Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
File:                     JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft (raw, json)
Hash identifier:          5rq+XoJcnKBKdAtRmSFHK9xSoCQzFYjOE/2Gjf9wSVQ=
Subject key identifier:   92:72:03:4F:F2:CC:D2:2C:FC:A8:C9:BB:54:B6:7D:5C:1B:25:71:2D
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Certificate issuer:       /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial:       01A0D237530904EC0F4011F7176D4F7C13F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
Manifest number:          1547
Signing time:             Thu 24 Sep 2026 07:00:36 +0000
Manifest this update:     Thu 24 Sep 2026 07:00:36 +0000
Manifest next update:     Fri 25 Sep 2026 07:00:36 +0000
Files and hashes:         1: 1-wqXuXVjU4DK7DThoDM4xKkLzpA.roa (hash: Ysd+kwqFCaatF0B+CxMd/0KKzo486Kn7yiW2Q4tdeXQ=)
                          2: 5e0tqH24BTM03yiq8eWs7gQhfjU.roa (hash: 2dooK4E+vB8Vi+8KxuvklQIHFbXhQITTT/Vg0tuOqZ0=)
                          3: BAVWZ2GqddVuzhP06KD0A_bCtt4.roa (hash: eKvOsbHOl1mbbSCZG1SoTdZdmz2aVvIhgRs7YLzoCNw=)
                          4: JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl (hash: FTMfIgT1HvG1ubwxxU2xoVIfT8hevsgoKKLZcTTFuP0=)
                          5: obhZjPoFU0GF5aoDtx8pszyeQNo.roa (hash: DtLP/BpnbtJiMnxxKHcSTdBX7T/DtG/NN3abv8oUzzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:37:53:09:04:ec:0f:40:11:f7:17:6d:4f:7c:13:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
        Validity
            Not Before: Sep 24 07:00:36 2026 GMT
            Not After : Sep 25 07:00:36 2026 GMT
        Subject: CN=9272034ff2ccd22cfca8c9bb54b67d5c1b25712d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d7:4a:69:8b:f2:5c:24:af:2c:d6:ba:ad:01:
                    41:43:93:6a:b1:ac:9a:16:08:92:c3:4b:bc:a6:61:
                    82:d5:c5:e0:0a:72:45:52:6a:84:aa:46:42:86:60:
                    c4:de:90:de:5d:62:28:ee:95:01:45:76:f5:3d:dd:
                    2a:ba:d5:66:1e:79:d9:c0:46:20:0b:18:71:9e:f1:
                    0a:6b:ba:c7:e7:43:1b:b7:f3:b0:05:1d:ce:de:7f:
                    e7:27:20:7b:8e:cf:10:77:86:e0:ca:31:52:b6:37:
                    2d:c1:8a:e6:5b:d0:e0:91:9a:2d:d2:19:5f:11:73:
                    7a:e3:bf:9e:5d:0e:1a:ae:aa:6c:2a:d0:40:b0:a7:
                    b0:51:2f:dc:88:ef:14:91:e7:2f:ed:51:1c:e6:e3:
                    5d:5a:be:d9:b9:61:0e:b8:54:93:ca:8e:f2:64:32:
                    f1:68:46:b1:a3:b7:8e:a1:29:f7:0b:d3:b7:63:30:
                    48:88:46:6a:4a:6b:76:40:74:41:97:fa:dd:56:3c:
                    f9:ea:97:24:26:05:8f:19:70:2f:4e:7e:1b:be:d5:
                    96:33:b7:2a:7c:78:f1:18:e1:c9:1e:ed:c2:fb:b6:
                    fd:6c:f9:b1:ab:6a:84:a0:ed:42:de:cd:dd:fa:37:
                    1c:ea:46:ea:f5:6b:7d:a6:af:d6:bf:55:19:41:53:
                    85:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:72:03:4F:F2:CC:D2:2C:FC:A8:C9:BB:54:B6:7D:5C:1B:25:71:2D
            X509v3 Authority Key Identifier:
                keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:5c:5e:13:9a:d5:46:f9:79:25:10:8c:da:8b:aa:af:6d:5a:
         c6:22:b5:48:26:e9:18:0e:16:9f:58:20:e6:58:bc:7b:55:b6:
         f2:10:72:e2:90:50:eb:1b:41:c3:0f:b0:2c:4d:0b:6e:15:de:
         d7:f3:3c:57:88:9c:32:d4:cc:39:cf:4d:50:60:9a:a9:65:81:
         47:e8:93:4d:07:d9:f4:0a:2e:af:4b:0a:3a:29:59:3f:ff:86:
         f0:b6:76:e4:c7:5b:2e:1e:c7:2c:9d:c2:7f:a1:32:32:5f:25:
         2a:2b:07:5b:94:ee:eb:d0:1f:15:98:69:14:78:39:59:a0:3b:
         50:9a:09:8a:6c:c2:ec:44:29:96:c5:ca:e2:df:ba:d1:d0:2e:
         f4:f5:8a:9d:8c:af:ac:ce:35:db:8a:15:60:09:06:e7:33:ae:
         84:ed:4d:a1:87:21:6a:6a:f8:d3:15:10:a7:de:1c:c6:be:17:
         43:a5:f4:80:33:a3:87:e3:9a:6b:68:9c:76:ca:27:5a:25:aa:
         6d:13:a6:71:97:05:4e:cd:7d:b2:2c:61:56:0a:30:3f:b9:da:
         d0:42:83:0c:02:1c:32:7b:2f:ed:f9:f4:bc:c3:88:9d:5b:4c:
         08:65:73:1d:fe:39:bf:2c:94:76:e6:0d:1f:7d:47:b2:5d:2e:
         70:cb:7c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:10:20 2026 by rpki-client