Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
File:                     JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft (raw, json)
Hash identifier:          qQvYQ3eeK3vd/tr1i3DEZvHzw5P+TZTt3mgAyxXjlEw=
Subject key identifier:   88:FE:C9:C9:63:7B:70:E8:AB:00:A2:F8:41:AA:07:84:BC:68:EC:14
Authority key identifier: 26:01:BB:69:18:BD:CC:91:A4:14:28:90:1E:B9:8C:ED:97:0F:3E:EE
Certificate issuer:       /CN=2601bb6918bdcc91a41428901eb98ced970f3eee
Certificate serial:       01A0D1C9BE9CD64B67DDF8425A362753B345
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
Manifest number:          0272
Signing time:             Thu 24 Sep 2026 05:00:54 +0000
Manifest this update:     Thu 24 Sep 2026 05:00:54 +0000
Manifest next update:     Fri 25 Sep 2026 05:00:54 +0000
Files and hashes:         1: JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl (hash: eQaaY0ox6TXciwvVMZX4d7UHi3uNbgXucNxda6ytgAQ=)
                          2: xI2T6u-ogHCh_qmF9fvjI4t2phU.roa (hash: 8tqJsupYoAdrcHq1+XtacOJOwfLsGLJVAq+lOhZtBiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:c9:be:9c:d6:4b:67:dd:f8:42:5a:36:27:53:b3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2601bb6918bdcc91a41428901eb98ced970f3eee
        Validity
            Not Before: Sep 24 05:00:54 2026 GMT
            Not After : Sep 25 05:00:54 2026 GMT
        Subject: CN=88fec9c9637b70e8ab00a2f841aa0784bc68ec14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b7:73:73:85:4e:65:0e:a9:1c:8c:61:e0:21:
                    0f:f6:ff:b4:82:a9:c9:9e:02:55:a5:68:70:da:4a:
                    8e:c3:c0:0f:12:8a:9e:d3:da:4f:91:ec:b3:f8:c9:
                    d7:3f:71:37:c2:0c:28:7d:19:87:ee:17:76:0c:5b:
                    d1:19:f5:9f:05:bf:3e:43:67:6f:4e:6b:91:17:96:
                    57:e6:de:77:7b:15:26:44:ca:c8:18:bf:a2:d6:4c:
                    18:6b:59:0c:67:9c:aa:e4:f3:f3:0e:46:03:9b:81:
                    8d:1c:17:1b:1a:6c:71:ba:ad:99:2c:9a:6d:88:ed:
                    db:d4:1a:1e:e9:dd:37:50:74:83:3b:08:dc:ad:55:
                    55:21:d1:4c:63:ac:0b:c8:5f:97:3b:a1:d0:04:27:
                    67:88:6a:7f:71:33:dc:1a:e8:5a:20:df:22:f7:17:
                    38:8e:6f:77:36:d5:d1:fc:7d:f3:9c:ae:c2:cc:17:
                    47:84:7f:fe:cb:3a:d4:9d:d8:df:cb:96:75:c1:a2:
                    82:d6:90:ca:64:7a:99:13:89:a7:70:66:c5:1b:f6:
                    8c:c7:52:79:04:59:09:f9:c2:cd:af:c2:80:0e:83:
                    98:b5:ef:39:e8:51:99:5f:c2:98:8c:02:11:95:ef:
                    dd:dc:60:3a:2f:15:cb:6e:b5:38:69:c2:fe:29:ae:
                    2a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FE:C9:C9:63:7B:70:E8:AB:00:A2:F8:41:AA:07:84:BC:68:EC:14
            X509v3 Authority Key Identifier:
