Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
File:                     jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft (raw, json)
Hash identifier:          dHVPTvmPIqPT0t46j31GRWuJLAFuGMSEl6MJ0SsDwXY=
Subject key identifier:   A1:60:80:C2:63:FF:16:1E:E6:40:EB:B6:25:21:7E:D0:25:3E:47:CF
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Certificate issuer:       /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial:       01A0DFF3735490DEE596766420126C6CBEAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
Manifest number:          135C
Signing time:             Sat 26 Sep 2026 23:01:08 +0000
Manifest this update:     Sat 26 Sep 2026 23:01:08 +0000
Manifest next update:     Sun 27 Sep 2026 23:01:08 +0000
Files and hashes:         1: 2dl-f-UK6z-wcsJEmLBo_kTVQA0.roa (hash: E+Lj08rzgs1LC3v6bo+hL91M0+iDXn1Q2UMdAOL8ihg=)
                          2: BcaKc_qpZcw6gUkkrXQbt6m-3Nw.roa (hash: FCBImm07RTNhqFegiiS82dUG+xaTXFVxce08GQ6qTS0=)
                          3: MxVivBucAENp2PAscr5joXqh_oY.roa (hash: qdH6vqEjmsgzasuWWeKuMXOT/SGrMj1v+Oi8w3/Eecw=)
                          4: PPTpKN0G94Qk3SCfG74G6E4gLdw.roa (hash: IpDfPDw0GzTAcezF6u+iyqtASEo3jItEu1XZDEJz9Yk=)
                          5: jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl (hash: pLoZt69oFi+37BUIyuXYiZmOVoKq5ePNOd2D2kQE2FQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:f3:73:54:90:de:e5:96:76:64:20:12:6c:6c:be:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
        Validity
            Not Before: Sep 26 23:01:08 2026 GMT
            Not After : Sep 27 23:01:08 2026 GMT
        Subject: CN=a16080c263ff161ee640ebb625217ed0253e47cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1a:f9:96:90:56:ab:15:4d:e6:d5:62:18:fe:
                    b2:37:62:84:8b:a4:34:7b:6c:03:b7:5d:dd:01:8b:
                    88:b4:56:9b:8a:a0:36:e2:14:ad:ef:ca:22:be:64:
                    41:78:42:c1:03:22:20:df:b0:86:2f:38:17:50:52:
                    b8:fe:67:a3:b4:30:75:db:1a:f0:8f:f9:d2:c6:66:
                    34:31:6c:c4:00:d6:3c:7d:2c:c4:69:d9:22:b7:76:
                    74:93:f7:de:9f:8d:22:86:80:c7:c1:45:d7:78:11:
                    2d:5c:2b:19:c9:e1:66:4c:4c:8e:10:a9:d4:ee:e7:
                    53:a2:de:75:00:ae:45:9a:97:25:4b:f4:18:4a:7c:
                    af:f0:9d:4a:0b:37:d0:ce:35:56:cb:d9:47:3d:4e:
                    60:6c:c7:9f:40:f5:fa:8a:51:fe:88:69:f0:16:a0:
                    c2:b0:e4:4f:24:70:12:e1:09:c5:43:b3:84:11:54:
                    6f:33:f4:e6:f0:9b:b8:c4:b5:28:8f:a9:24:b6:92:
                    5d:cf:b1:6b:50:95:a4:c9:6d:c1:d8:6b:13:e9:29:
                    0c:d7:91:c9:3f:f0:fd:65:0e:54:f1:82:86:47:d1:
                    35:95:22:2e:9e:55:06:79:94:d9:8e:52:1b:4a:52:
                    0b:85:d3:86:7e:f2:c0:61:83:9f:bd:60:7b:fb:f0:
                    bd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:60:80:C2:63:FF:16:1E:E6:40:EB:B6:25:21:7E:D0:25:3E:47:CF
            X509v3 Authority Key Identifier:
                keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:6d:63:e1:23:2e:4f:57:54:49:64:1c:6a:f6:41:b8:42:93:
         ae:7c:59:22:75:f7:85:87:7d:1b:98:d2:67:29:91:14:8e:73:
         38:9b:6a:93:6d:92:1a:37:97:15:49:b9:c5:75:86:23:66:7a:
         97:9f:9b:26:ee:58:f1:23:88:72:f6:08:26:ec:31:9a:16:61:
         a1:f6:d1:3e:ac:9f:a2:99:52:11:b5:dc:ec:78:6b:22:8f:86:
         f7:84:14:41:f5:3a:5f:8e:bd:90:93:36:b6:77:b8:d1:a0:b0:
         82:91:a2:61:40:7f:77:b8:cb:6c:13:64:92:21:67:d6:72:37:
         23:8b:1a:4c:4d:d7:04:61:a7:b8:93:36:77:3c:29:20:12:d5:
         c4:f2:69:1b:9b:d0:05:28:a8:e2:66:63:a5:0d:9e:89:f7:96:
         e7:30:73:ca:0d:e7:d4:8e:67:70:78:e8:60:fd:7b:d8:93:0d:
         01:70:82:dc:83:8f:4c:1d:f7:e4:28:55:de:a2:5b:4f:81:c5:
         d5:69:c4:cb:6a:cd:ee:c2:70:cb:24:24:df:8d:71:cd:e3:dc:
         13:1d:42:ce:da:c0:55:3a:d8:56:06:09:e5:ad:a0:ce:b5:07:
         e8:53:5d:a3:b5:48:01:9f:53:c9:b7:43:68:0e:48:70:59:bf:
         36:20:cc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:03:13 2026 by rpki-client