Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
File:                     jTDnckXCFacL5O9X0DvR2NTbWJg.mft (raw, json)
Hash identifier:          wmslYBdhE3uDIYsUVdWq3ck8b7+paHbFWGUxMFicf5c=
Subject key identifier:   82:D5:FD:ED:54:6D:38:3A:61:DC:52:3C:4A:73:F8:9E:DE:C3:96:3B
Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
Certificate issuer:       /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Certificate serial:       01A0E098D8567A1C52881C5AA47C130D7CB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
Manifest number:          0594
Signing time:             Sun 27 Sep 2026 02:01:48 +0000
Manifest this update:     Sun 27 Sep 2026 02:01:48 +0000
Manifest next update:     Mon 28 Sep 2026 02:01:48 +0000
Files and hashes:         1: E0AgYtmqvfWsCtuIwOtUo5wvcgU.roa (hash: w2ZEYMbSnl1r9XT320uy9sGbUhpOA37NS5yHBqC4/Fs=)
                          2: jTDnckXCFacL5O9X0DvR2NTbWJg.crl (hash: kY6dpeE3JouvzOBi5muuC2h93/GwmaR8CfGm9iyuElg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:98:d8:56:7a:1c:52:88:1c:5a:a4:7c:13:0d:7c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
        Validity
            Not Before: Sep 27 02:01:48 2026 GMT
            Not After : Sep 28 02:01:48 2026 GMT
        Subject: CN=82d5fded546d383a61dc523c4a73f89edec3963b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:04:81:84:78:ac:f0:5c:57:cc:52:6f:fb:
                    8a:2d:0e:62:2b:fd:42:03:7b:5a:6e:a5:6f:86:af:
                    68:b7:4a:43:da:97:22:f0:1b:96:94:a0:d5:25:48:
                    73:2c:b0:89:77:60:d1:1c:83:42:8a:cb:ab:11:de:
                    82:12:fd:84:36:c1:7f:83:eb:b1:09:85:b7:c3:40:
                    71:47:1d:3d:8a:1e:12:c6:c2:da:b9:86:77:92:99:
                    78:e5:86:c8:c1:c2:d7:48:43:f7:bf:0a:3e:c8:cf:
                    b3:32:ea:ea:35:47:b4:af:63:d6:57:f0:09:98:79:
                    35:37:4f:51:67:9d:3e:6a:c2:53:69:a1:85:41:e9:
                    2b:f0:56:9e:86:9f:2b:94:dd:c5:1e:5d:36:0a:26:
                    95:d3:5d:af:47:72:01:7d:60:32:69:4d:68:69:ba:
                    8b:6e:0e:ad:78:f7:7d:34:6d:d5:e1:1e:a3:2b:c3:
                    ec:0c:97:dc:5c:28:07:3f:70:10:40:fb:28:43:2d:
                    57:45:83:81:cf:94:f2:5d:2f:ac:53:b6:72:59:c9:
                    e4:6a:7e:05:b4:00:4c:4a:82:4e:0d:4b:7f:ea:a2:
                    dd:26:3c:78:b4:93:29:26:a2:79:21:ec:2b:a1:d1:
                    f9:03:0c:1b:ae:c9:54:18:49:57:28:1e:32:3e:50:
                    1f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D5:FD:ED:54:6D:38:3A:61:DC:52:3C:4A:73:F8:9E:DE:C3:96:3B
            X509v3 Authority Key Identifier:
                keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:20:aa:b2:d3:e0:25:1d:90:aa:79:92:40:5c:fe:44:df:05:
         33:8a:91:c0:b3:81:a3:0d:05:b2:bc:d3:0f:57:0a:f9:99:0f:
         5b:72:9b:ae:52:b3:58:6f:86:1f:24:a7:a3:98:63:3a:cc:d3:
         db:79:73:0a:97:94:1c:bf:6b:d9:ee:15:60:6d:86:0b:d4:c7:
         64:c5:3e:c6:ae:57:8e:4d:17:2b:e7:2e:a4:c4:45:c0:af:9b:
         c8:63:ba:b9:03:61:b5:f6:98:dc:fb:6f:c6:de:c3:a1:a9:0c:
         6e:31:2b:cc:5d:62:ef:49:dd:bb:15:84:b9:ee:b2:18:8d:f9:
         7b:d7:b8:18:f2:33:37:f9:d8:3b:bc:73:5e:f9:9b:e3:b1:8d:
         5a:d5:6f:ef:51:53:e1:59:b0:aa:88:dd:68:0d:59:47:26:da:
         48:4d:b4:ed:6a:b1:71:ed:9d:c7:df:e2:df:ec:20:96:6e:3b:
         78:04:2e:ae:7d:b4:6c:89:38:06:16:21:8e:6a:d9:de:7a:2f:
         3d:80:84:c1:88:18:08:6f:75:1e:63:af:5f:85:c2:c5:d9:ff:
         2e:0b:48:5a:52:fb:dc:59:18:7a:dc:4d:2c:36:53:89:49:f1:
         11:15:2a:5b:5c:c7:93:ca:c8:1f:6b:43:b0:78:6f:54:81:bf:
         1e:f3:ea:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgmNhWehxSiBxapHwTDXywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzBlNzcyNDVjMjE1YTcwYmU0ZWY1N2QwM2JkMWQ4ZDRk
YjU4OTgwHhcNMjYwOTI3MDIwMTQ4WhcNMjYwOTI4MDIwMTQ4WjAzMTEwLwYDVQQD
Eyg4MmQ1ZmRlZDU0NmQzODNhNjFkYzUyM2M0YTczZjg5ZWRlYzM5NjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJAEgYR4rPBcV8xSb/uKLQ5iK/1C
A3tabqVvhq9ot0pD2pci8BuWlKDVJUhzLLCJd2DRHINCisurEd6CEv2ENsF/g+ux
CYW3w0BxRx09ih4SxsLauYZ3kpl45YbIwcLXSEP3vwo+yM+zMurqNUe0r2PWV/AJ
mHk1N09RZ50+asJTaaGFQekr8Faehp8rlN3FHl02CiaV012vR3IBfWAyaU1oabqL
bg6tePd9NG3V4R6jK8PsDJfcXCgHP3AQQPsoQy1XRYOBz5TyXS+sU7ZyWcnkan4F
tABMSoJODUt/6qLdJjx4tJMpJqJ5IewrodH5AwwbrslUGElXKB4yPlAf+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILV/e1UbTg6YdxSPEpz+J7ew5Y7MB8GA1UdIwQY
MBaAFI0w53JFwhWnC+TvV9A70djU21iYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalREbmNrWENGYWNMNU85WDBEdlIyTlRiV0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82MDY4MjctYjcxMC00Y2VkLWI4MWIt
NWYzY2Y5ZjNiNjE5LzEvalREbmNrWENGYWNMNU85WDBEdlIyTlRiV0pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy82MDY4MjctYjcxMC00Y2VkLWI4MWItNWYzY2Y5ZjNiNjE5
LzEvalREbmNrWENGYWNMNU85WDBEdlIyTlRiV0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSCqstPg
JR2QqnmSQFz+RN8FM4qRwLOBow0FsrzTD1cK+ZkPW3KbrlKzWG+GHySno5hjOszT
23lzCpeUHL9r2e4VYG2GC9THZMU+xq5Xjk0XK+cupMRFwK+byGO6uQNhtfaY3Ptv
xt7DoakMbjErzF1i70nduxWEue6yGI35e9e4GPIzN/nYO7xzXvmb47GNWtVv71FT
4VmwqojdaA1ZRybaSE207Wqxce2dx9/i3+wglm47eAQurn20bIk4BhYhjmrZ3nov
PYCEwYgYCG91HmOvX4XCxdn/LgtIWlL73FkYetxNLDZTiUnxERUqW1zHk8rIH2tD
sHhvVIG/HvPqZA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:03:06 2026 by rpki-client