Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File:                     JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier:          L47hfaZ6VzRXdbx03DqeJe0L1RYxrBFYq7UlLzlHNdw=
Subject key identifier:   B3:E7:78:0B:6A:8F:ED:49:12:02:C5:AB:97:CB:2C:7E:A1:5F:12:88
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer:       /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial:       01A111BBC6F4FCA168B972F5CDF2C09D9DE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number:          10E7
Signing time:             Tue 06 Oct 2026 15:01:21 +0000
Manifest this update:     Tue 06 Oct 2026 15:01:21 +0000
Manifest next update:     Wed 07 Oct 2026 15:01:21 +0000
Files and hashes:         1: 2dSMBioa0CJlE-_iiWI5yu7Yi7M.roa (hash: 8jy3SPSzF+c2UbKzDY/rfjIL+e/CbsBFRDuCRIAKo94=)
                          2: GHoR9ZMEggl5etzadCZ-jkBp05E.roa (hash: j9tTfPj51VvkHUH/uJri9blMoGZaptJKQ5c9cpUD85M=)
                          3: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: +AiX1vuKwpq88u+pN4RjwYeoFRnEHk+tV5gJcBxJngs=)
                          4: c9iyPohCc2m-c1bnpPfSBn6yumE.roa (hash: NmSWNNWNzaSfRowr5igkS9JLXscmTvVikOdKVv6WlXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:bb:c6:f4:fc:a1:68:b9:72:f5:cd:f2:c0:9d:9d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
        Validity
            Not Before: Oct  6 15:01:21 2026 GMT
            Not After : Oct  7 15:01:21 2026 GMT
        Subject: CN=b3e7780b6a8fed491202c5ab97cb2c7ea15f1288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:ac:7e:83:37:72:8c:b3:91:90:7b:88:14:
                    06:df:fe:e2:9f:64:4f:28:a6:b2:1f:9d:3f:73:d1:
                    55:77:ca:d7:7e:f9:18:ac:9f:25:c9:9e:4f:d0:8a:
                    a5:73:5d:09:d9:0f:bc:e9:a8:87:06:d8:36:32:c0:
                    e6:23:44:57:b7:ae:55:dd:1a:9e:0e:75:3d:7a:9d:
                    da:10:13:ce:e6:bb:87:34:9d:84:7b:81:c5:d0:f1:
                    4e:d3:6e:90:30:ce:40:77:40:60:18:d0:d8:ad:7e:
                    b9:4d:c0:58:10:1b:0d:d1:1e:a2:97:55:23:5e:fc:
                    85:b3:89:5b:6b:86:08:09:04:13:a7:cc:f5:19:d3:
                    fb:b3:b2:b6:17:eb:db:02:ba:54:6c:a8:ad:50:cb:
                    fe:af:e8:d7:24:ff:4d:51:db:ce:8b:ca:9a:a6:cd:
                    71:f7:a0:b2:5e:cf:0e:5d:5e:dd:19:39:0c:11:f4:
                    5a:79:b9:50:47:39:1b:14:54:7b:5e:7a:4e:19:6f:
                    34:1c:e7:d7:7c:5d:b2:00:f2:6f:c8:20:8e:3d:4f:
                    4c:19:0c:42:de:47:b8:2d:37:94:ee:4e:46:b5:89:
                    3b:46:70:8a:f4:10:39:73:08:74:7b:bb:29:2f:d4:
                    57:c4:d3:45:07:36:5f:24:af:02:ae:0a:0f:ff:24:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E7:78:0B:6A:8F:ED:49:12:02:C5:AB:97:CB:2C:7E:A1:5F:12:88
            X509v3 Authority Key Identifier:
                keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:cb:e2:32:0d:a5:d9:3a:be:28:c1:a1:cd:43:75:8e:6b:fc:
         98:3b:20:07:9b:35:77:22:30:ec:6e:8f:58:e7:9f:98:74:71:
         06:9e:79:49:b7:9a:9d:49:f0:b8:d6:ea:5f:ce:66:3d:03:aa:
         2c:52:6b:55:36:20:b6:aa:90:67:59:4c:84:61:e8:d5:6c:98:
         14:d7:7f:8d:4a:8f:ed:ab:4b:31:9f:d4:d8:a2:4e:14:e4:e5:
         f9:64:50:f5:8e:ed:bb:75:de:ca:ed:82:32:75:2a:a1:ec:91:
         9a:f6:55:62:46:b3:bd:0d:06:b1:f7:94:52:b7:ae:48:24:04:
         1b:b6:60:6d:e9:a8:b2:57:a5:46:5d:04:75:ac:0c:81:45:d3:
         81:76:a9:ae:af:f2:a8:9c:8a:05:b5:16:a4:f5:9c:a7:78:56:
         e6:e9:8a:9a:3a:f1:31:f4:1a:78:0a:66:41:e6:f7:2e:32:dc:
         f3:14:9a:35:80:32:06:01:85:79:73:fe:1c:5f:47:5c:14:1a:
         e9:fd:ab:01:21:af:77:c3:02:98:4d:51:42:b7:6f:07:1d:c0:
         f5:34:64:8e:6d:6e:d9:cf:2b:8e:65:ea:0d:42:f3:20:72:f7:
         0a:eb:d9:8e:0c:41:fe:37:1e:2a:1b:dd:b1:aa:3a:50:5c:82:
         33:16:91:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:27:00 2026 by rpki-client