Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
File:                     jvxhDOe89HllH9lRjCiJTtHrWoQ.mft (raw, json)
Hash identifier:          Y2MNfVW1PNyzvsUhTXDAJdBEYlZ+JZs0y4amadai/RA=
Subject key identifier:   65:6C:AA:DA:2C:98:E1:83:D5:FC:A0:BB:01:B2:26:E8:E1:ED:91:1D
Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
Certificate issuer:       /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Certificate serial:       01A0E51A1FC62FBF4F073849F94B0A5B4115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
Manifest number:          0AD4
Signing time:             Sun 27 Sep 2026 23:01:29 +0000
Manifest this update:     Sun 27 Sep 2026 23:01:29 +0000
Manifest next update:     Mon 28 Sep 2026 23:01:29 +0000
Files and hashes:         1: jvxhDOe89HllH9lRjCiJTtHrWoQ.crl (hash: c1Ku/Spbqqwbwi/bSyih1d2VUP18BdOkVHSLJs1Zsm4=)
                          2: rx7GC_CHfYxl4Ofnp8MOvM23hM8.roa (hash: 81lkujtMvuC5mIlhZHNqQoKSuJAiHrlt9j7cnoTOQdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:1a:1f:c6:2f:bf:4f:07:38:49:f9:4b:0a:5b:41:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
        Validity
            Not Before: Sep 27 23:01:29 2026 GMT
            Not After : Sep 28 23:01:29 2026 GMT
        Subject: CN=656caada2c98e183d5fca0bb01b226e8e1ed911d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:d3:08:03:90:ea:46:53:41:8b:78:3c:b0:
                    8b:f1:43:da:7d:2a:43:2d:c8:30:6e:4c:48:26:e0:
                    49:a7:5c:29:05:87:32:c0:88:54:a7:d3:df:85:5d:
                    5f:b5:67:98:52:b0:74:7f:8a:aa:b5:cd:89:5f:b3:
                    3c:09:4e:0f:6f:16:68:d6:3f:6d:1d:da:7e:00:cd:
                    41:d4:6a:b5:60:0a:86:06:12:f1:18:c1:ba:ff:65:
                    a6:1d:24:d5:34:67:d8:10:16:cf:3b:19:1d:ea:7f:
                    66:03:04:1f:83:f5:bc:2d:35:98:54:a8:18:3e:ac:
                    e5:9c:df:c5:46:4d:60:99:54:dc:a6:8c:db:a9:87:
                    e9:ed:53:dc:64:cd:0e:6a:b4:81:ea:a0:4c:cd:ae:
                    56:75:3d:de:07:6e:a4:05:df:d6:3d:74:98:92:6b:
                    87:88:41:7c:33:74:41:a9:c3:c8:b6:11:a8:79:68:
                    0e:ed:bc:38:3c:c4:a0:b8:3b:d7:54:e9:dc:d5:58:
                    f2:c7:69:c2:9c:7e:80:35:75:7d:66:41:b7:31:28:
                    55:a1:57:01:1f:27:11:ee:4a:49:92:82:1c:2b:3f:
                    5c:4e:41:7e:dc:0e:36:93:89:b5:4c:d7:c1:72:0f:
                    af:2d:e8:73:3d:52:19:0e:03:3a:51:7d:0d:68:37:
                    b4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6C:AA:DA:2C:98:E1:83:D5:FC:A0:BB:01:B2:26:E8:E1:ED:91:1D
