Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
File:                     jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json)
Hash identifier:          5EIH02mA1L7TeMPJFWLpejUUaCaBdzeK+aHBzd8pEV0=
Subject key identifier:   19:72:3C:5E:AC:8E:B2:9D:ED:3B:EA:DA:2E:80:16:68:2D:E4:C8:7C
Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
Certificate issuer:       /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Certificate serial:       01A0D98360F8FA9143A8DDADF9FB72D2EE0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
Manifest number:          1A76
Signing time:             Fri 25 Sep 2026 17:01:00 +0000
Manifest this update:     Fri 25 Sep 2026 17:01:00 +0000
Manifest next update:     Sat 26 Sep 2026 17:01:00 +0000
Files and hashes:         1: AR0snb2WiBVjty2iEPK8q39KPZo.roa (hash: LRggRbjFzoUTOK1TTVfP+3KeKjujfqsLku1ZGYI58wk=)
                          2: F13pIjKslpUrOUGbjMV17CmkLWk.roa (hash: szqGRHA6NM3mWFGyDMMW+gpH0BvtN2cqf2OUgq/zN28=)
                          3: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: 82U4MKUhTy1ow+T/7E/QwW9LYR+0bCtDUQqEFiVkoSI=)
                          4: olmoqfzN7VFo-bxr_cK8ARodjJ4.asa (hash: DUkoDNJ/61GCLycft48nLmtAR70B8+qDz8ujkdLUM/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:83:60:f8:fa:91:43:a8:dd:ad:f9:fb:72:d2:ee:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
        Validity
            Not Before: Sep 25 17:01:00 2026 GMT
            Not After : Sep 26 17:01:00 2026 GMT
        Subject: CN=19723c5eac8eb29ded3beada2e8016682de4c87c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:67:29:a1:55:5b:0a:cb:99:8b:f7:40:89:a3:
                    d9:8a:f6:71:4e:05:9c:49:d8:ea:6e:1f:c9:de:40:
                    4d:fc:00:5d:2b:63:7c:8b:92:5c:a5:c9:67:40:3c:
                    37:67:60:64:cb:c6:ed:0a:1c:59:15:44:8a:ce:b1:
                    35:05:52:b4:89:68:0f:25:37:80:a4:81:c4:91:16:
                    20:d2:54:d7:54:23:b9:11:f6:ea:89:44:f7:72:72:
                    b7:49:e0:48:2f:96:75:6a:17:c5:80:56:21:2c:0a:
                    fc:0c:bc:8e:de:c3:84:64:88:8f:4e:b7:99:1a:67:
                    31:6f:de:c2:fe:48:d9:da:e1:c9:1a:a6:40:81:ca:
                    44:68:ee:86:d8:6b:6e:d1:d9:02:e8:45:dc:e1:58:
                    c3:28:10:5b:76:27:4b:fe:95:c4:18:85:4d:87:22:
                    d1:3a:ec:39:f7:ce:23:2b:d9:35:23:99:1d:49:7c:
                    11:85:92:fd:72:67:e7:8a:61:e7:01:b9:f6:f3:7b:
                    2f:17:e6:6c:8a:3a:94:a8:2f:f5:86:c7:07:93:ba:
                    d9:0b:fa:c3:b8:f3:19:ac:ea:40:6d:f2:04:a2:da:
                    fd:73:e4:8c:67:73:0f:5c:0d:ab:92:99:3b:5f:d5:
                    be:72:8d:24:d8:31:7b:93:80:03:1d:04:a9:fe:18:
