Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
File:                     Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json)
Hash identifier:          4JzLRn6+ErDP5iNEsUbKfQMlPvDY1NK5S3qyP2gsobc=
Subject key identifier:   52:94:E6:D3:D6:3B:EE:A6:79:F6:95:D4:BA:F9:F0:22:11:B1:70:C6
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Certificate issuer:       /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial:       01A0CD47C54D80667242579F6D58074614CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
Manifest number:          1A6A
Signing time:             Wed 23 Sep 2026 08:00:27 +0000
Manifest this update:     Wed 23 Sep 2026 08:00:27 +0000
Manifest next update:     Thu 24 Sep 2026 08:00:27 +0000
Files and hashes:         1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: r0d86B194sLO/xTa8P0xy1bgcs90RzjGELkc+DGYicE=)
                          2: e-pIqroMx8ktOvBXKbMUSY489PA.roa (hash: zD2XKbyMKOBSm6Gik/HGW9BbJtz+ToLcLdq/4K8Rj18=)
                          3: tg82jIBHH5LcgWYYM7zJbYrlVt0.roa (hash: n6rCSA1xOIDb4YmG15TQjoYexybekFDUsJodZaNLnM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:47:c5:4d:80:66:72:42:57:9f:6d:58:07:46:14:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
        Validity
            Not Before: Sep 23 08:00:27 2026 GMT
            Not After : Sep 24 08:00:27 2026 GMT
        Subject: CN=5294e6d3d63beea679f695d4baf9f02211b170c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6c:5b:a8:d5:07:46:64:4d:ff:94:c7:80:98:
                    d7:1b:aa:f1:c4:40:78:ab:31:f6:5c:25:f5:d6:6e:
                    c7:7f:66:ec:98:5a:bd:1c:4d:a4:61:7e:2e:44:71:
                    1c:31:13:9b:93:0f:fe:b4:b2:a1:89:dc:08:ef:d1:
                    47:0b:48:5e:eb:c1:2f:66:df:01:3e:aa:9e:4d:a4:
                    ad:42:5b:df:3c:69:89:07:a8:3d:3a:63:3d:fa:d8:
                    b2:b2:f6:8d:7d:4c:f2:e2:2e:27:7b:27:2d:79:01:
                    2e:20:6a:a5:ba:76:83:c6:bb:14:34:14:2b:06:2a:
                    79:0a:cb:d2:a3:2c:43:e9:c1:8e:ac:06:6d:be:17:
                    4b:d1:28:5d:52:11:9d:b8:56:bd:64:5e:47:5d:7e:
                    48:d5:1d:85:f1:0b:c5:09:ae:58:8c:25:e2:2c:5d:
                    a9:c8:7a:bd:e8:00:0f:1a:00:7b:6e:5a:0f:49:c2:
                    3e:4f:b5:ab:ea:95:a3:0b:73:16:88:88:d0:d7:4f:
                    d9:98:32:81:a4:5c:66:16:bb:af:44:7a:aa:f9:b4:
                    a0:dc:2c:93:8a:cb:66:19:d4:2d:e3:0d:f8:a1:73:
                    4f:0c:64:e8:61:f8:a6:68:ba:92:6c:fe:60:24:9b:
                    58:27:a2:00:7e:82:cb:bd:45:b2:85:4a:df:3f:08:
                    5d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:94:E6:D3:D6:3B:EE:A6:79:F6:95:D4:BA:F9:F0:22:11:B1:70:C6
