Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
File:                     JfzJXxkPb63_o5NBMcdMs6BojXI.mft (raw, json)
Hash identifier:          nBmGzmvi16agCyDf1kvJWhtSzdV0qdHDN6b88Dp+LqU=
Subject key identifier:   20:6F:DD:02:6D:DB:DD:01:53:BC:04:FB:B1:7A:63:35:CD:F1:2E:FC
Authority key identifier: 25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
Certificate issuer:       /CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Certificate serial:       01A1028005A75644B11B42DF2D6351A5D8F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
Manifest number:          0262
Signing time:             Sat 03 Oct 2026 16:01:46 +0000
Manifest this update:     Sat 03 Oct 2026 16:01:46 +0000
Manifest next update:     Sun 04 Oct 2026 16:01:46 +0000
Files and hashes:         1: JfzJXxkPb63_o5NBMcdMs6BojXI.crl (hash: 7NR1yim5vsaPZMJ3mw9+NFm/ENpUWNGuBhxm50Ha9UU=)
                          2: g4SpKvZLDrCSSEc4j2eY2sgyR8k.roa (hash: F6VZpsG6B4dQY8+6I93tdHS61Qfv0yiT02WGdhA/ATs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 16:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:80:05:a7:56:44:b1:1b:42:df:2d:63:51:a5:d8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
        Validity
            Not Before: Oct  3 16:01:46 2026 GMT
            Not After : Oct  4 16:01:46 2026 GMT
        Subject: CN=206fdd026ddbdd0153bc04fbb17a6335cdf12efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:3e:87:fe:05:e3:bf:b2:12:2e:ac:c4:c9:
                    fc:07:97:1a:0e:ff:da:6c:33:f8:75:0b:74:ab:28:
                    c7:d9:0e:1f:ea:e2:13:83:75:eb:3c:7a:f6:94:10:
                    d4:80:0d:da:53:64:27:8e:9b:16:3a:f4:53:5c:09:
                    4e:73:fb:8b:fd:ab:d0:7d:e7:b5:34:ff:2e:e2:04:
                    2d:2a:8f:84:2b:c3:c6:9b:44:54:7e:b2:af:18:9a:
                    f2:e4:e1:aa:12:76:08:7a:16:a6:2c:4f:26:17:9f:
                    7e:65:62:5b:e6:fa:1e:2b:62:0b:3c:af:a2:ae:ad:
                    3c:a3:0b:30:ef:c6:00:e0:6e:ca:12:e5:ba:1d:9f:
                    5c:d0:70:ac:02:3f:ca:ec:f5:54:71:9d:ed:0f:81:
                    5c:71:9d:57:00:2f:f3:ab:96:9b:af:d4:9b:a7:29:
                    50:33:32:0f:6b:1d:7b:54:53:56:f4:4c:d8:06:dc:
                    89:c8:12:78:ca:34:a2:c1:3f:1d:94:4a:b2:34:c4:
                    f5:a0:92:40:5a:8f:8c:bf:af:94:7a:4c:b3:de:75:
                    f9:c2:21:57:85:72:95:00:93:5e:1b:ef:c2:ae:78:
                    1b:37:8a:08:02:e0:0e:f4:28:ce:20:82:f0:98:2e:
                    e1:09:6f:c5:41:9b:1b:f1:50:65:07:dd:fb:b3:b5:
                    1e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6F:DD:02:6D:DB:DD:01:53:BC:04:FB:B1:7A:63:35:CD:F1:2E:FC
            X509v3 Authority Key Identifier:
                keyid:25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:bc:cd:5b:47:ef:93:58:fd:6e:26:34:c0:c5:18:3d:e7:2e:
         75:bd:45:51:79:1a:b6:c7:cc:e1:62:f6:4d:3c:2f:84:67:cc:
         0a:27:6b:0b:4a:d3:f6:6d:0a:b5:00:ad:a9:49:cd:ac:8f:a0:
         77:39:68:c2:60:4a:02:e3:e1:0c:88:00:02:0c:72:31:fe:d0:
         20:fc:57:42:f9:87:44:69:18:cd:ef:2b:44:07:dd:60:ca:d1:
         61:81:ee:8f:94:51:0f:5d:8b:45:f6:fc:d6:44:62:67:45:2a:
         ea:0e:b9:92:25:9b:91:ca:a6:b4:5d:2d:1e:ef:da:20:f4:87:
         15:fd:f4:39:85:30:54:5b:c2:51:52:8d:9f:d8:65:18:0f:9a:
         6d:d3:b0:2c:2a:49:1e:0a:d1:88:cb:2a:99:ef:3b:35:bf:6d:
         85:58:e4:84:0b:b7:11:3c:bc:f4:c0:e4:fa:87:95:03:f5:d3:
         4e:b9:8e:a7:b3:20:81:de:a0:3f:1d:1e:d2:6d:ed:9d:45:1a:
         1e:14:ae:7d:6b:c6:cb:e6:b2:d4:1a:42:e5:a9:ad:99:26:a2:
         a3:55:8e:f4:0c:87:65:8a:5c:65:bd:37:e0:bc:c6:cf:24:0e:
         b6:a9:52:ec:99:29:8e:fe:d4:f7:74:8b:75:59:f0:38:76:2a:
         26:96:7e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 04:40:27 2026 by rpki-client