Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
File:                     J97R2QxNUraHECO8cSltCKmMTNs.mft (raw, json)
Hash identifier:          V/CcHiL8FnKZ4Nh0LuL2PH2YtUjEIRUrPyDp1wCdbAM=
Subject key identifier:   1C:F2:E7:DE:4C:15:F2:25:65:EC:5D:E5:9C:90:E4:45:8D:AA:04:14
Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
Certificate issuer:       /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Certificate serial:       01A0E7402D02101C23856AC075F60133C59D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
Manifest number:          1039
Signing time:             Mon 28 Sep 2026 09:02:17 +0000
Manifest this update:     Mon 28 Sep 2026 09:02:17 +0000
Manifest next update:     Tue 29 Sep 2026 09:02:17 +0000
Files and hashes:         1: 9eN7qSejmD6NfaFbsmt0-Q4AgoA.roa (hash: EthJtYsvDPJskDLNQI0HAM0yvVrJhOQozB0uYpm7BsE=)
                          2: J97R2QxNUraHECO8cSltCKmMTNs.crl (hash: 7jkF6Un04oWKruSHrVoeSO7XtLme4iDmIeLfy/eO76g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 09:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:40:2d:02:10:1c:23:85:6a:c0:75:f6:01:33:c5:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
        Validity
            Not Before: Sep 28 09:02:17 2026 GMT
            Not After : Sep 29 09:02:17 2026 GMT
        Subject: CN=1cf2e7de4c15f22565ec5de59c90e4458daa0414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:19:e5:75:e5:46:dd:a8:30:3b:0b:6f:18:df:
                    10:39:26:ac:d1:c1:b8:b6:70:3d:22:a4:15:99:8b:
                    9b:56:e1:4c:26:5b:69:d5:04:8e:64:52:bf:36:5d:
                    b0:2b:58:1d:bd:09:33:40:f2:8b:69:9d:db:dc:e2:
                    aa:be:a9:cb:4f:03:b6:46:45:1a:09:bc:a6:3c:26:
                    c0:05:85:b3:67:e1:05:f5:f8:e6:31:74:ac:f5:55:
                    b4:97:39:ea:f6:38:c4:3c:70:b9:d2:07:26:10:06:
                    38:77:93:62:c2:04:f5:63:2e:41:5f:aa:a9:57:65:
                    60:94:db:4d:87:f2:5b:9b:19:8b:73:2f:73:d1:5e:
                    11:1d:1e:60:b7:8f:d8:27:ee:b0:42:95:e8:43:a5:
                    1d:04:25:3b:52:f2:c2:6b:0c:cf:e2:7f:26:8c:23:
                    b5:4a:b8:2c:ba:43:f0:83:30:8f:9d:96:3b:f6:99:
                    f4:4b:b2:6b:32:db:b2:1a:44:8a:ca:8d:9d:f5:16:
                    14:16:c8:61:a2:f3:00:4f:c3:95:b8:97:82:f8:2a:
                    59:bb:e5:18:62:1c:54:60:74:f8:b7:db:92:62:f9:
                    41:e2:f5:49:16:de:06:a9:22:58:2a:22:24:ba:9c:
                    35:62:62:9f:03:8d:32:18:06:aa:d0:ab:dc:80:5c:
                    a1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F2:E7:DE:4C:15:F2:25:65:EC:5D:E5:9C:90:E4:45:8D:AA:04:14
            X509v3 Authority Key Identifier:
                keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:dd:c1:62:82:5e:c8:02:04:2c:bd:d3:b9:5c:22:fc:7f:45:
         12:79:c2:db:7c:24:4d:3b:7b:ed:86:59:e8:51:49:6c:11:ff:
         65:a7:2f:c4:fc:ee:0f:34:d4:02:0f:3a:52:45:94:f6:8b:46:
         13:6b:10:6e:94:bb:08:51:4f:6f:68:3f:78:b2:d3:c3:8c:41:
         70:a4:fe:c1:cf:5f:6a:99:96:6f:45:7e:ae:5c:a9:ba:d6:ca:
         c0:00:b8:6d:bc:15:3a:7d:6f:c5:cd:e2:a3:75:a6:73:46:78:
         6c:33:75:c0:33:01:3e:3f:0b:7c:bc:76:ad:cb:b6:48:94:82:
         7d:6a:4f:b7:d6:cd:f9:e0:90:86:09:8b:5f:6b:62:8c:ae:b0:
         d3:8b:f7:8e:78:7c:7a:a2:a3:64:de:77:a1:12:a0:d7:2b:cb:
         f0:35:e0:a0:e5:bf:8c:f2:74:2e:1b:b4:68:95:7f:49:81:8f:
         49:e3:78:ae:56:cb:c0:3d:3a:9e:19:e4:eb:e6:94:ce:33:61:
         99:01:51:ac:fa:ad:e2:6d:31:0c:40:5e:7c:a2:d8:07:1a:6e:
         34:e0:c9:be:c8:17:3c:41:5c:a3:d9:5a:f8:a0:ea:94:b8:18:
         bf:ba:20:4b:52:23:85:50:1a:a7:8f:4f:76:c3:46:24:29:56:
         e7:84:29:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:14:14 2026 by rpki-client