                    95:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:72:3C:5E:AC:8E:B2:9D:ED:3B:EA:DA:2E:80:16:68:2D:E4:C8:7C
            X509v3 Authority Key Identifier:
                keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:8d:9a:e2:43:cd:65:9f:82:4a:59:b8:79:84:71:fd:a9:d8:
         d2:8f:5f:c2:41:82:b2:bd:ab:34:c4:e2:a1:4d:9f:1d:2d:c4:
         81:7b:21:20:ef:6f:0f:25:29:0d:4f:17:ba:44:3d:4a:81:21:
         d2:62:b1:9e:b8:9a:00:c4:9a:be:63:42:00:28:68:f6:fe:64:
         db:25:26:da:7d:cf:02:0a:b1:3f:a9:bf:0c:cc:06:23:e9:fc:
         46:5f:4b:37:b4:db:96:e4:69:f0:3c:0c:ca:0f:6b:94:63:0a:
         5d:40:f4:c7:93:bf:cc:e8:ce:9c:82:9b:2d:e1:5d:5f:ec:ec:
         49:1a:2f:89:ff:c0:ce:12:10:35:6b:f0:21:d9:ff:45:f8:b6:
         4d:18:c8:a8:58:bc:40:16:8b:a7:be:82:67:06:46:ff:91:7e:
         c8:9b:d8:e2:b8:bc:b6:72:71:24:ad:db:cc:a0:ad:6a:37:13:
         ce:9c:0e:c1:67:9d:0f:29:61:75:1d:29:86:cf:8c:86:ff:1f:
         5b:5d:ee:16:cf:f3:9e:6e:f1:38:ec:a8:11:bd:e6:3b:a9:a6:
         85:ad:63:84:1f:8a:50:9c:59:da:cf:15:31:cf:33:d0:f1:7c:
         a3:a5:b6:a3:1c:2f:f1:6a:dc:a5:2a:e2:31:3a:45:d2:f9:31:
         c9:07:fd:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZg2D4+pFDqN2t+fty0u4MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYTYwZTkwMDBjNzVhNzVkNjdlMzdmZTA3YjE0ZTA3YjIy
YzU4ODcwHhcNMjYwOTI1MTcwMTAwWhcNMjYwOTI2MTcwMTAwWjAzMTEwLwYDVQQD
EygxOTcyM2M1ZWFjOGViMjlkZWQzYmVhZGEyZTgwMTY2ODJkZTRjODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmcpoVVbCsuZi/dAiaPZivZxTgWc
Sdjqbh/J3kBN/ABdK2N8i5JcpclnQDw3Z2Bky8btChxZFUSKzrE1BVK0iWgPJTeA
pIHEkRYg0lTXVCO5EfbqiUT3cnK3SeBIL5Z1ahfFgFYhLAr8DLyO3sOEZIiPTreZ
Gmcxb97C/kjZ2uHJGqZAgcpEaO6G2Gtu0dkC6EXc4VjDKBBbdidL/pXEGIVNhyLR
Ouw5984jK9k1I5kdSXwRhZL9cmfnimHnAbn283svF+ZsijqUqC/1hscHk7rZC/rD
uPMZrOpAbfIEotr9c+SMZ3MPXA2rkpk7X9W+co0k2DF7k4ADHQSp/hiVDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlyPF6sjrKd7Tvq2i6AFmgt5Mh8MB8GA1UdIwQY
MBaAFI2mDpAAx1p11n43/gexTgeyLFiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83MjgwNmEtMDM5NC00YWQ1LThlMDQt
YjViOGQwMjQ0OGI4LzEvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83MjgwNmEtMDM5NC00YWQ1LThlMDQtYjViOGQwMjQ0OGI4
LzEvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfo2a4kPN
ZZ+CSlm4eYRx/anY0o9fwkGCsr2rNMTioU2fHS3EgXshIO9vDyUpDU8XukQ9SoEh
0mKxnriaAMSavmNCACho9v5k2yUm2n3PAgqxP6m/DMwGI+n8Rl9LN7TbluRp8DwM
yg9rlGMKXUD0x5O/zOjOnIKbLeFdX+zsSRovif/AzhIQNWvwIdn/Rfi2TRjIqFi8
QBaLp76CZwZG/5F+yJvY4ri8tnJxJK3bzKCtajcTzpwOwWedDylhdR0phs+Mhv8f
W13uFs/znm7xOOyoEb3mO6mmha1jhB+KUJxZ2s8VMc8z0PF8o6W2oxwv8WrcpSri
MTpF0vkxyQf9kQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 01:43:00 2026 by rpki-client