Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
File:                     jphwObPzstubKYrg2NDrNIlprWI.mft (raw, json)
Hash identifier:          sWhzLcBTjTFrLdOjJ8MVS91l84zi09QUjVCIx1AbKgI=
Subject key identifier:   7A:80:93:41:97:2C:38:02:D5:A7:7B:96:6E:A6:5F:0A:47:A8:8C:96
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Certificate issuer:       /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial:       01A0D048BC949726DF70BA4BADDA4BB007BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
Manifest number:          113A
Signing time:             Wed 23 Sep 2026 22:00:22 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:22 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:22 +0000
Files and hashes:         1: 1Frxfbc98CPNBXlvYxNVV4HDdfw.roa (hash: zDjUPNkwFr1cypuN/i7XmbHHkWcY1mRap2kucDPhT9w=)
                          2: 82JWIomOThmW0YMHKxDPuIJNFK0.roa (hash: hC4sRPtPg3GW3YOxAj+I1bNIwfqpwHn+ecr5wb73PWo=)
                          3: GKI0oMGPc_ao96H_Pxppo6dkqjU.roa (hash: zkKvY4dzGqAm86wlj6w2FQOXQJkkmZRclubHEKVhIrs=)
                          4: UbPR__GWgCOIAb3NQc0qlqrppxU.roa (hash: lTQfU6TbcxSvADq8zAUFbLRCThmdnW+zAxZAvDh4gWQ=)
                          5: jphwObPzstubKYrg2NDrNIlprWI.crl (hash: qxdmA5NvO+kVgED8MxmX+u/9isGBVT4eduo1zJ2/0Ew=)
                          6: mSOb8oL2yaxSaSAqBWs5Nse1M6o.roa (hash: P4pKI4jOB/owH0H61XW01BCRPQ5A8npRT1ANcLU/gqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:48:bc:94:97:26:df:70:ba:4b:ad:da:4b:b0:07:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
        Validity
            Not Before: Sep 23 22:00:22 2026 GMT
            Not After : Sep 24 22:00:22 2026 GMT
        Subject: CN=7a809341972c3802d5a77b966ea65f0a47a88c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:15:f9:08:6e:d6:a2:62:0b:b4:f3:f3:e4:d9:
                    6d:3f:6c:bf:9c:d5:f8:24:f3:86:8b:f3:07:26:b2:
                    ac:00:52:69:c0:6f:8d:17:f7:ff:ce:b4:72:f7:ce:
                    b7:15:db:b8:2b:b7:5a:5f:f3:31:9d:6d:21:ba:cc:
                    e9:68:f8:91:c8:b1:85:52:e3:d0:89:4b:ca:21:a4:
                    a4:a2:7f:f3:e9:26:3a:46:6f:fc:c5:73:09:e4:36:
                    7d:af:94:40:70:e6:38:f3:12:18:2e:60:74:c4:f9:
                    10:3b:05:1c:88:10:87:24:d5:28:08:9a:13:49:ab:
                    f5:60:4d:0c:22:1e:b6:db:ab:46:5b:18:38:9c:0a:
                    a4:19:67:84:a9:7b:d7:61:d0:82:b4:55:78:6f:bd:
                    3a:b1:21:d1:7b:6f:79:b5:47:ff:eb:aa:7e:c5:ab:
                    76:b4:7d:e8:0d:a8:20:a5:33:3f:38:dd:e1:0c:2c:
                    a6:0e:25:02:23:6a:56:d2:6b:62:6c:88:31:e0:e0:
                    25:5a:f6:75:ce:33:0d:8a:1d:45:2a:bc:e4:a8:60:
                    9f:cc:e1:56:1f:af:cb:d5:82:74:18:5f:1f:4d:e5:
                    87:d5:12:75:3c:f6:fa:47:55:aa:a6:70:28:c1:21:
                    03:1e:9a:c8:c9:bf:1d:51:bd:04:93:07:fe:66:30:
                    ed:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:80:93:41:97:2C:38:02:D5:A7:7B:96:6E:A6:5F:0A:47:A8:8C:96
            X509v3 Authority Key Identifier:
                keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:23:10:85:62:f5:e2:eb:2d:fb:7a:ab:cc:c9:07:6f:5f:7e:
         13:d0:2e:b1:92:bb:aa:a9:34:41:c4:17:8c:2c:45:4e:b7:e4:
         ea:87:69:74:19:32:85:23:68:03:22:6a:8b:88:cb:43:d3:ac:
         e3:c9:1c:11:14:2b:f5:0d:ee:1b:97:bf:60:31:e1:34:0c:b4:
         05:c1:38:b5:83:99:e2:d1:ad:45:f1:0e:9c:dd:4c:51:54:23:
         44:c7:74:9d:51:0b:db:f3:be:c2:ca:60:45:a4:2f:3e:9e:c9:
         e2:2f:c2:54:97:e5:1b:c7:c7:25:6c:b2:4e:e5:86:8e:16:58:
         07:3d:32:92:8d:df:19:14:f1:ab:4d:56:bd:a5:c5:d5:59:ce:
         75:07:bf:d5:b7:6e:ed:ee:0e:6a:1a:b2:9e:06:49:a8:5a:e7:
         6e:38:6d:e7:70:fa:eb:06:8d:6d:3c:c1:f2:60:d1:f6:86:a5:
         20:26:73:ad:0f:94:da:15:b4:fa:f7:bc:35:2b:e9:82:92:6b:
         73:c5:5f:e7:28:f0:bb:c5:e4:3f:23:28:04:fd:ca:75:03:4f:
         27:a1:2e:32:19:2e:b2:51:84:68:6e:92:cb:82:12:c9:5d:09:
         ac:57:6d:e5:02:21:e9:8a:6d:3f:19:45:1b:ee:76:f5:43:14:
         65:13:46:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:54:28 2026 by rpki-client