Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
File:                     JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json)
Hash identifier:          3Uwiq8krSaf/8jXBraSlQx0WPmTQYYzDTLlgbJhUufU=
Subject key identifier:   87:47:B9:AF:64:74:42:3D:1F:37:78:FA:B9:C2:32:08:F9:56:EF:C8
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Certificate issuer:       /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial:       01A1306A8BE2F3AAFDD95B5BC75B5260FC83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
Manifest number:          1A30
Signing time:             Mon 12 Oct 2026 14:00:51 +0000
Manifest this update:     Mon 12 Oct 2026 14:00:51 +0000
Manifest next update:     Tue 13 Oct 2026 14:00:51 +0000
Files and hashes:         1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: 9AU+7Pg52zstcnPpCZafhVrcO/6/WtdhZYf7SEYJXX8=)
                          2: eL4sddmNTd7PSzARjzADz_21RBc.roa (hash: 9PP/TpfqraKWqrmb3Ro9MwG6dH8Z8rYhFZu1I649JYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:6a:8b:e2:f3:aa:fd:d9:5b:5b:c7:5b:52:60:fc:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
        Validity
            Not Before: Oct 12 14:00:51 2026 GMT
            Not After : Oct 13 14:00:51 2026 GMT
        Subject: CN=8747b9af6474423d1f3778fab9c23208f956efc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1a:dd:29:f4:81:5e:32:33:a9:aa:46:50:75:
                    dd:4d:54:7a:9f:85:92:1c:87:87:b4:85:04:f6:6d:
                    a2:02:ea:d7:ac:f7:2a:de:d5:aa:94:c4:b4:80:7b:
                    af:f1:5d:08:91:de:3e:84:65:f4:e7:cf:3b:c3:7e:
                    2e:c8:b5:13:ce:e5:88:3a:b0:2a:81:e1:e2:2e:9b:
                    a2:4f:dd:1e:96:e2:c4:c1:5b:12:69:82:0c:ef:52:
                    06:18:31:ff:56:ad:6e:22:26:a4:d5:21:25:78:c5:
                    74:81:ae:74:2a:6e:2e:78:09:af:d2:1c:81:d3:1b:
                    4a:e8:7c:05:ac:8d:56:6a:be:ed:f5:1e:a7:85:d8:
                    04:e0:c1:0b:f7:41:74:2f:62:49:9e:34:63:18:72:
                    df:e4:6a:90:46:fc:67:ad:c1:53:e9:60:94:73:1a:
                    77:da:ec:aa:44:21:65:2f:ce:89:ee:ca:25:9b:84:
                    5f:44:64:55:0d:ff:c9:c5:da:52:17:99:3a:5d:8b:
                    81:16:2f:ff:e6:4a:70:9d:8c:7d:24:50:f2:f8:b9:
                    15:2c:72:03:14:f5:18:22:be:0c:32:72:72:e4:8a:
                    59:f1:61:4a:bc:3a:a4:65:e4:cd:d6:9a:f0:8e:76:
                    a4:0a:f5:8d:a0:1d:15:92:a2:2b:70:d1:2f:da:a0:
                    68:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:47:B9:AF:64:74:42:3D:1F:37:78:FA:B9:C2:32:08:F9:56:EF:C8
            X509v3 Authority Key Identifier:
                keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:7a:2e:7c:b3:bc:b4:17:26:c3:e3:dd:ae:74:59:f8:40:5f:
         78:6e:e4:a1:ca:3b:df:53:53:8c:b5:57:bb:ce:1e:88:7a:9d:
         80:03:40:07:e7:46:2c:47:23:ac:19:1e:a3:3a:51:e9:42:fe:
         89:5b:21:a8:c4:da:5d:6c:56:83:10:a9:49:5f:05:d5:26:52:
         95:fb:4a:53:36:1f:4f:8a:1b:a0:10:d7:92:1e:e7:2d:4c:4a:
         bc:d6:c8:bb:d4:f3:20:19:be:c0:b1:69:88:3b:39:6a:c0:cc:
         f8:cf:3a:07:a4:10:bb:d4:b6:ff:99:b1:65:65:5a:d5:51:d5:
         cb:31:73:e8:b6:9e:ed:b0:84:ce:eb:8d:32:59:d9:56:c1:37:
         e2:91:ff:5b:e8:b8:24:27:0c:b4:15:ce:97:6d:96:a2:10:1d:
         0d:71:be:de:4c:bd:99:4b:e0:0b:63:be:3b:4d:04:b0:58:dd:
         54:54:c8:41:03:b4:38:5d:44:73:44:6f:09:c3:b1:a1:8b:34:
         1f:51:01:01:63:f7:e5:6f:45:f1:e7:6f:80:80:3a:f7:e0:0d:
         2c:16:b1:1c:23:24:d2:4e:f9:37:5f:cf:cf:7c:79:9a:43:1c:
         ae:04:31:c1:84:ce:9a:e5:4a:67:d7:c6:a4:bf:17:69:2a:5c:
         06:e4:d0:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEwaovi86r92Vtbx1tSYPyDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDI4MDdlYWUyNmE2N2QzZWJjMjVlZDUwZmZlNTQzNGJj
NjZjNTIwHhcNMjYxMDEyMTQwMDUxWhcNMjYxMDEzMTQwMDUxWjAzMTEwLwYDVQQD
Eyg4NzQ3YjlhZjY0NzQ0MjNkMWYzNzc4ZmFiOWMyMzIwOGY5NTZlZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxrdKfSBXjIzqapGUHXdTVR6n4WS
HIeHtIUE9m2iAurXrPcq3tWqlMS0gHuv8V0Ikd4+hGX05887w34uyLUTzuWIOrAq
geHiLpuiT90eluLEwVsSaYIM71IGGDH/Vq1uIiak1SEleMV0ga50Km4ueAmv0hyB
0xtK6HwFrI1War7t9R6nhdgE4MEL90F0L2JJnjRjGHLf5GqQRvxnrcFT6WCUcxp3
2uyqRCFlL86J7solm4RfRGRVDf/JxdpSF5k6XYuBFi//5kpwnYx9JFDy+LkVLHID
FPUYIr4MMnJy5IpZ8WFKvDqkZeTN1prwjnakCvWNoB0VkqIrcNEv2qBo/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdHua9kdEI9Hzd4+rnCMgj5Vu/IMB8GA1UdIwQY
MBaAFCTSgH6uJqZ9Prwl7VD/5UNLxmxSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTIt
Zjk5YTNkZDk5ODI2LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTItZjk5YTNkZDk5ODI2
LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHoufLO8
tBcmw+PdrnRZ+EBfeG7koco731NTjLVXu84eiHqdgANAB+dGLEcjrBkeozpR6UL+
iVshqMTaXWxWgxCpSV8F1SZSlftKUzYfT4oboBDXkh7nLUxKvNbIu9TzIBm+wLFp
iDs5asDM+M86B6QQu9S2/5mxZWVa1VHVyzFz6Lae7bCEzuuNMlnZVsE34pH/W+i4
JCcMtBXOl22WohAdDXG+3ky9mUvgC2O+O00EsFjdVFTIQQO0OF1Ec0RvCcOxoYs0
H1EBAWP35W9F8edvgIA69+ANLBaxHCMk0k75N1/Pz3x5mkMcrgQxwYTOmuVKZ9fG
pL8XaSpcBuTQag==
-----END CERTIFICATE-----
Generated at Tue Oct 13 00:24:32 2026 by rpki-client