Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft
File:                     jg0lcq37cjROrUxTtVe0Dspel6I.mft (raw, json)
Hash identifier:          IVJ/mgT+XMy/iV0PAVFF5eX6mI+LPgWxQBoslH7tubg=
Subject key identifier:   68:98:37:8E:6A:6A:CC:14:85:87:09:66:94:E1:08:5F:99:93:4D:45
Authority key identifier: 8E:0D:25:72:AD:FB:72:34:4E:AD:4C:53:B5:57:B4:0E:CA:5E:97:A2
Certificate issuer:       /CN=8e0d2572adfb72344ead4c53b557b40eca5e97a2
Certificate serial:       01A0F0793E2AE45F9C5CCA0CBE1718CE9970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jg0lcq37cjROrUxTtVe0Dspel6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft
Manifest number:          0164
Signing time:             Wed 30 Sep 2026 04:01:12 +0000
Manifest this update:     Wed 30 Sep 2026 04:01:12 +0000
Manifest next update:     Thu 01 Oct 2026 04:01:12 +0000
Files and hashes:         1: jg0lcq37cjROrUxTtVe0Dspel6I.crl (hash: P4O8zGf6I7v1yoYVcER3IDFmvwgMbcA8QpIVz+2UCIs=)
                          2: oGvecxChE9PvAr_dJh5s6G_15uM.roa (hash: CJ9Dwla0xxRWMrW9UQklY6shlGWQmLDV86+ixrs3Kxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jg0lcq37cjROrUxTtVe0Dspel6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f0:79:3e:2a:e4:5f:9c:5c:ca:0c:be:17:18:ce:99:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e0d2572adfb72344ead4c53b557b40eca5e97a2
        Validity
            Not Before: Sep 30 04:01:12 2026 GMT
            Not After : Oct  1 04:01:12 2026 GMT
        Subject: CN=6898378e6a6acc148587096694e1085f99934d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:ad:41:96:f1:7f:a9:77:09:7e:64:cb:35:
                    f7:02:ff:64:9c:9f:6c:4f:7f:d4:85:bd:f1:1b:b8:
                    4d:24:7d:3b:e2:8a:ee:e7:81:f4:ac:5b:db:b3:fb:
                    a2:43:8d:4f:9e:7e:49:37:ed:a8:41:4f:a7:de:31:
                    3d:43:34:e2:c8:b0:8e:c7:0c:9e:03:4f:d9:81:86:
                    90:93:01:cb:f7:79:5b:85:4c:2a:e9:6d:fe:e2:f4:
                    f2:2f:e6:e5:0c:b8:8f:73:f1:17:3a:b8:6b:27:a1:
                    9d:f6:5c:3e:11:69:9a:c8:7f:23:39:8b:57:9c:7e:
                    25:80:ca:42:c9:b8:b6:e7:2e:51:5c:e5:7a:51:02:
                    99:b5:4b:fa:3d:74:51:3c:3c:bd:de:eb:8c:c4:d6:
                    ff:88:e5:f7:8e:f6:2b:3b:8f:8f:e7:f5:a3:82:5b:
                    7b:25:9c:23:ba:27:ff:cf:3e:9f:6d:c7:bf:db:12:
                    4d:01:82:d4:48:4b:73:c4:a0:4d:61:c5:bc:bb:25:
                    ba:d8:22:08:f2:64:e5:a1:07:32:88:7d:3a:02:12:
                    d3:e5:1e:e1:a9:49:6f:7e:c2:d7:a0:f7:e3:22:c9:
                    f0:81:29:8b:bb:d6:7c:8c:0c:63:44:d5:c0:29:4e:
                    50:35:b7:bc:48:55:ac:c5:e0:8c:a4:f8:e2:18:f4:
                    4d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:98:37:8E:6A:6A:CC:14:85:87:09:66:94:E1:08:5F:99:93:4D:45
