Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
File:                     u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft (raw, json)
Hash identifier:          m0T1uPeD6cW9WMbmYa8/FFYL3TunuKGItKdpsxJkgYs=
Subject key identifier:   E1:59:2B:E9:4C:88:03:E2:61:7D:8C:5B:AD:68:20:04:86:90:8F:12
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Certificate issuer:       /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial:       01A0C8FD799B921FEB2CD895FB0AD24F481D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
Manifest number:          16EF
Signing time:             Tue 22 Sep 2026 12:00:49 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:49 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:49 +0000
Files and hashes:         1: BDPTI5i4mKqpMJBYvSboypMMNuE.roa (hash: RTLrC8P78AL/8G7o0NMHm7j+X+zOpyoxook+7m1TQVo=)
                          2: d2KT8A8pg82saNRdGq6GRMXB3UA.roa (hash: dF7P01hXnA73GTd4pqtox0R46I5SwoggxbtIgrQCC9Q=)
                          3: rwrTXXvd3xuLJd2WdLXGwxgR7ZU.roa (hash: oMOWLalKve6BcbDPvs16UdYfNlQpBDtwtyZAEUofk5I=)
                          4: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl (hash: mxrlU8UJ2DsZEqpIkJD12Y9F4lk6RmRAsEK9+bsX5sA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fd:79:9b:92:1f:eb:2c:d8:95:fb:0a:d2:4f:48:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
        Validity
            Not Before: Sep 22 12:00:49 2026 GMT
            Not After : Sep 23 12:00:49 2026 GMT
        Subject: CN=e1592be94c8803e2617d8c5bad68200486908f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bf:c9:be:31:bf:9d:df:cc:98:b7:48:eb:84:
                    2b:94:43:a2:73:4e:43:fb:84:57:1d:60:4e:ff:1f:
                    00:b5:8f:c1:b7:34:ca:bb:3a:22:80:4e:2c:d1:dd:
                    97:b2:28:a9:89:8e:01:0e:b8:df:66:8a:8b:0c:ad:
                    8e:ed:e7:79:22:8d:cf:b7:13:fe:5e:1c:06:af:38:
                    d5:5c:02:cd:7f:d7:fd:e5:bd:66:9d:03:85:f1:2e:
                    9b:c2:19:25:73:fb:4d:6e:02:fd:1d:a9:3b:ba:9e:
                    c8:b3:6e:c5:04:b4:9a:20:e3:ee:46:44:38:a5:49:
                    88:ad:7d:68:2e:b3:33:78:20:73:93:e0:0e:68:6d:
                    1a:40:a7:01:66:de:f9:78:3a:d1:7f:97:65:e2:b6:
                    b6:aa:42:cc:38:cf:23:ea:d4:56:14:4f:a3:e4:e0:
                    16:18:3b:6b:b6:5e:d8:0b:46:57:ef:74:0d:3e:20:
                    34:65:52:9e:be:aa:07:d3:d1:70:2f:4a:8b:b7:08:
                    08:56:51:94:48:f9:07:14:6b:bb:8f:f4:de:bc:98:
                    08:fe:62:ac:3d:0f:05:39:9a:12:21:ab:92:92:37:
                    4a:e4:f3:94:c6:ce:58:9a:e0:2e:f9:5d:52:9c:3b:
                    73:c3:d2:ea:aa:be:76:a1:d2:bf:86:bd:fd:2e:c7:
                    cf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:59:2B:E9:4C:88:03:E2:61:7D:8C:5B:AD:68:20:04:86:90:8F:12
            X509v3 Authority Key Identifier:
                keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d8:0d:6c:ac:70:ec:14:28:cc:74:43:80:bd:26:85:b5:73:
         ee:94:d8:76:0e:71:b6:0b:94:5b:06:bc:a4:31:a0:78:70:a4:
         b2:33:cd:fd:e4:49:7f:a2:99:0e:56:a2:1e:55:0f:26:4f:8d:
         24:a0:de:fc:91:e8:75:98:a6:7c:61:de:c7:83:7b:26:43:3b:
         54:ec:04:fd:78:58:a4:60:73:3f:e8:12:d6:32:9d:66:91:20:
         15:8b:a4:43:b0:e7:47:9d:b7:40:db:22:ad:65:5e:4b:27:e7:
         0a:a9:e6:8c:4a:4b:36:ff:ae:b1:a8:9a:5b:a6:b0:e2:28:52:
         6d:8f:d8:d1:2f:54:da:a9:69:e6:f7:18:d9:95:cf:56:02:8a:
         00:a3:a6:6d:a4:43:d5:a4:c3:a6:db:f2:b4:28:94:f9:60:61:
         13:6b:83:75:04:88:db:b8:17:5b:34:69:ac:8d:54:85:ec:c0:
         08:dd:a5:ec:8a:26:a7:2a:2e:7a:9a:50:8e:8f:c5:51:0d:c4:
         26:03:45:db:eb:95:23:40:32:37:b0:c3:a7:e7:b9:25:d6:41:
         67:68:12:db:b1:2c:42:05:08:44:e3:44:93:56:ea:00:32:36:
         62:f7:8b:0a:24:f0:2c:a7:39:c2:0f:4f:3f:7c:18:c3:2c:fc:
         91:a8:4f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:34:31 2026 by rpki-client