Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
File:                     ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft (raw, json)
Hash identifier:          P0Mn5qde1UBN9TsSwnqEv3ncuYbPElBaOHly6tXW/90=
Subject key identifier:   40:E5:0C:DD:BD:7B:70:10:9E:68:03:48:D9:6C:C7:C3:C5:2B:59:CD
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Certificate issuer:       /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial:       01A0D1C925626E3D1C3EDFD65FC6997F05A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
Manifest number:          1A7C
Signing time:             Thu 24 Sep 2026 05:00:15 +0000
Manifest this update:     Thu 24 Sep 2026 05:00:15 +0000
Manifest next update:     Fri 25 Sep 2026 05:00:15 +0000
Files and hashes:         1: 6osyBEyP0HcSM0NQyBHIvRn1Fhk.roa (hash: hglwRwFDDllYX9jYTjK+3ZWKDlBPRVFz/hfeMX7vQ4o=)
                          2: JauiIPMakXs-XxyLaWxO0rjIw8E.roa (hash: iXxbDtozEsteNQ9atnfu+OC8ptchPtG62ieHNq3ckVI=)
                          3: Ote8Xple36NOljGpswnBnv1BVHg.roa (hash: 7PcKnm0HqFWloTnBPRiK0Jc5QCuqif0gaeoULdBF7ck=)
                          4: cKqvG9BsZG6su7we84q3E8DeV-0.roa (hash: yebnJKVbgSkS4D7E+ORpv+scwNkFgxpLo5cTVCzh2rI=)
                          5: jYL_MHWzxB2OX15Vxs1hmwy4NzY.roa (hash: VfRhELdR7icqL4aOULnTdK+xLakSZDUjVfSg/1rTQ3c=)
                          6: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl (hash: T6bwRfTJ8lqF7lE6t2XtHdWR0kDmOhw376t69B33v6s=)
                          7: vsAq2ox79fGO3Ta6QC_1orZGKIY.roa (hash: 11wmgbpdweQHKnUalimrWFHED8Za8q31JapGPV4qcP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:c9:25:62:6e:3d:1c:3e:df:d6:5f:c6:99:7f:05:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
        Validity
            Not Before: Sep 24 05:00:15 2026 GMT
            Not After : Sep 25 05:00:15 2026 GMT
        Subject: CN=40e50cddbd7b70109e680348d96cc7c3c52b59cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:95:d0:69:ae:ce:a5:17:d4:c2:8b:a1:e8:9d:
                    b2:b0:5c:b4:a0:19:46:ec:f8:8a:cf:fd:13:30:8a:
                    03:a9:96:d0:53:88:d8:5f:0b:42:90:b1:63:ba:ea:
                    32:05:9c:17:83:be:2a:78:f5:2f:03:5c:c4:24:cc:
                    3e:6a:05:52:ff:03:89:31:98:b9:b9:45:7e:46:45:
                    3f:67:e1:fe:00:91:8b:8d:c9:b5:27:87:11:83:c6:
                    b7:82:cc:9b:d3:7a:c5:f6:de:9e:06:48:54:5b:48:
                    35:3b:aa:a9:0f:fe:e6:46:ef:8c:af:87:39:fb:2e:
                    58:d8:7c:57:3c:d4:12:03:8e:fb:16:4b:76:c3:4b:
                    cf:6a:04:7b:d3:76:89:c1:62:37:8f:dc:80:a3:96:
                    df:42:87:ae:a3:2f:7d:c0:8c:66:e5:46:e7:ff:06:
                    df:a3:57:5c:03:a9:8c:2d:2e:31:79:78:b3:ad:ed:
                    46:80:c8:63:17:b0:12:e0:e9:a6:90:cd:b7:1a:c2:
                    96:4e:41:56:1a:07:96:64:45:68:29:86:f7:e4:c9:
                    b3:38:6a:12:c7:9e:19:8d:2e:94:0a:0d:19:fa:74:
                    db:eb:bc:82:18:27:17:45:3d:76:21:5b:82:23:12:
                    e3:86:0c:00:8e:c5:b4:6a:b5:da:ea:a7:39:eb:15:
                    1c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E5:0C:DD:BD:7B:70:10:9E:68:03:48:D9:6C:C7:C3:C5:2B:59:CD
            X509v3 Authority Key Identifier:
                keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9f:0a:3f:18:a6:6a:ea:78:2b:57:33:01:59:3a:41:4d:4a:
         94:01:98:fe:ae:c0:d2:25:ce:c8:b0:73:ff:74:1e:fa:51:9b:
         52:39:b6:f8:a3:5b:ff:ff:c6:f5:ec:96:b7:43:80:25:d0:15:
         2f:ad:18:17:59:af:72:c9:df:06:e0:95:9a:69:db:7b:3f:5f:
         1c:30:40:9c:1d:0a:99:56:8a:f1:65:77:83:79:e5:52:3e:0b:
         20:8e:e5:1e:1a:af:2f:56:0c:09:68:78:d8:94:10:06:c8:fc:
         ff:72:69:55:80:66:62:e9:4f:3e:de:97:11:a7:6d:0c:91:f1:
         c8:a5:ab:e8:2b:6f:73:0d:b1:f7:5c:94:76:fc:66:39:9f:10:
         f7:3d:73:78:55:eb:01:98:c6:b6:d1:ff:82:60:17:95:77:ec:
         64:66:f4:70:09:06:ee:12:0c:7e:70:6c:25:07:4f:1b:1d:75:
         28:1f:ce:8e:4c:af:94:e4:b6:f7:12:55:7a:89:a9:f5:15:21:
         6f:da:dd:8b:55:5d:91:f8:b4:a7:1b:ef:23:76:ec:a1:18:ce:
         a5:9b:97:68:c6:27:72:6e:05:ca:45:f6:83:c2:97:32:17:73:
         0b:5e:ad:ca:f2:b0:d5:00:b4:55:5e:fc:f4:88:fa:d6:7c:94:
         40:60:05:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:06:57 2026 by rpki-client