                keyid:26:01:BB:69:18:BD:CC:91:A4:14:28:90:1E:B9:8C:ED:97:0F:3E:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:5e:99:f4:c2:bb:86:9d:3d:ee:47:01:28:fb:f8:4d:2e:72:
         1b:83:ac:25:bb:a3:21:4a:30:24:a4:49:67:d8:a6:11:79:38:
         05:ea:cb:91:de:1b:a8:16:cc:2a:2d:23:da:0e:2b:f0:39:cf:
         43:59:57:1f:ab:a1:15:e5:33:5f:53:18:38:52:78:96:9a:ad:
         02:3c:e6:e3:91:43:02:28:40:29:30:78:88:d5:57:b3:77:ef:
         84:49:c5:15:80:d6:21:57:24:5d:da:fa:b0:51:0c:b1:64:c8:
         20:37:42:22:dd:9f:a2:f5:80:25:b7:2f:b5:90:d8:ab:7c:3f:
         91:69:69:e9:35:12:17:b6:65:b1:59:17:9c:91:76:0d:05:fa:
         8d:9a:1c:8c:e7:bc:f6:4e:f5:d3:17:04:0d:27:7c:81:af:60:
         43:db:6c:2d:53:4d:16:83:e8:bf:33:59:07:4e:78:d9:f9:3d:
         f3:1f:e2:07:f9:a9:d4:e1:0c:98:23:8f:86:95:63:42:2b:f0:
         b9:7c:9b:53:f2:b0:04:fc:c2:00:50:e2:c2:b2:24:1f:b0:bf:
         8a:a2:d1:d0:d7:a6:aa:d3:f2:ec:32:06:2e:a8:d6:d5:3a:5b:
         42:5a:4d:db:cb:81:a4:b1:1e:a2:65:97:35:d2:16:65:f4:e9:
         41:75:1c:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRyb6c1ktn3fhCWjYnU7NFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MDFiYjY5MThiZGNjOTFhNDE0Mjg5MDFlYjk4Y2VkOTcw
ZjNlZWUwHhcNMjYwOTI0MDUwMDU0WhcNMjYwOTI1MDUwMDU0WjAzMTEwLwYDVQQD
Eyg4OGZlYzljOTYzN2I3MGU4YWIwMGEyZjg0MWFhMDc4NGJjNjhlYzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7dzc4VOZQ6pHIxh4CEP9v+0gqnJ
ngJVpWhw2kqOw8APEoqe09pPkeyz+MnXP3E3wgwofRmH7hd2DFvRGfWfBb8+Q2dv
TmuRF5ZX5t53exUmRMrIGL+i1kwYa1kMZ5yq5PPzDkYDm4GNHBcbGmxxuq2ZLJpt
iO3b1Boe6d03UHSDOwjcrVVVIdFMY6wLyF+XO6HQBCdniGp/cTPcGuhaIN8i9xc4
jm93NtXR/H3znK7CzBdHhH/+yzrUndjfy5Z1waKC1pDKZHqZE4mncGbFG/aMx1J5
BFkJ+cLNr8KADoOYte856FGZX8KYjAIRle/d3GA6LxXLbrU4acL+Ka4qPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIj+yclje3DoqwCi+EGqB4S8aOwUMB8GA1UdIwQY
MBaAFCYBu2kYvcyRpBQokB65jO2XDz7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmdHN2FSaTl6SkdrRkNpUUhybU03WmNQUHU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy80OGJjOGYtMTA2Yi00NGE5LWE1NTgt
ZGZhNjcxMDI0N2FhLzEvSmdHN2FSaTl6SkdrRkNpUUhybU03WmNQUHU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy80OGJjOGYtMTA2Yi00NGE5LWE1NTgtZGZhNjcxMDI0N2Fh
LzEvSmdHN2FSaTl6SkdrRkNpUUhybU03WmNQUHU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOV6Z9MK7
hp097kcBKPv4TS5yG4OsJbujIUowJKRJZ9imEXk4BerLkd4bqBbMKi0j2g4r8DnP
Q1lXH6uhFeUzX1MYOFJ4lpqtAjzm45FDAihAKTB4iNVXs3fvhEnFFYDWIVckXdr6
sFEMsWTIIDdCIt2fovWAJbcvtZDYq3w/kWlp6TUSF7ZlsVkXnJF2DQX6jZocjOe8
9k710xcEDSd8ga9gQ9tsLVNNFoPovzNZB0542fk98x/iB/mp1OEMmCOPhpVjQivw
uXybU/KwBPzCAFDiwrIkH7C/iqLR0NemqtPy7DIGLqjW1TpbQlpN28uBpLEeomWX
NdIWZfTpQXUcaQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:07:33 2026 by rpki-client