Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
File:                     JY9ajila0de0ih4RlYeQBStXolM.mft (raw, json)
Hash identifier:          9ApAzG74F/g42jkdqfgRa+MYtHP4pfkMfEt9NZ6yBDg=
Subject key identifier:   8A:45:D5:30:39:F6:7E:B4:C7:0F:28:6A:9E:E2:EF:0D:9C:F9:37:ED
Authority key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
Certificate issuer:       /CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Certificate serial:       01A0D8A81A8ECD0696F27BF8A9528A4D90E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
Manifest number:          19C7
Signing time:             Fri 25 Sep 2026 13:01:30 +0000
Manifest this update:     Fri 25 Sep 2026 13:01:30 +0000
Manifest next update:     Sat 26 Sep 2026 13:01:30 +0000
Files and hashes:         1: JY9ajila0de0ih4RlYeQBStXolM.crl (hash: CqwS4Tgh3K17PqbA4TkKPdpJWVCtk43yV/iT3jHm2go=)
                          2: XsoOkS5cVinDKGylaIEe4V2iJiI.roa (hash: yUEIW+aXADdubfFegT02HQm/MXVHfJjhRJSJMZb2fr0=)
                          3: d9SsK9JFe4erW3mFTzDPmAS0ODY.roa (hash: eDnr+btVqcRjIrpyGoGoaGlmtxJe33quRXxSlU0qhfA=)
                          4: lcmCUf_CgzeIR8L7taeEF8YZZn4.roa (hash: WXtKI31hDy0GKZrnRRKtBFDImlVMPaG1/eg9VugOcII=)
                          5: lhg5zVYrNMLRf5rtCyfanPHKWCo.roa (hash: tJ2WDHFTAECq/EoCtDCOE9Vj8E1Ebzh5Ex98VPbUM4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:a8:1a:8e:cd:06:96:f2:7b:f8:a9:52:8a:4d:90:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258f5a8e295ad1d7b48a1e11958790052b57a253
        Validity
            Not Before: Sep 25 13:01:30 2026 GMT
            Not After : Sep 26 13:01:30 2026 GMT
        Subject: CN=8a45d53039f67eb4c70f286a9ee2ef0d9cf937ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:6e:9f:d0:d9:80:7b:04:36:bb:88:8c:b3:
                    64:a5:1f:a0:ae:42:90:d9:d5:7b:73:bc:13:82:0f:
                    41:ae:b3:4d:d6:fd:60:75:46:80:15:47:b9:7e:59:
                    2e:8a:5a:44:71:fb:de:c0:0a:5e:51:4f:9b:5e:05:
                    8a:84:3f:72:91:3b:c1:20:d2:67:08:a6:8f:3e:02:
                    01:48:cb:d5:75:07:b7:70:a6:bb:86:ca:f5:f9:46:
                    14:bc:2a:9d:76:7e:2f:8c:2a:9e:95:fa:af:44:6f:
                    94:1e:22:bb:7f:a9:f1:4d:2b:94:e4:10:0d:c0:69:
                    12:78:ae:93:01:72:a4:fa:0a:cb:aa:d2:a3:97:d1:
                    85:f2:6a:12:4b:e9:30:91:ae:f1:6a:c6:5f:b6:0e:
                    f2:e0:4b:e4:d7:bb:7f:09:84:76:7b:0a:2a:c5:aa:
                    f7:e2:5a:28:75:93:02:63:66:5f:9a:3e:1b:84:73:
                    3f:e8:14:8b:c3:ed:a3:11:92:03:05:85:c7:cf:ca:
                    af:05:33:1f:1f:85:48:9f:5c:88:c5:d2:b4:68:18:
                    b2:c8:e0:e8:74:9c:18:dd:5f:b3:ad:67:8b:db:73:
                    ce:fe:a3:44:56:65:69:26:52:43:b6:cf:d3:8c:b0:
                    05:1a:27:e7:1a:22:42:0e:37:3a:d9:ec:c6:82:95:
                    71:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:45:D5:30:39:F6:7E:B4:C7:0F:28:6A:9E:E2:EF:0D:9C:F9:37:ED
            X509v3 Authority Key Identifier:
                keyid:25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:06:64:8e:3f:b6:9e:d4:63:06:52:c4:82:38:fb:4d:2c:91:
         0e:02:25:44:8e:f6:55:7d:b1:2b:dd:18:f3:57:a7:74:c9:58:
         d2:bd:72:23:3a:ec:a6:fd:a9:ed:65:51:92:f9:3f:a1:2f:68:
         50:71:4e:f6:79:a0:89:86:c3:cd:37:d2:14:56:d8:f5:4e:bb:
         e2:97:09:7c:89:b1:1c:07:3c:f2:fa:8b:8d:ae:f1:96:f2:5d:
         ef:1f:59:e1:8f:c8:00:76:a7:11:fa:34:15:9d:a3:48:39:47:
         53:7e:0e:6f:c0:6c:61:bd:b4:22:65:5d:dc:3a:0f:98:4d:76:
         52:e3:3b:b2:54:f4:3b:3a:d6:b8:55:81:4f:50:82:94:83:f5:
         4b:47:b2:0b:67:58:e1:62:0e:bd:99:75:1e:d3:06:9e:90:08:
         1a:ce:ac:b6:6e:5f:48:fc:f6:5a:58:81:2c:e7:be:3a:f3:52:
         b9:09:2a:cc:c6:65:a7:89:c0:f8:c9:ca:a9:64:f8:09:96:14:
         99:8a:a8:5d:c4:19:9e:e7:1e:27:31:7e:60:bd:84:11:15:52:
         e9:4c:1b:ba:27:69:01:8b:18:3e:90:7f:9e:d6:f0:f4:b3:de:
         72:c2:38:c7:7d:28:58:d6:2e:4c:2a:5d:10:f6:6a:3c:43:4b:
         c0:b6:73:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:15:12 2026 by rpki-client