            X509v3 Authority Key Identifier:
                keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:db:7a:c1:34:77:bd:f7:9e:2b:5c:50:07:78:fc:c8:ec:67:
         0b:4e:50:e0:24:82:ce:ed:1f:1c:80:6d:41:47:52:21:9d:b4:
         83:65:1b:3e:6e:f9:7b:e7:94:a2:82:64:11:ee:34:1d:b1:91:
         c6:fb:3d:94:06:a0:39:85:b8:48:2e:2e:0c:67:db:78:7e:95:
         b5:9f:4d:e9:de:f1:2a:44:33:45:6d:41:fe:37:15:6d:78:60:
         ec:f9:5d:af:60:35:6d:1c:29:05:91:bf:c9:13:98:c1:07:12:
         c9:ca:fa:1f:05:f1:76:d1:f5:bf:96:c8:71:34:51:06:4e:54:
         d2:fe:d0:9d:f9:7d:df:0b:d7:55:41:f2:77:1a:0d:32:82:b3:
         cf:9a:e6:3a:a7:6d:9e:d3:02:f7:f9:d9:81:d3:9b:63:7d:ff:
         7c:5a:b8:c4:d9:76:7c:39:a1:30:92:19:03:c9:73:82:c3:ef:
         bb:08:f0:cd:eb:81:49:e0:95:8b:57:a3:37:49:25:e7:c8:1c:
         69:40:42:3b:a8:92:ca:77:4a:82:ce:a1:99:1b:e8:2b:0f:71:
         39:07:2f:69:cf:68:e0:8e:69:dd:cc:3c:1d:78:b3:80:f7:c0:
         a6:1c:37:b6:ba:3c:6b:fb:e3:67:53:e8:91:fa:b9:5e:fb:ff:
         e7:0f:ac:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDlGh/GL79PBzhJ+UsKW0EVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZmM2MTBjZTdiY2Y0Nzk2NTFmZDk1MThjMjg4OTRlZDFl
YjVhODQwHhcNMjYwOTI3MjMwMTI5WhcNMjYwOTI4MjMwMTI5WjAzMTEwLwYDVQQD
Eyg2NTZjYWFkYTJjOThlMTgzZDVmY2EwYmIwMWIyMjZlOGUxZWQ5MTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWzTCAOQ6kZTQYt4PLCL8UPafSpD
LcgwbkxIJuBJp1wpBYcywIhUp9PfhV1ftWeYUrB0f4qqtc2JX7M8CU4PbxZo1j9t
Hdp+AM1B1Gq1YAqGBhLxGMG6/2WmHSTVNGfYEBbPOxkd6n9mAwQfg/W8LTWYVKgY
PqzlnN/FRk1gmVTcpozbqYfp7VPcZM0OarSB6qBMza5WdT3eB26kBd/WPXSYkmuH
iEF8M3RBqcPIthGoeWgO7bw4PMSguDvXVOnc1Vjyx2nCnH6ANXV9ZkG3MShVoVcB
HycR7kpJkoIcKz9cTkF+3A42k4m1TNfBcg+vLehzPVIZDgM6UX0NaDe0wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVsqtosmOGD1fyguwGyJujh7ZEdMB8GA1UdIwQY
MBaAFI78YQznvPR5ZR/ZUYwoiU7R61qEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yODk0ZDctMTRlZS00NmFiLTg4MmEt
MjEyNzJiODc3MjhiLzEvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yODk0ZDctMTRlZS00NmFiLTg4MmEtMjEyNzJiODc3Mjhi
LzEvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9t6wTR3
vfeeK1xQB3j8yOxnC05Q4CSCzu0fHIBtQUdSIZ20g2UbPm75e+eUooJkEe40HbGR
xvs9lAagOYW4SC4uDGfbeH6VtZ9N6d7xKkQzRW1B/jcVbXhg7Pldr2A1bRwpBZG/
yROYwQcSycr6HwXxdtH1v5bIcTRRBk5U0v7Qnfl93wvXVUHydxoNMoKzz5rmOqdt
ntMC9/nZgdObY33/fFq4xNl2fDmhMJIZA8lzgsPvuwjwzeuBSeCVi1ejN0kl58gc
aUBCO6iSyndKgs6hmRvoKw9xOQcvac9o4I5p3cw8HXizgPfAphw3tro8a/vjZ1Po
kfq5Xvv/5w+sTQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 05:43:13 2026 by rpki-client