Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
File:                     JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json)
Hash identifier:          4yMeL7XeG6mOkW9QnXTxYnodo9tmBvUT7lg5vZVPrV0=
Subject key identifier:   73:72:85:81:8C:77:61:D5:FB:ED:F5:D4:CB:5A:55:D4:BB:7A:51:2C
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Certificate issuer:       /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial:       01A0BE79CC1ABDF86684B996560676A62A42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
Manifest number:          17BA
Signing time:             Sun 20 Sep 2026 11:00:48 +0000
Manifest this update:     Sun 20 Sep 2026 11:00:48 +0000
Manifest next update:     Mon 21 Sep 2026 11:00:48 +0000
Files and hashes:         1: 1-J4PSDEl9d0llDjfWsIWQxWc6_I.roa (hash: ypQcjGIhT4f6yMw/Eo/q0CXm3np4TkiH1MrKx8KGA8U=)
                          2: FXvxd8iSb5UOqnUQemVQoiPFHr0.roa (hash: xAaj8WYWxsUYDp5IjPLpIHhUT6JTzTLFtyE0B9OOTCo=)
                          3: Hhk99kTP4LCptCcuzr46HrrOd-M.roa (hash: KKoc5a/NPGDFa/jCr9dayn05xHXif4MHgG7H+qe8WPY=)
                          4: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: N86bQ2EqV+hf/8ArNOEYzTuNiNsZSwqOifHx366uFZs=)
                          5: L1RzkfPfTsvXjCHGU9y2D9E0E90.roa (hash: 0f6/lFSOQ++NQjhLTXas3wh38lh/IbOn+eL45Gt4mH0=)
                          6: QAlAc_HBKVW9DIWsgBjzQBqlU_E.roa (hash: 01SGs9bF17s9PyhMPPV7iXjRmYd6onnnyv/wBFXQkVo=)
                          7: aFDzVrUv1Lh1tFcqGx2iUSN6t2Q.roa (hash: R1nEMHyCK4EFeYy8SvPh7cZUDUUFnN2AYX39p24Ukns=)
                          8: cH5zbNz1Wh4pKh9CZsUewwJjPYc.roa (hash: o7xAeOganmOKEfHkamPKsHaW6ANhyRw4vYPfGEPHmXY=)
                          9: ekIg_EozOl2eKAl7YxwTNudO2Ck.roa (hash: H4suzunJCL6M7y1bzbaVMfsdpvdTVp5XzrKgoj5v1bk=)
                          10: kJQG6geGOu2RAJRA_7GzYnIhBYQ.roa (hash: XUqqP9TjiZCkPcmNHG3SdvuU3ttO6pgsFTxEU7wHJZE=)
                          11: mw4aax5neyyO7biCg_R2Z4yrLVY.roa (hash: kswP+nDZIDDBYumEaipi/RTPJYiM8dVDU96MMsZcT28=)
                          12: nmDQzXrowDtDsmaT7IpPejjRWG0.roa (hash: GXfSa12Z+HzkUJgQU3oz+bpDRacv3sjfzvlZHnK3Bnk=)
                          13: rlGWAgfAA94vdNw8Yce_2JC5ZQ0.roa (hash: mDS85C7fKFjtrZ9jEwtQ1X6vTpwU05nL4sqzCM649dA=)
                          14: x0Q_UA5bt6672Dm9-Yp-CrnW3nQ.roa (hash: ITlCsYh8cqhggq4VF3aslLQZ6vv7ci4qGlAuU+En704=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:79:cc:1a:bd:f8:66:84:b9:96:56:06:76:a6:2a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
        Validity
            Not Before: Sep 20 11:00:48 2026 GMT
            Not After : Sep 21 11:00:48 2026 GMT
        Subject: CN=737285818c7761d5fbedf5d4cb5a55d4bb7a512c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:68:2c:b3:f4:f8:f9:21:c6:e1:09:58:68:
                    5d:bf:bc:e1:b0:8a:b2:3f:04:9b:65:80:6c:5b:81:
                    26:2f:73:f1:ba:1d:ae:b7:ad:dc:16:ff:b8:9d:62:
                    c2:d1:88:54:5d:2d:da:f4:1d:1e:5e:00:14:ec:9e:
                    a2:1e:cb:0c:aa:86:f2:48:ae:9f:4c:c9:3b:fe:43:
                    e3:67:ae:36:06:85:6e:31:c8:93:d6:c4:90:95:48:
                    4c:52:b0:68:08:50:38:9e:21:f8:83:86:52:43:8d:
                    a9:6d:06:a3:23:38:87:3a:e0:5f:9d:a0:e8:a7:6e:
                    a4:b4:23:10:17:cc:4f:6a:d6:fb:84:cd:1e:0f:ed:
                    bd:94:30:4d:9f:75:bf:c3:a8:3e:a6:73:36:57:c7:
                    50:1d:ad:3b:de:bc:dc:52:00:cf:83:2f:c2:f9:88:
                    4d:24:10:31:2f:1e:86:3a:da:93:49:16:15:16:92:
                    b0:e5:dc:0d:70:e3:8a:e8:1b:a5:f5:f6:a0:29:81:
                    46:0a:35:d5:c1:6c:8f:96:ce:0e:34:9b:0e:04:22:
                    f6:92:3a:c4:2b:87:1a:93:86:86:c9:52:64:f2:54:
                    a6:5c:2e:95:50:77:f5:43:82:b3:18:46:40:02:c2:
                    fe:13:43:68:f4:29:bb:4f:ba:e0:7e:3a:55:eb:f9:
                    ea:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:72:85:81:8C:77:61:D5:FB:ED:F5:D4:CB:5A:55:D4:BB:7A:51:2C
            X509v3 Authority Key Identifier:
                keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c2:20:a2:df:99:b4:9d:54:f4:22:c1:f0:a9:44:b7:cb:ec:
         74:f7:f2:a3:94:e1:27:1e:67:c2:18:2f:a1:fd:e6:6b:7e:c2:
         fe:39:b7:f0:57:27:95:00:9a:c9:77:46:51:4f:6e:b0:78:0b:
         0f:4e:5a:79:f4:85:02:6c:e9:b4:2b:ea:d2:f2:fe:7e:f7:3d:
         ae:b9:39:84:32:c4:ab:4c:30:bf:a5:aa:47:bc:59:c9:3f:76:
         5a:5f:53:db:7e:45:57:99:77:25:c5:23:54:14:24:36:d8:9d:
         b1:95:72:4e:ae:b2:23:c0:82:ca:5b:45:e2:0a:9e:8a:52:b1:
         66:79:81:d2:a2:66:9f:4f:37:16:7f:77:9b:08:21:3e:3e:56:
         4e:f8:2a:f8:62:95:60:ac:04:09:73:b6:15:8b:b9:63:d2:15:
         98:c6:05:50:47:b5:9b:6f:d6:dc:7b:39:05:de:6a:96:23:a2:
         8b:23:53:cd:b7:65:ef:17:82:c0:bc:fb:19:1a:d6:22:f9:b9:
         ad:d0:b2:49:8e:45:9d:1e:ab:87:cc:a1:c6:d1:af:dc:47:51:
         4e:15:a7:b1:28:6d:ef:e7:b7:4c:0f:67:ca:67:bf:f2:f5:78:
         81:7d:62:c1:44:87:51:ec:e1:cd:ea:a2:51:5d:e0:ab:88:5b:
         30:8b:9a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:08:08 2026 by rpki-client