Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
File:                     JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft (raw, json)
Hash identifier:          n6BUP6wHrRLV5mqRaAwluCR2yKCtgKIUTOji9KpmOxM=
Subject key identifier:   5A:42:79:21:C3:69:C5:B0:97:18:23:9E:B1:65:C4:4B:AC:15:1C:A4
Authority key identifier: 26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B
Certificate issuer:       /CN=26251cf7d8d6d057dc64715ba836299df39fd85b
Certificate serial:       01A0D50293C17B225F636A482169FCF3B858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
Manifest number:          03D3
Signing time:             Thu 24 Sep 2026 20:01:50 +0000
Manifest this update:     Thu 24 Sep 2026 20:01:50 +0000
Manifest next update:     Fri 25 Sep 2026 20:01:50 +0000
Files and hashes:         1: JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl (hash: 7b6pflq8TcoGaIzHii4IeibETegD3NZ/nEHXi7ma5x8=)
                          2: fX-rHvxMS7rGe-P0kdh6qBCV0kw.roa (hash: YxEpHCuxMU6/BR/ByERCcyICEyXZ5/Zrc7JTg1hXiro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:02:93:c1:7b:22:5f:63:6a:48:21:69:fc:f3:b8:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26251cf7d8d6d057dc64715ba836299df39fd85b
        Validity
            Not Before: Sep 24 20:01:50 2026 GMT
            Not After : Sep 25 20:01:50 2026 GMT
        Subject: CN=5a427921c369c5b09718239eb165c44bac151ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6c:9b:48:15:5e:ce:b5:dd:43:ef:e0:ae:af:
                    f2:28:08:68:10:da:28:a2:d7:f4:f2:22:6c:0a:8f:
                    55:a7:d3:95:b7:ac:ba:e3:64:3d:63:18:66:a2:6a:
                    68:44:84:bd:87:2b:b1:47:7e:4f:b3:bc:4e:55:c1:
                    d5:f2:63:aa:6c:bd:74:f2:57:a7:18:a8:f3:53:e5:
                    3c:c2:65:77:a9:e2:8c:ef:da:4a:29:82:45:ef:71:
                    22:26:b0:05:48:db:d3:18:76:5e:d8:bf:dc:13:60:
                    b2:cb:bd:cf:38:24:b5:61:c5:48:5b:11:5d:23:5c:
                    b2:63:9d:fb:0e:23:6a:2a:b2:97:d5:fe:54:ee:b7:
                    82:7f:aa:7b:a3:73:4c:94:ab:66:01:56:1b:d4:b6:
                    9c:95:1a:2f:d9:2a:26:86:c8:ad:59:d9:7d:a9:01:
                    23:67:e5:e2:37:d4:b3:80:70:9e:51:a1:67:b7:75:
                    f2:3e:07:8b:28:f8:93:1c:86:3e:d4:06:d5:fd:5a:
                    72:7a:88:2c:a2:c0:90:ee:7a:19:84:b8:21:bf:4a:
                    68:7a:6c:0a:cd:99:92:01:dc:81:f2:e1:6a:99:46:
                    38:b5:9c:57:4f:d3:ee:88:c1:bf:1f:e6:da:0d:f2:
                    22:01:84:c5:56:ab:13:b4:71:d2:6e:0d:97:30:29:
                    79:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:42:79:21:C3:69:C5:B0:97:18:23:9E:B1:65:C4:4B:AC:15:1C:A4
            X509v3 Authority Key Identifier:
                keyid:26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a5:ca:02:56:51:00:1c:8d:79:8d:4e:f3:ba:b3:86:00:dd:
         80:ae:b0:4c:7f:d1:63:ff:89:99:da:63:8d:27:74:71:c3:53:
         43:6a:5b:89:bf:ea:c2:1f:9e:73:07:58:68:e9:c6:37:19:de:
         71:b4:7f:52:dd:fe:e2:d9:d1:59:75:26:69:5a:e1:e6:e5:e3:
         ed:ea:84:36:65:a4:45:27:ec:58:a3:c9:08:3c:4b:28:b8:fb:
         78:89:b0:95:f7:96:e3:41:89:58:8e:1e:c7:69:ff:51:be:55:
         45:c0:b4:ac:fa:8e:6c:ab:f0:03:26:ed:22:89:37:62:d1:0d:
         15:96:26:25:34:0d:1a:4e:2f:13:d1:f9:38:2d:f1:fe:de:b9:
         59:38:70:fa:d0:6f:88:13:e7:62:64:84:bc:91:da:87:84:a6:
         41:df:73:f1:c6:85:cb:16:35:e8:3f:4e:21:eb:9d:72:e5:6e:
         1c:e2:a1:0e:96:5e:a2:4c:8f:62:06:f4:f7:0b:0a:1b:0e:da:
         d7:8b:a5:c6:bb:80:d9:1e:01:5c:6c:aa:d2:5f:36:13:dd:80:
         61:89:d2:07:7b:59:5e:87:bf:92:17:7f:89:66:db:ab:1e:a5:
         c8:8f:c9:86:75:83:8d:50:48:f2:21:b7:9a:ff:cb:be:7f:47:
         79:6a:c6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:34:16 2026 by rpki-client