Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
File:                     JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json)
Hash identifier:          HpyGM0Lrh4XUDFb9ouqR3oxp0JcLuY5/k/dDMEJQlzk=
Subject key identifier:   08:C4:0B:2A:C4:85:BD:37:46:FE:B6:01:02:76:22:0E:C5:6D:DF:F1
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Certificate issuer:       /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial:       01A1385B107E521853EC0047DFCC5CBD7663
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
Manifest number:          1AE6
Signing time:             Wed 14 Oct 2026 03:00:54 +0000
Manifest this update:     Wed 14 Oct 2026 03:00:54 +0000
Manifest next update:     Thu 15 Oct 2026 03:00:54 +0000
Files and hashes:         1: 17xPyZlJEOUx5zEX8ZO8erx4H74.roa (hash: o78ZIjezoB+5hFnpSV2hhbyqsGtrTAReQHzLkPsSMs8=)
                          2: 1HSk7ol-NPF4p9rYRcl-Q6JPZDo.roa (hash: +FiTw/39WUh9LOAGYF5ppee39UlTfw1pjYmCcmzZE8I=)
                          3: 1wsMVCeL93UzN5b0Yvsk2yYuWLA.roa (hash: 99X69fNFzFuCPq29Xhv4yLun4KnsOh44dtaBCjapBbQ=)
                          4: 2RHKEFUbX-V0Mf6y31Iq5dGlemY.roa (hash: 22aNA0RqHM/lo1ZuXKI24lPSyNZYgt9FvnHMilKuHJY=)
                          5: 2q-y1nHjenu9twtcEVm8uPj-ddE.roa (hash: kKq4uoPjr9yzILuLqmWkg6QD55vf8pDPM+f+YLfRhpg=)
                          6: C58HKVenwwmbh1jkwoeqIUWdglo.roa (hash: dbM/VaOE1y6PqBg/KjdbXvgt9ovsuviuBnEC3nra0Jo=)
                          7: Ebg0ux5rcibv_t_FMLVeGO1p-6s.roa (hash: /4FrUXbz6Hz/uPMenmCysdLSPs/BOSlhWYQVSb8RAn0=)
                          8: GEKxvGic2KzXVJsj3dcok72CGco.roa (hash: aFBfIqFU6Ts846KW9SXo+ReP3IL9/U988JwYsIxQACw=)
                          9: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: 7qiIW6hNzg+HNabChQakh5iBWQ+JXyEu6U0K02PBNW8=)
                          10: TN_g4sfmmPrHK_oZ30J7gNWtpIY.roa (hash: m5dgi6YlmiEMbhGuQK1tT2ie/bg//bcOLn6xqpAH6Zs=)
                          11: U_DCEtPw_hUMwrzj8r6wUIXBPig.roa (hash: zOV0/cSp312KHscfdmAUHtLOyMQW+m7fH0EzuAciKbU=)
                          12: WPjlp9q2_irNOFHbvH1KxHiPhtg.roa (hash: nGNubH07FwuuTBRkZu6sDa2SbPeua6Dt0ORJDlPOSMk=)
                          13: XVl9Jn76mWQ8ncaJ_wDuumCSFsA.roa (hash: Hs6XsuXHPXeVRFbGDUcPFLc6y5U4gwmlkZ/AR7/NeXE=)
                          14: h-WKTlUMQLOqlyLFoGBOWfk4OrY.roa (hash: ieHJu/E+ae+fHEeWcEYzkuUUaqlobiXz9aHuLMbuIyg=)
                          15: hscVJa1zcFdyUccI8x5yH0qcNiw.roa (hash: uNP1bqmcK4itRcnCcHmI+yjjtNKZn/HDFyPe+Myxey8=)
                          16: js8xc1HEU1XUI0sBZfF0bl5Ntsc.roa (hash: AdO5qS0u+S/3mUbxDukdjf7Jfxyoy7D8xgFedRy81VA=)
                          17: k_MSpCKVnChWzSccoFJBjl40Vo8.roa (hash: VdSgjLWna9h9svrbMMSXJmkEe/+wqNq0RNqZ0DwPUZc=)
