Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
File:                     jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json)
Hash identifier:          Bg6ikZBXimScPzHFdqztzO53juvATnhKwX4ujHKzsVw=
Subject key identifier:   6D:F8:77:6E:E5:C1:83:80:B9:1E:04:26:C1:C4:40:4F:A4:F9:B5:E7
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Certificate issuer:       /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial:       01A0D56FC0254DF7525000DA8E209ED63919
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
Manifest number:          1ABA
Signing time:             Thu 24 Sep 2026 22:01:05 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:05 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:05 +0000
Files and hashes:         1: IPD7v-J9c376oyXeNIKc_aWnNmQ.roa (hash: EEItVG+CeXn/JupxjY6OK4AdQvnwdrYLgxk2U0ldhpY=)
                          2: LL3At7JbewVHNRXMTWxBEzOztjg.roa (hash: +WpNgZ2w7aJQTwGBk3CQne457+iBvPsYhfCTsL1+tUY=)
                          3: anTJWEQp0i6KTaSXHOsTHQh5WnE.roa (hash: ZtVU1H4tfyZrn5QvM+PL/R2U7WZ74D460z4PylgnXrM=)
                          4: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: YnWMDx8JXJUnUDmC0lEn5JCWRtpEX59ZOB3YMTmZumo=)
                          5: lkChSpn2Pj9BZbhbqhu03FMhDys.roa (hash: yYjtG9ThGBjd6+NRNSCZP/C1Ipp2hIAVQCQKfhenN+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:6f:c0:25:4d:f7:52:50:00:da:8e:20:9e:d6:39:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
        Validity
            Not Before: Sep 24 22:01:05 2026 GMT
            Not After : Sep 25 22:01:05 2026 GMT
        Subject: CN=6df8776ee5c18380b91e0426c1c4404fa4f9b5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:dd:71:b4:84:6a:c9:0c:2c:bd:58:0d:b8:
                    e5:4a:1b:b0:7d:97:30:1a:c5:84:8d:f7:41:6c:db:
                    8b:c9:2b:95:8f:35:71:39:8c:11:87:db:b8:4e:5f:
                    e2:40:af:47:27:28:a2:63:69:b7:f5:5d:f8:8d:c5:
                    f9:7d:9a:e2:95:f0:88:97:3e:00:29:48:d4:87:26:
                    cf:e5:28:3f:43:9f:da:b2:58:6e:28:a1:64:53:b1:
                    4e:aa:c6:b7:f0:79:ee:3d:c5:1b:60:28:3e:3d:49:
                    98:48:1f:e1:f2:6d:8f:0d:77:30:ba:f9:ae:f1:f9:
                    44:93:75:76:f8:f8:b1:59:a0:db:ae:5b:9e:1a:ad:
                    08:74:96:15:05:c8:c7:6e:77:9b:49:8b:2d:52:b8:
                    6a:70:34:9d:e5:22:cd:56:c4:5f:b4:16:e0:59:bc:
                    d7:74:36:40:b5:6b:01:07:73:4f:6a:ef:fb:98:f2:
                    5e:be:ff:97:c9:3d:d8:ac:cf:9d:ea:55:30:b6:8f:
                    37:d3:3b:d1:78:8b:d8:e8:99:bd:01:cd:67:a1:ee:
                    1c:b8:50:fb:ae:9d:aa:2d:8f:a8:0a:4c:56:6c:f9:
                    ca:a7:a9:91:e3:2e:83:8a:5a:e1:eb:7a:0d:ac:1b:
                    6b:0f:22:50:71:bd:4d:02:52:16:36:94:88:29:e7:
                    0d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F8:77:6E:E5:C1:83:80:B9:1E:04:26:C1:C4:40:4F:A4:F9:B5:E7
            X509v3 Authority Key Identifier:
                keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:97:aa:5c:4b:1f:3f:e5:52:e0:d0:8f:a7:2f:83:01:87:ef:
         65:32:74:51:04:0c:79:7e:f3:3d:c7:92:ea:c6:45:41:b8:8c:
         1e:1e:06:48:25:82:08:d0:7d:1b:1f:18:83:f0:9c:c0:e6:b0:
         2c:47:34:8a:2a:03:a6:a7:bb:aa:36:8c:6c:0c:a0:b0:2e:ca:
         54:23:70:bc:a1:f5:71:35:66:be:f3:bb:d3:ec:92:0d:a7:00:
         6f:88:99:76:48:9a:5b:ce:d5:41:8c:97:98:a3:0e:93:bd:05:
         db:b9:57:5a:36:95:bc:56:12:df:2f:33:07:88:d6:0d:70:55:
         cb:0c:43:4d:6b:a7:e5:57:64:2f:d7:85:2d:f9:11:c1:04:2f:
         06:eb:3f:25:97:ed:f2:4b:d3:d2:ba:96:07:ba:ba:ab:e2:62:
         e5:b9:9a:d2:be:65:db:3d:c6:40:46:43:98:bb:6a:b2:ed:ae:
         e0:e6:8b:7e:96:aa:74:26:df:22:41:d9:bf:bc:1f:c3:c4:d4:
         94:97:71:48:2f:24:2a:ab:70:69:c6:e9:ec:4b:0d:47:2e:58:
         c7:d3:05:39:11:64:53:8b:b1:94:b8:62:3b:45:56:e8:b4:3c:
         16:4c:e0:24:cc:d4:a6:da:b3:a3:01:0e:9c:e4:9b:5b:42:84:
         5b:c7:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:40:39 2026 by rpki-client