            X509v3 Authority Key Identifier:
                keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:5c:a6:03:a7:65:ab:0a:33:22:68:3a:54:8e:cc:bd:96:9a:
         0b:81:e5:bc:1c:5d:00:75:99:f4:ad:40:de:1b:85:c8:e8:af:
         39:96:d5:ca:ce:be:28:fd:72:4c:03:72:16:e9:a3:f9:81:92:
         82:fd:77:be:18:78:48:30:6b:3c:74:f1:40:2b:78:5f:76:11:
         e8:aa:70:f6:04:56:5d:7d:28:17:e8:30:25:24:ff:a4:d2:d6:
         dd:a1:7e:ad:49:3c:19:25:82:1f:f8:83:98:e7:b2:62:47:ac:
         bc:6d:25:92:4a:2d:df:ad:04:b3:d8:61:ef:60:a9:61:ad:c7:
         cb:1a:f2:36:a0:f8:b8:53:94:5a:f7:c8:38:54:3a:af:a2:81:
         79:18:0e:45:cb:01:38:9e:be:94:38:66:bd:41:49:27:aa:d4:
         e1:c4:03:9b:f2:a2:78:51:d2:df:06:5c:24:3d:f3:31:3c:89:
         20:22:78:84:3d:bb:cc:58:d4:ac:a3:74:3b:71:08:75:69:90:
         72:17:1d:5d:ac:89:d1:52:1a:8a:ce:64:76:93:fb:50:ab:d3:
         bc:bc:b4:88:c8:69:a2:38:e7:9f:d1:4e:23:08:8f:ba:7c:84:
         a6:1a:5c:ef:59:cb:ab:af:b5:93:65:3f:4e:3c:71:9b:a6:4d:
         6a:cb:d5:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNR8VNgGZyQlefbVgHRhTLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MWQ4NDM2OWMxNTUwNTVhZDliZDViNDcxNTU4ZDNmYTdi
MTA5ZDIwHhcNMjYwOTIzMDgwMDI3WhcNMjYwOTI0MDgwMDI3WjAzMTEwLwYDVQQD
Eyg1Mjk0ZTZkM2Q2M2JlZWE2NzlmNjk1ZDRiYWY5ZjAyMjExYjE3MGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2xbqNUHRmRN/5THgJjXG6rxxEB4
qzH2XCX11m7Hf2bsmFq9HE2kYX4uRHEcMRObkw/+tLKhidwI79FHC0he68EvZt8B
PqqeTaStQlvfPGmJB6g9OmM9+tiysvaNfUzy4i4neycteQEuIGqlunaDxrsUNBQr
Bip5CsvSoyxD6cGOrAZtvhdL0ShdUhGduFa9ZF5HXX5I1R2F8QvFCa5YjCXiLF2p
yHq96AAPGgB7bloPScI+T7Wr6pWjC3MWiIjQ10/ZmDKBpFxmFruvRHqq+bSg3CyT
istmGdQt4w34oXNPDGToYfimaLqSbP5gJJtYJ6IAfoLLvUWyhUrfPwhdkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKU5tPWO+6mefaV1Lr58CIRsXDGMB8GA1UdIwQY
MBaAFCcdhDacFVBVrZvVtHFVjT+nsQnSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSngyRU5wd1ZVRld0bTlXMGNWV05QNmV4Q2RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMzJhYmEtZTljNy00MGVhLTgxNjIt
OTE0OTRhYzNiNmQ1LzEvSngyRU5wd1ZVRld0bTlXMGNWV05QNmV4Q2RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9hMzJhYmEtZTljNy00MGVhLTgxNjItOTE0OTRhYzNiNmQ1
LzEvSngyRU5wd1ZVRld0bTlXMGNWV05QNmV4Q2RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtlymA6dl
qwozImg6VI7MvZaaC4HlvBxdAHWZ9K1A3huFyOivOZbVys6+KP1yTANyFumj+YGS
gv13vhh4SDBrPHTxQCt4X3YR6Kpw9gRWXX0oF+gwJST/pNLW3aF+rUk8GSWCH/iD
mOeyYkesvG0lkkot360Es9hh72CpYa3HyxryNqD4uFOUWvfIOFQ6r6KBeRgORcsB
OJ6+lDhmvUFJJ6rU4cQDm/KieFHS3wZcJD3zMTyJICJ4hD27zFjUrKN0O3EIdWmQ
chcdXayJ0VIais5kdpP7UKvTvLy0iMhpojjnn9FOIwiPunyEphpc71nLq6+1k2U/
Tjxxm6ZNasvVcw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:27:04 2026 by rpki-client