Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.mft
File:                     J1-trhEuaASZSOIwhiFbfxVbCcE.mft (raw, json)
Hash identifier:          y7FKOpOHi2lKYi8n8RC1Tlwd20reAjumk5SGXDx1OSU=
Subject key identifier:   6F:BD:74:3C:4E:EB:25:15:42:9A:EB:5D:9A:04:66:75:7B:58:87:8B
Authority key identifier: 27:5F:AD:AE:11:2E:68:04:99:48:E2:30:86:21:5B:7F:15:5B:09:C1
Certificate issuer:       /CN=275fadae112e68049948e23086215b7f155b09c1
Certificate serial:       01A0CA47847E03F487309C64A2160E6FBAF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J1-trhEuaASZSOIwhiFbfxVbCcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.mft
Manifest number:          E2
Signing time:             Tue 22 Sep 2026 18:01:19 +0000
Manifest this update:     Tue 22 Sep 2026 18:01:19 +0000
Manifest next update:     Wed 23 Sep 2026 18:01:19 +0000
Files and hashes:         1: 0shQJP_olUAaquYrEXYkfoOk2xE.roa (hash: 4+ThIr9odjX0ODg2LR7+zUmLjBlN+O98mTnzdPuwUjY=)
                          2: J1-trhEuaASZSOIwhiFbfxVbCcE.crl (hash: G5AWQUpPCtP4nhFjXYqhOFyr95n0K66eGHu4giCn8rg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J1-trhEuaASZSOIwhiFbfxVbCcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:47:84:7e:03:f4:87:30:9c:64:a2:16:0e:6f:ba:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275fadae112e68049948e23086215b7f155b09c1
        Validity
            Not Before: Sep 22 18:01:19 2026 GMT
            Not After : Sep 23 18:01:19 2026 GMT
        Subject: CN=6fbd743c4eeb2515429aeb5d9a0466757b58878b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:23:32:87:8f:3e:39:4f:9b:46:73:00:39:ef:
                    c0:3d:29:cf:62:ea:87:6b:47:81:a6:f7:69:fe:a9:
                    9b:57:8d:ec:f7:d6:3d:94:77:13:a9:a0:2a:52:83:
                    82:98:05:f2:a0:92:8a:16:7b:a7:4a:e1:7d:94:9b:
                    3b:e7:c9:aa:c2:fc:82:8e:f3:be:7d:89:10:30:18:
                    55:f3:3e:c3:43:05:49:85:50:9f:10:1b:c0:8c:7a:
                    ff:76:20:da:96:1d:6f:2e:24:1d:90:09:cc:ed:71:
                    b3:b8:88:f9:07:e2:9f:f9:46:c5:ab:35:33:15:12:
                    b9:6f:74:2d:40:25:4a:84:63:bc:f2:53:5a:24:48:
                    98:55:5b:fd:e0:39:54:e5:6f:a6:c7:0c:9a:e0:a9:
                    38:77:1e:e6:25:b6:38:07:aa:b6:cd:f7:d8:3e:5a:
                    d5:4e:a5:13:94:45:97:de:a6:9e:1a:06:8d:cf:9a:
                    73:46:bf:98:31:29:98:59:39:90:f4:d0:3e:7a:1b:
                    41:c8:f2:26:a2:12:b8:ff:01:a1:1d:72:f2:86:47:
                    96:a8:9c:5a:ef:5d:35:1c:5e:67:3c:38:64:cb:3e:
                    20:3e:8c:f3:cd:24:64:ea:d6:b2:7e:6e:6f:0e:7a:
                    47:b7:40:b0:3b:71:4d:7e:5b:7b:bf:65:a5:0a:67:
                    a6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BD:74:3C:4E:EB:25:15:42:9A:EB:5D:9A:04:66:75:7B:58:87:8B
            X509v3 Authority Key Identifier:
                keyid:27:5F:AD:AE:11:2E:68:04:99:48:E2:30:86:21:5B:7F:15:5B:09:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1-trhEuaASZSOIwhiFbfxVbCcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:06:fc:8c:88:bd:63:a3:fb:19:6d:eb:69:eb:c5:88:ce:4d:
         34:cc:3e:53:3d:03:ae:c1:1b:95:ba:f5:33:99:b4:d6:20:b0:
         c6:c6:ab:a7:46:7a:a4:d9:c6:d8:f7:06:bb:9a:e7:a7:54:6c:
         12:f5:20:e7:09:2d:45:49:69:ec:a7:c9:ae:a5:fd:42:f1:75:
         c7:35:71:c8:28:07:c0:37:ed:6a:3f:d8:00:5b:d9:e5:b3:35:
         e9:f4:93:c5:b1:e6:26:89:ba:98:68:97:76:c6:2f:37:a3:34:
         49:02:56:77:67:5f:52:dc:d6:c3:58:6d:be:cb:cf:f5:41:4a:
         71:30:ea:1a:7a:f1:b4:90:ce:5e:ae:18:f9:f6:fe:dd:81:0f:
         c3:88:a7:09:be:ea:2c:31:1c:e3:89:a4:ec:ce:36:5a:cc:cb:
         20:89:d1:e1:08:3c:33:f4:35:b2:72:ba:a7:b5:87:53:aa:2f:
         71:ee:2a:18:39:2c:e2:02:d8:8b:d5:b1:f5:c3:c8:df:8e:20:
         73:71:4e:c7:5d:66:fd:3f:15:1f:c0:cf:b1:96:1c:61:b2:55:
         08:0e:7a:19:6d:3a:a3:fa:06:1c:82:ba:74:7e:86:2a:68:41:
         cf:77:42:b3:ce:c3:f6:65:a0:97:6e:d2:c4:6d:88:17:44:91:
         2d:2e:0e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:52:57 2026 by rpki-client