Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
File:                     J5_fPkke9m13cUOJrjbwRXFfJ2g.mft (raw, json)
Hash identifier:          g0gJBq6GvK51hyCt7tpbiQZ87EnVxxtjaF54j8BXZdA=
Subject key identifier:   A6:E1:27:30:3B:F4:07:6E:8C:BB:48:D6:B1:19:48:01:81:FF:65:14
Authority key identifier: 27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
Certificate issuer:       /CN=279fdf3e491ef66d77714389ae36f045715f2768
Certificate serial:       01A0C5C5705F67F899703541D0C98C9BD6F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
Manifest number:          016A
Signing time:             Mon 21 Sep 2026 21:00:45 +0000
Manifest this update:     Mon 21 Sep 2026 21:00:45 +0000
Manifest next update:     Tue 22 Sep 2026 21:00:45 +0000
Files and hashes:         1: J5_fPkke9m13cUOJrjbwRXFfJ2g.crl (hash: 8cnpvXC5Wu+pMjO2ygdL3C8z86s1Gne5WUHMTTp569Q=)
                          2: eYIU0lgIGbeRVl2e4lvrfNL_AGI.roa (hash: +E4U6Wwkj+cuvgvS94OAueMPchhfOUf2dvj5+HfKbkc=)
                          3: jx2IrehBfGIoz07HNrnJbRx1Ie8.roa (hash: elgg0Zp0doZnyv6v09SX8lS/zVSrNYK42ElsTeAO/Dk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:c5:70:5f:67:f8:99:70:35:41:d0:c9:8c:9b:d6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279fdf3e491ef66d77714389ae36f045715f2768
        Validity
            Not Before: Sep 21 21:00:45 2026 GMT
            Not After : Sep 22 21:00:45 2026 GMT
        Subject: CN=a6e127303bf4076e8cbb48d6b119480181ff6514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5b:f2:e1:6e:9d:ed:4d:85:18:1f:e7:36:3f:
                    ea:d9:0b:f1:37:c7:ea:f7:96:2b:9d:b8:ee:97:64:
                    5c:0a:34:b7:2d:de:8c:5a:e2:9d:5d:b7:c5:49:5c:
                    34:e4:b0:7e:ac:e5:25:ce:ea:ff:32:96:fd:ba:00:
                    78:23:42:85:19:65:b9:7f:0b:65:be:0f:14:11:26:
                    63:99:83:52:12:33:57:37:7d:92:97:6d:57:1e:c1:
                    fb:40:7f:52:54:18:03:28:21:87:17:fa:75:48:f6:
                    c0:67:32:86:58:2a:e3:89:21:23:be:37:09:8c:f3:
                    a4:62:c4:1c:9a:af:26:c6:5a:19:d8:bd:b4:6f:0e:
                    25:0c:7a:f5:c4:8b:fa:5b:24:9e:d4:5a:51:f7:52:
                    53:7d:cd:d0:45:1e:e4:51:28:4d:3f:7c:ea:e3:ce:
                    7c:fe:fa:3a:b9:af:88:88:3e:66:7a:ee:e6:6e:ca:
                    e7:79:71:c8:58:76:b5:e3:8d:d7:3a:d4:7f:b3:54:
                    9e:48:5c:2d:8b:00:5b:a9:ef:cc:ec:bd:91:fb:cc:
                    a6:ca:2b:b5:df:71:87:df:66:a1:9e:c1:a1:47:36:
                    91:c3:89:53:d1:4b:58:a0:2c:c9:44:0e:c5:ea:8b:
                    92:ab:ab:72:86:e3:23:58:b5:9c:03:c4:68:e5:5e:
                    75:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E1:27:30:3B:F4:07:6E:8C:BB:48:D6:B1:19:48:01:81:FF:65:14
