Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File:                     JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier:          tHam8WignRArDcmgvHDHSyYj+3Nqh+bLSbNnAjcAiKc=
Subject key identifier:   D1:29:09:74:7C:2D:A4:C6:55:D8:77:8E:12:CF:4A:58:DB:27:F7:B4
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer:       /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial:       01A0D45D2200DBD6DF24090E99DBCF925F07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number:          18E0
Signing time:             Thu 24 Sep 2026 17:01:08 +0000
Manifest this update:     Thu 24 Sep 2026 17:01:08 +0000
Manifest next update:     Fri 25 Sep 2026 17:01:08 +0000
Files and hashes:         1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: eeJhHSSmFJPUBkr77kb+lkMKAsgQEpDbovZXkcdi/jA=)
                          2: b2rG26UgVRG8w0IZDQFTt47nkS0.asa (hash: JCJ+TLu/jPVnxxZeI2DePwxG4LHTh7Ix8TBP1/ceRkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5d:22:00:db:d6:df:24:09:0e:99:db:cf:92:5f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
        Validity
            Not Before: Sep 24 17:01:08 2026 GMT
            Not After : Sep 25 17:01:08 2026 GMT
        Subject: CN=d12909747c2da4c655d8778e12cf4a58db27f7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:13:f2:cf:62:e0:14:9e:ff:41:ba:47:7c:bc:
                    2f:4e:c7:76:59:0a:cf:0e:13:5c:1b:7c:d3:bf:ea:
                    04:00:f5:0b:66:ff:c1:ae:48:26:e5:27:53:db:12:
                    92:58:4b:f3:91:cf:44:bb:7d:b4:ef:c8:ec:65:81:
                    0d:7b:68:91:44:15:83:c9:02:7e:ff:74:0d:a8:08:
                    c3:f1:97:4a:60:16:ee:8d:0d:9c:25:c8:98:6f:10:
                    13:9e:1b:f1:4b:2b:49:46:96:22:98:aa:89:1c:6a:
                    29:d5:b5:fd:a3:2c:45:65:66:15:a3:49:c2:64:49:
                    12:7a:af:d4:c2:55:75:51:85:b6:5a:c8:c1:e7:48:
                    4b:a8:60:2e:11:30:2e:a7:57:fe:ce:b9:13:a3:99:
                    81:5e:67:35:97:2d:93:e0:fd:9b:7a:cd:d0:8c:1d:
                    26:69:9c:37:44:e0:f7:b7:4a:f7:30:03:9b:e8:c6:
                    fd:b9:f0:e4:9c:ad:74:2a:2f:aa:e1:ee:19:54:4b:
                    c0:8e:b8:da:2b:93:da:a6:a5:aa:97:9f:0b:ac:04:
                    f0:0a:fd:b8:3d:1b:bc:79:e9:0e:08:bf:98:73:14:
                    0c:fd:9d:c1:53:39:e2:5e:40:d9:22:33:47:af:09:
                    66:a0:4a:20:1a:fd:02:b6:fc:37:b6:c7:87:d7:ed:
                    55:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:29:09:74:7C:2D:A4:C6:55:D8:77:8E:12:CF:4A:58:DB:27:F7:B4
            X509v3 Authority Key Identifier:
                keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d8:f4:9b:ac:0a:09:ac:54:02:c3:9b:3a:51:db:9b:6e:ff:
         5d:09:99:77:e0:b2:fa:b7:c9:65:4e:94:87:49:26:e8:ed:e8:
         e9:b7:20:9b:c3:a5:16:e3:29:84:56:87:40:02:c5:e2:5a:2e:
         03:ff:09:c4:d8:f3:d6:d9:78:9c:6f:b5:9d:a5:28:8f:be:77:
         ed:ea:ce:6f:8f:6b:94:7e:47:c7:5a:26:69:de:69:30:3f:c5:
         e3:21:50:22:4b:de:58:eb:b6:c1:68:45:03:f7:b4:db:34:ef:
         6e:36:c2:63:87:83:cb:ac:db:58:1e:f9:b4:66:40:36:b2:11:
         67:1e:a4:7b:1b:42:19:c6:7e:d3:6a:95:f6:12:90:b8:8c:10:
         ed:c1:e6:a4:52:8a:6f:8d:14:f4:fb:13:eb:fc:6c:84:a8:80:
         9d:fe:20:21:e6:51:49:8e:99:7d:a9:8c:32:f4:1c:88:ef:ae:
         82:d1:0d:d9:ef:90:ac:a6:88:a6:fe:2a:69:37:d3:68:54:b1:
         54:b1:34:50:99:be:79:94:59:70:9f:85:59:f7:23:96:c6:85:
         a4:33:6a:c5:b8:f1:11:20:9e:fb:f0:12:ef:dc:2d:c1:5e:0c:
         98:e3:58:08:02:d3:52:3d:20:5a:94:2b:a0:c5:d7:6c:64:9d:
         54:d9:ac:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:55:18 2026 by rpki-client