09:07:
                    48:5c:cd:bb:72:e0:8b:c3:1f:1f:6d:11:d9:f5:12:
                    81:11:4b:3d:5e:ff:af:08:fd:ee:29:3b:37:d3:c4:
                    20:c4:09:b7:a9:6b:f3:9d:5a:b3:9f:e1:5a:9e:e8:
                    61:3d:bc:be:ff:f6:10:c2:d4:21:e3:30:ca:c0:cd:
                    c8:8d:88:04:3e:0f:78:ed:a8:f2:a9:06:38:19:cc:
                    3a:59:f3:5e:f8:0b:9c:3f:67:e3:9b:cd:89:98:67:
                    32:52:43:18:80:62:50:63:51:99:73:4a:5e:2c:c9:
                    2b:36:63:83:c0:de:ee:a6:9e:ea:64:d3:97:19:ca:
                    16:db:fd:4f:2b:47:96:5b:29:e2:44:1e:e1:cb:ad:
                    be:2a:76:aa:d9:49:56:1a:21:d9:5b:85:a3:9d:6d:
                    80:97:2d:98:29:e8:3c:4e:e9:b9:85:38:2c:00:8b:
                    88:d7:58:97:5c:24:f6:2a:71:61:50:c4:90:3d:a8:
                    85:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1B:20:CC:A5:72:CB:E5:9B:06:65:35:62:36:13:7A:BA:DC:77:B9
            X509v3 Authority Key Identifier:
                keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:98:fd:87:2e:20:d0:be:a8:57:ea:b3:02:79:36:02:1b:d2:
         49:49:a7:3e:89:bf:c8:7e:32:8a:30:0d:cb:1f:6e:3b:d2:5c:
         4a:20:b4:c1:d3:d6:b0:47:3c:3c:58:4b:b2:6f:92:5a:36:92:
         88:e2:f9:24:98:97:a2:ef:a8:e5:81:83:16:c8:db:02:6e:ac:
         10:8b:00:53:5d:95:8d:19:04:05:35:15:77:ad:40:6f:2b:74:
         74:d3:f8:c5:cc:b7:7e:7a:2c:de:7e:1a:15:04:3f:00:60:e3:
         b5:3e:d4:cc:fa:04:44:a6:78:9e:8e:77:6f:c5:9a:25:86:8d:
         f1:e5:2c:27:d5:c2:c3:b2:31:0d:4c:c8:3b:a6:86:8f:a6:4f:
         71:24:87:24:c4:03:7e:7b:96:e8:68:a2:a9:92:8f:26:5d:cf:
         92:ca:bd:09:45:1c:4c:16:d2:c9:74:e2:f5:30:7e:5e:4c:9e:
         0b:09:f8:fb:a0:12:83:fd:97:5b:74:a4:11:60:11:3a:04:b3:
         0c:3d:5d:cc:1e:2c:98:22:ee:7e:22:9a:4a:56:b3:58:f5:24:
         a6:22:12:88:3d:c3:cd:48:7d:e6:a0:c0:00:14:63:99:3c:f8:
         e0:38:3a:7a:2f:15:34:f9:6c:27:85:c7:de:c2:03:55:17:c3:
         f8:69:f6:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXKDnerYXCWTyQtf2QlWDmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YTk4YjYxMjVmNTI0M2UzZWQ4MzUwMTU5NjdjZGRiOTcx
NDhkZjEwHhcNMjYwOTI1MDYwMjEyWhcNMjYwOTI2MDYwMjEyWjAzMTEwLwYDVQQD
EygwOTFiMjBjY2E1NzJjYmU1OWIwNjY1MzU2MjM2MTM3YWJhZGM3N2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEKN/WPwG8RQzewwXl5hnhjGykkj
UI6+9qDewSGkpqyOtZDr/N87d7lN+MtAadhqiEE39pt/3UousHUmo+YZLr/8aEuo
QvEvCQdIXM27cuCLwx8fbRHZ9RKBEUs9Xv+vCP3uKTs308QgxAm3qWvznVqzn+Fa
nuhhPby+//YQwtQh4zDKwM3IjYgEPg947ajyqQY4Gcw6WfNe+AucP2fjm82JmGcy
UkMYgGJQY1GZc0peLMkrNmODwN7upp7qZNOXGcoW2/1PK0eWWyniRB7hy62+Knaq
2UlWGiHZW4WjnW2Aly2YKeg8Tum5hTgsAIuI11iXXCT2KnFhUMSQPaiFvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkbIMylcsvlmwZlNWI2E3q63He5MB8GA1UdIwQY
MBaAFCapi2El9SQ+Ptg1AVlnzduXFI3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iZGJmYjAtZjkxNC00MGQzLWIyZTIt
YjkxM2U1OTY3MDdlLzEvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9iZGJmYjAtZjkxNC00MGQzLWIyZTItYjkxM2U1OTY3MDdl
LzEvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJj9hy4g
0L6oV+qzAnk2AhvSSUmnPom/yH4yijANyx9uO9JcSiC0wdPWsEc8PFhLsm+SWjaS
iOL5JJiXou+o5YGDFsjbAm6sEIsAU12VjRkEBTUVd61Abyt0dNP4xcy3fnos3n4a
FQQ/AGDjtT7UzPoERKZ4no53b8WaJYaN8eUsJ9XCw7IxDUzIO6aGj6ZPcSSHJMQD
fnuW6GiiqZKPJl3Pksq9CUUcTBbSyXTi9TB+XkyeCwn4+6ASg/2XW3SkEWAROgSz
DD1dzB4smCLufiKaSlazWPUkpiISiD3DzUh95qDAABRjmTz44Dg6ei8VNPlsJ4XH
3sIDVRfD+Gn23Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:54:52 2026 by rpki-client