                          18: xyAifHL4yJafsXbZXrkrgodDKkI.roa (hash: 5dlJ/03oKMrYHI2ijFPlXqVyiklmxqeJzGBSWajGiKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:38:5b:10:7e:52:18:53:ec:00:47:df:cc:5c:bd:76:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
        Validity
            Not Before: Oct 14 03:00:54 2026 GMT
            Not After : Oct 15 03:00:54 2026 GMT
        Subject: CN=08c40b2ac485bd3746feb6010276220ec56ddff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:65:6c:98:d3:c8:c5:01:17:f3:f2:5f:52:ed:
                    ed:ab:9d:a4:83:d4:32:75:ee:01:b4:02:8b:40:49:
                    05:e0:4d:f9:cd:65:6b:4b:ed:33:73:87:a3:cb:37:
                    a3:6f:48:78:a8:9b:43:b8:f7:52:0f:c9:ee:c7:20:
                    74:78:8a:af:aa:d3:c0:c8:92:25:88:9a:e0:c6:e9:
                    1d:02:51:46:0c:76:e4:41:75:6a:80:3a:c9:60:03:
                    f9:cb:97:dd:ff:0e:f1:ce:32:a0:53:0f:2d:55:a4:
                    98:81:08:76:28:08:36:48:7c:84:a0:23:eb:a1:f6:
                    3c:80:ab:c1:c9:41:23:02:c3:f4:94:27:da:79:63:
                    7e:49:53:f8:dd:43:45:5c:17:b1:84:68:21:ff:6c:
                    50:51:a8:ad:51:4f:b5:78:9b:ca:20:6e:92:0c:b0:
                    64:5e:79:d1:b3:56:1d:c4:7d:ce:80:09:a2:c7:a3:
                    91:98:e3:e1:e0:9e:3a:cf:91:28:32:19:48:60:f7:
                    bc:1d:9a:31:9e:1c:48:56:99:65:55:b6:3a:b8:a2:
                    3f:23:d3:4b:c6:b3:a9:15:62:02:a5:46:5e:e4:6c:
                    81:22:6d:f4:dc:84:b6:68:9b:d3:16:51:a5:03:48:
                    b7:dc:58:75:3a:1e:ec:17:69:ef:35:da:77:c6:1d:
                    ab:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C4:0B:2A:C4:85:BD:37:46:FE:B6:01:02:76:22:0E:C5:6D:DF:F1
            X509v3 Authority Key Identifier:
                keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:6a:d3:72:4f:08:6e:dd:03:e9:fd:86:7d:6a:52:af:4d:5c:
         c8:e9:73:3a:ea:6d:b6:3d:d0:9d:45:2d:05:04:55:7c:07:e5:
         2f:0b:b8:14:84:7b:09:fb:3d:64:da:c2:d0:49:64:ed:35:29:
         dd:43:82:e6:35:97:f1:bc:5e:2f:60:ce:80:b3:5e:31:9f:95:
         57:40:e6:62:e2:1f:fa:5e:97:22:54:69:be:58:a6:99:33:e4:
         ee:1f:09:b8:43:4d:3d:8c:0d:1c:7c:d0:e8:8d:cb:66:03:62:
         34:54:29:e2:97:19:36:b2:4d:d3:de:db:08:6a:49:5a:48:72:
         4e:8e:99:aa:04:44:da:7e:a1:53:c9:5e:f1:2d:f3:8a:2e:95:
         cb:54:90:1a:84:31:c1:6a:f0:67:b6:43:c2:2e:26:46:f0:9d:
         44:35:ff:57:b5:ea:cc:eb:4d:27:d9:55:5a:46:c8:1e:5e:69:
         8c:7e:d4:2d:81:4c:88:91:01:6e:42:2c:55:f5:1b:2b:93:4e:
         6c:bb:7f:d9:63:d7:af:70:bc:72:8d:43:1f:9c:22:8b:67:46:
         a4:a9:f9:fc:3c:ef:0a:2d:46:4a:c3:af:5c:5b:c9:64:a8:9a:
         d6:d8:b2:1d:50:31:de:72:33:2c:b6:a1:36:74:7c:7d:7d:2f:
         3c:c6:40:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:02:36 2026 by rpki-client