            X509v3 Authority Key Identifier:
                keyid:8E:0D:25:72:AD:FB:72:34:4E:AD:4C:53:B5:57:B4:0E:CA:5E:97:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jg0lcq37cjROrUxTtVe0Dspel6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:92:d5:dd:21:4c:2b:0a:81:05:43:08:24:c4:46:cc:6b:d3:
         c9:3b:d0:9f:17:ce:69:51:81:50:13:be:18:0a:21:18:4c:6c:
         84:82:7d:b2:0b:98:a0:a7:35:0e:47:91:3b:b4:50:11:91:64:
         c9:88:ec:22:c9:e7:67:09:e9:27:61:4d:44:2c:a2:27:85:7a:
         44:13:f9:ac:72:ec:27:65:b9:80:40:64:89:26:83:d7:29:71:
         25:d5:8d:b5:32:6c:05:31:ca:d1:01:3f:1c:7f:98:50:f3:b6:
         a7:66:e1:30:70:b3:96:cb:09:d3:cf:27:db:7d:c0:df:ff:dd:
         db:6e:3b:bb:55:c7:20:8c:dc:f7:fc:16:97:ea:e4:b4:58:cc:
         3c:eb:57:d5:ac:39:07:bc:49:ac:4d:b4:f6:3d:65:59:aa:86:
         d0:b1:0e:6c:59:15:f1:87:9f:5b:5b:5a:cb:28:1f:00:94:d2:
         ec:28:d2:ef:99:60:15:64:fa:2a:8f:f9:c3:9e:01:89:5c:d6:
         2f:d3:a9:f1:2d:37:84:58:6a:78:5e:0b:83:ff:84:98:64:25:
         5e:ca:47:f2:df:9d:ed:a5:c7:c9:c3:ba:8e:49:e6:a2:b2:9a:
         5d:d0:23:9b:79:85:03:e6:b2:df:0f:6e:af:41:eb:4b:84:83:
         04:9a:93:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDweT4q5F+cXMoMvhcYzplwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMGQyNTcyYWRmYjcyMzQ0ZWFkNGM1M2I1NTdiNDBlY2E1
ZTk3YTIwHhcNMjYwOTMwMDQwMTEyWhcNMjYxMDAxMDQwMTEyWjAzMTEwLwYDVQQD
Eyg2ODk4Mzc4ZTZhNmFjYzE0ODU4NzA5NjY5NGUxMDg1Zjk5OTM0ZDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNOtQZbxf6l3CX5kyzX3Av9knJ9s
T3/Uhb3xG7hNJH074oru54H0rFvbs/uiQ41Pnn5JN+2oQU+n3jE9QzTiyLCOxwye
A0/ZgYaQkwHL93lbhUwq6W3+4vTyL+blDLiPc/EXOrhrJ6Gd9lw+EWmayH8jOYtX
nH4lgMpCybi25y5RXOV6UQKZtUv6PXRRPDy93uuMxNb/iOX3jvYrO4+P5/Wjglt7
JZwjuif/zz6fbce/2xJNAYLUSEtzxKBNYcW8uyW62CII8mTloQcyiH06AhLT5R7h
qUlvfsLXoPfjIsnwgSmLu9Z8jAxjRNXAKU5QNbe8SFWsxeCMpPjiGPRNLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiYN45qaswUhYcJZpThCF+Zk01FMB8GA1UdIwQY
MBaAFI4NJXKt+3I0Tq1MU7VXtA7KXpeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamcwbGNxMzdjalJPclV4VHRWZTBEc3BlbDZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9jMjBkMDEtZTUyOC00NDg5LWExMGMt
NjZlYjNlM2RlYzk1LzEvamcwbGNxMzdjalJPclV4VHRWZTBEc3BlbDZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9jMjBkMDEtZTUyOC00NDg5LWExMGMtNjZlYjNlM2RlYzk1
LzEvamcwbGNxMzdjalJPclV4VHRWZTBEc3BlbDZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpLV3SFM
KwqBBUMIJMRGzGvTyTvQnxfOaVGBUBO+GAohGExshIJ9sguYoKc1DkeRO7RQEZFk
yYjsIsnnZwnpJ2FNRCyiJ4V6RBP5rHLsJ2W5gEBkiSaD1ylxJdWNtTJsBTHK0QE/
HH+YUPO2p2bhMHCzlssJ088n233A3//d2247u1XHIIzc9/wWl+rktFjMPOtX1aw5
B7xJrE209j1lWaqG0LEObFkV8YefW1tayygfAJTS7CjS75lgFWT6Ko/5w54BiVzW
L9Op8S03hFhqeF4Lg/+EmGQlXspH8t+d7aXHycO6jknmorKaXdAjm3mFA+ay3w9u
r0HrS4SDBJqTng==
-----END CERTIFICATE-----
Generated at Wed Sep 30 09:23:14 2026 by rpki-client