Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File:                     jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier:          /QdFqZ8D7U9c7ZxYjA0HKayjfdIADJLEKiZTx3nhSY8=
Subject key identifier:   93:F0:BD:C7:25:CD:3E:93:2C:A2:88:78:CB:1F:7C:74:B2:A2:BF:18
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer:       /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial:       01A0D64C26631439E9499934A13FB0ABA3DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number:          1A6F
Signing time:             Fri 25 Sep 2026 02:01:49 +0000
Manifest this update:     Fri 25 Sep 2026 02:01:49 +0000
Manifest next update:     Sat 26 Sep 2026 02:01:49 +0000
Files and hashes:         1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: jdD99oGDAn2lnQKHR2VVawbbZqzBAwyztn+33L1kh58=)
                          2: twrQ972oI9ZzJB5lNnpdx6DecVA.roa (hash: R4HcQNJ+RCE6vVMBKIPOjPzd/TdNdxhTx9KPeq1FVRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4c:26:63:14:39:e9:49:99:34:a1:3f:b0:ab:a3:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
        Validity
            Not Before: Sep 25 02:01:49 2026 GMT
            Not After : Sep 26 02:01:49 2026 GMT
        Subject: CN=93f0bdc725cd3e932ca28878cb1f7c74b2a2bf18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:69:7b:a9:74:52:ca:b8:b6:26:86:1a:f4:
                    f6:ed:19:93:27:0c:51:c3:fd:1b:24:fb:bc:e7:69:
                    13:ad:09:87:ee:56:8d:16:54:ae:f3:e0:45:61:bd:
                    bc:2d:82:e0:c3:b7:cb:48:58:90:77:94:bd:91:fc:
                    07:c9:30:79:5d:29:9b:cf:fa:cd:83:c8:53:73:12:
                    1c:fc:2f:30:4e:70:b9:22:24:23:d5:5f:4c:d5:6b:
                    e4:72:cb:38:8f:b9:1b:18:7e:ca:1f:88:bc:63:b0:
                    6b:eb:fe:a2:6f:f1:0b:13:51:df:06:82:d2:2e:b1:
                    d9:8d:d1:51:57:05:19:03:d3:3c:87:61:12:fc:08:
                    1f:65:3a:c6:0d:3d:81:c1:6f:b1:0f:74:54:ad:f2:
                    62:a8:43:4f:6e:4e:44:eb:b4:8c:36:39:04:ea:04:
                    9b:ad:ad:07:06:a2:1a:26:7b:b2:4e:19:d1:ad:cc:
                    56:37:d3:48:5a:7f:da:33:bc:28:c2:9e:3d:ae:2d:
                    a0:b6:ec:e1:48:fd:90:84:be:e8:ba:84:7b:45:e1:
                    fa:3f:78:5f:76:a6:b7:64:2e:ac:6b:20:74:08:10:
                    cc:2f:79:01:75:3e:9a:a5:b9:ff:6f:cc:5c:2b:05:
                    d3:d6:bf:49:0d:a4:98:8d:5f:4a:4b:7c:0e:7d:76:
                    70:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F0:BD:C7:25:CD:3E:93:2C:A2:88:78:CB:1F:7C:74:B2:A2:BF:18
            X509v3 Authority Key Identifier:
                keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ef:0d:0d:dd:7b:da:1f:aa:c3:eb:50:e2:29:da:cd:72:09:
         6e:7d:ae:48:7b:39:27:4e:da:6f:41:c2:1f:b4:e1:3e:e0:39:
         f8:c8:db:b3:fd:08:28:87:1b:84:49:2d:86:2e:e3:1e:90:e1:
         88:a3:94:51:fc:ad:c6:cc:af:58:e0:54:b5:4c:4b:cb:b1:29:
         2b:d9:1a:d2:c0:65:2e:01:e8:a1:4e:3a:d5:64:f7:32:52:83:
         46:76:ce:20:bf:70:76:ec:1a:3a:3b:31:53:26:38:74:c7:25:
         64:7c:77:40:f7:76:5a:38:5b:90:1b:04:9b:45:53:c2:44:86:
         d5:c7:1f:14:73:60:a8:91:1e:2d:f6:5b:a1:35:d9:f1:3f:3f:
         a1:d2:3e:b6:1b:2d:a1:4a:f8:20:1c:16:79:70:9e:98:22:ce:
         ae:f7:17:5b:3e:5e:40:91:dc:58:09:b2:b6:46:72:05:d0:65:
         44:59:50:19:67:31:ee:b3:b1:f1:2a:27:94:6a:c8:8d:0a:55:
         c6:36:28:6c:b8:44:85:d4:4f:cb:34:ab:af:1c:25:df:d8:1e:
         00:82:b8:9d:fc:34:c2:19:63:30:36:d1:f9:69:c2:38:2a:df:
         ed:52:7d:e7:8c:43:61:3f:30:06:ea:34:16:9e:c8:1b:f0:42:
         44:bc:bc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:42:24 2026 by rpki-client