            X509v3 Authority Key Identifier:
                keyid:27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:09:20:cc:21:75:cb:20:8d:b9:5e:48:33:eb:21:f2:f9:71:
         52:07:db:54:06:44:7c:9f:eb:b2:33:3c:5b:eb:1f:5a:70:18:
         b9:6a:a3:dd:23:5c:2c:07:74:15:eb:30:38:75:54:0a:e1:e7:
         36:1c:8d:50:10:c5:f8:f9:a8:2c:47:e0:f6:71:a8:a5:db:0a:
         f6:5d:b1:e0:d7:18:32:ce:4c:8e:d1:56:a5:d1:21:75:4c:ea:
         ca:4f:3e:28:73:75:84:93:23:6b:12:29:52:08:97:30:92:1c:
         dc:78:86:75:8b:5c:f7:67:cd:c0:5a:40:c1:20:6b:fc:dd:ce:
         f6:f6:eb:2a:a6:2a:84:07:bb:2c:1c:f0:0e:55:87:b1:91:0d:
         24:9c:17:27:7c:a8:20:81:2b:38:72:43:63:24:98:1d:07:0f:
         4c:ad:08:dc:43:b1:61:5c:4e:3e:64:4f:bb:20:04:ee:c2:d4:
         ab:02:43:f7:2f:dc:8e:f9:49:2b:23:53:d0:c9:87:27:9f:25:
         73:be:36:75:35:65:1b:4f:cc:33:37:2d:d4:e0:71:9a:22:26:
         ce:5d:3a:cf:e9:5a:d5:ed:4a:34:9a:68:e8:63:84:c0:d6:bd:
         50:23:03:64:9b:62:8f:ec:cb:f6:1d:a2:8c:47:83:f2:e7:80:
         9a:1f:cd:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFxXBfZ/iZcDVB0MmMm9b5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWZkZjNlNDkxZWY2NmQ3NzcxNDM4OWFlMzZmMDQ1NzE1
ZjI3NjgwHhcNMjYwOTIxMjEwMDQ1WhcNMjYwOTIyMjEwMDQ1WjAzMTEwLwYDVQQD
EyhhNmUxMjczMDNiZjQwNzZlOGNiYjQ4ZDZiMTE5NDgwMTgxZmY2NTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Fvy4W6d7U2FGB/nNj/q2QvxN8fq
95Yrnbjul2RcCjS3Ld6MWuKdXbfFSVw05LB+rOUlzur/Mpb9ugB4I0KFGWW5fwtl
vg8UESZjmYNSEjNXN32Sl21XHsH7QH9SVBgDKCGHF/p1SPbAZzKGWCrjiSEjvjcJ
jPOkYsQcmq8mxloZ2L20bw4lDHr1xIv6WySe1FpR91JTfc3QRR7kUShNP3zq4858
/vo6ua+IiD5meu7mbsrneXHIWHa1443XOtR/s1SeSFwtiwBbqe/M7L2R+8ymyiu1
33GH32ahnsGhRzaRw4lT0UtYoCzJRA7F6ouSq6tyhuMjWLWcA8Ro5V51UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbhJzA79AdujLtI1rEZSAGB/2UUMB8GA1UdIwQY
MBaAFCef3z5JHvZtd3FDia428EVxXydoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjVfZlBra2U5bTEzY1VPSnJqYndSWEZmSjJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yZjNhNDQtNTAyMy00Njk1LWE1ZmIt
N2I2NmUzMmE0MGZhLzEvSjVfZlBra2U5bTEzY1VPSnJqYndSWEZmSjJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8yZjNhNDQtNTAyMy00Njk1LWE1ZmItN2I2NmUzMmE0MGZh
LzEvSjVfZlBra2U5bTEzY1VPSnJqYndSWEZmSjJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQkgzCF1
yyCNuV5IM+sh8vlxUgfbVAZEfJ/rsjM8W+sfWnAYuWqj3SNcLAd0FeswOHVUCuHn
NhyNUBDF+PmoLEfg9nGopdsK9l2x4NcYMs5MjtFWpdEhdUzqyk8+KHN1hJMjaxIp
UgiXMJIc3HiGdYtc92fNwFpAwSBr/N3O9vbrKqYqhAe7LBzwDlWHsZENJJwXJ3yo
IIErOHJDYySYHQcPTK0I3EOxYVxOPmRPuyAE7sLUqwJD9y/cjvlJKyNT0MmHJ58l
c742dTVlG0/MMzct1OBxmiImzl06z+la1e1KNJpo6GOEwNa9UCMDZJtij+zL9h2i
jEeD8ueAmh/NFQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:05:50 2026 by rpki-client