Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File:                     2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier:          r58DDJzCEM8EpUsPj2t+voStj9ww8yfqYsakNUbZ6jw=
Subject key identifier:   F5:6B:E4:48:BC:11:DF:48:07:F6:49:6C:1A:20:6A:73:D8:46:DA:7E
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer:       /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial:       01A0C70EEB7750FE1127E6B4F2004B912CE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number:          1A67
Signing time:             Tue 22 Sep 2026 03:00:38 +0000
Manifest this update:     Tue 22 Sep 2026 03:00:38 +0000
Manifest next update:     Wed 23 Sep 2026 03:00:38 +0000
Files and hashes:         1: 16oaMN5X6HEfvxV2hqwlnzKAq2U.roa (hash: TJYZiknvnDct1q+8vkfBIK3EloYfIQpA2frqHwTOSwo=)
                          2: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: TjJ4KFyIg0FHTujIANEW+jvQkB245UgOE8HGArNtaag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:0e:eb:77:50:fe:11:27:e6:b4:f2:00:4b:91:2c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
        Validity
            Not Before: Sep 22 03:00:38 2026 GMT
            Not After : Sep 23 03:00:38 2026 GMT
        Subject: CN=f56be448bc11df4807f6496c1a206a73d846da7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:67:68:1e:80:22:38:8e:86:4d:6d:78:84:e7:
                    fc:12:b8:05:57:44:2d:92:6d:4d:1b:06:08:a5:f2:
                    d5:11:9e:9e:eb:ab:86:b0:91:4b:ff:22:cf:81:f5:
                    26:f8:db:25:44:12:7f:e2:cc:e8:b5:f4:4a:72:dc:
                    ea:5c:44:dd:1d:a7:12:13:1b:11:dd:03:40:45:10:
                    75:43:63:9a:64:33:1e:8d:f4:5d:d1:e0:b6:7b:60:
                    ce:82:58:61:43:c5:88:38:c9:64:28:cb:d3:6f:c0:
                    b2:02:52:0c:56:83:4d:53:b7:22:24:e3:bc:5c:4c:
                    dc:e5:31:3c:ae:0e:3f:47:59:3e:57:be:bf:7b:60:
                    95:f0:6f:fd:44:3c:a1:6b:3e:a2:e6:00:20:e2:7e:
                    76:6a:fc:bf:9d:2c:07:96:98:1a:fc:68:67:69:62:
                    bc:2b:71:8b:a2:9e:c6:75:d4:f3:4a:b4:7c:e5:c8:
                    f4:90:85:11:6d:fa:7f:01:c0:f0:be:54:26:dd:14:
                    8f:ca:aa:ee:d3:e2:27:e1:cf:64:11:5f:5e:4a:44:
                    79:a3:e8:d3:95:55:85:f5:0e:7f:92:03:1f:bd:5b:
                    65:27:9a:84:87:ae:87:40:79:b4:33:a1:5e:f1:c9:
                    9d:11:22:3c:e8:9a:b5:c8:cc:30:36:db:3b:7a:32:
                    24:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6B:E4:48:BC:11:DF:48:07:F6:49:6C:1A:20:6A:73:D8:46:DA:7E
            X509v3 Authority Key Identifier:
                keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:3c:3e:e9:6d:da:b2:9b:b1:61:40:28:1c:be:6f:45:8a:e4:
         52:6b:5d:e2:b2:18:86:5b:08:32:46:40:b7:c1:49:4e:61:2a:
         36:4d:e7:7c:c4:72:62:1b:f1:bd:d9:65:78:b9:62:e3:3c:fe:
         35:53:cb:b5:3f:59:7c:1c:69:d6:d9:a1:cc:4b:5d:72:f4:ef:
         c4:1e:b4:fb:80:3e:1a:e6:89:bd:25:4e:23:ab:4d:1d:64:a9:
         f8:c4:a9:c6:ba:36:ef:90:b4:20:c0:ad:7d:1a:4a:76:a6:9d:
         3d:0c:07:c2:3b:76:47:83:d2:73:b9:21:ff:f8:2e:88:fb:f9:
         b5:a2:b1:9f:60:1e:58:11:23:de:06:42:6d:45:d9:f2:e0:36:
         46:05:63:b2:d9:6c:1e:3f:ad:f6:88:0b:cf:4e:6e:1a:55:87:
         63:5a:da:73:5b:45:6f:0d:35:03:4d:e6:0f:16:e0:68:a8:4e:
         f4:c8:dc:a2:37:4b:6b:7a:28:ee:89:b5:84:26:bc:76:4e:15:
         c0:9b:ef:19:58:69:17:8e:ef:a4:ef:f2:75:8b:84:b7:ae:26:
         93:75:7f:85:fe:5c:0c:bd:18:0f:29:2f:73:17:a8:d9:ac:72:
         df:ad:2b:4e:53:02:b9:35:9d:97:40:5e:5c:ef:41:04:ad:7e:
         0f:ba:59:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:53:38 2026 by rpki-client