Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
File:                     JKmv_35_6wbhjeksJzVjuYAzMWs.mft (raw, json)
Hash identifier:          PS38IsUwpzwBFECfWImFeYuIrrVgIlFPOvKSW18u8Tc=
Subject key identifier:   2A:38:2D:FF:8B:34:B9:7D:52:E4:AF:96:00:E5:E9:5A:16:F9:03:27
Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
Certificate issuer:       /CN=24a9afff7e7feb06e18de92c273563b98033316b
Certificate serial:       01A0DBA9EE78F856396D4095596E83BBD132
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
Manifest number:          055D
Signing time:             Sat 26 Sep 2026 03:02:21 +0000
Manifest this update:     Sat 26 Sep 2026 03:02:21 +0000
Manifest next update:     Sun 27 Sep 2026 03:02:21 +0000
Files and hashes:         1: JKmv_35_6wbhjeksJzVjuYAzMWs.crl (hash: ck41vRSfwkW3dBYb7LZPD34LajKmPWq3aMDKPIOFBtQ=)
                          2: OcGLgpdPjEji6rhRKA3ndoUPng8.roa (hash: uMbYxwC7JX58tZin/DJJELLb9OvFN38e9zDdfuZgxac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a9:ee:78:f8:56:39:6d:40:95:59:6e:83:bb:d1:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b
        Validity
            Not Before: Sep 26 03:02:21 2026 GMT
            Not After : Sep 27 03:02:21 2026 GMT
        Subject: CN=2a382dff8b34b97d52e4af9600e5e95a16f90327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:54:53:ae:38:38:f0:2a:6c:db:e1:18:c1:
                    95:65:d0:8c:d0:1d:6d:b4:5f:d8:cc:01:af:d8:89:
                    3c:0b:ff:d3:b0:72:b5:b6:d7:5c:92:40:d2:62:80:
                    38:07:c3:38:7b:3b:9c:aa:90:12:1b:75:25:48:e0:
                    f6:c7:34:c8:3b:70:42:2b:da:e9:0b:b4:24:dd:ba:
                    dd:ac:7e:32:fa:1e:3d:0d:2c:7c:c2:54:6b:54:cb:
                    e7:88:fd:ae:50:9b:b0:89:fb:d0:85:70:7f:d9:8d:
                    33:f0:1d:a9:be:2e:da:27:11:4f:03:04:6f:13:10:
                    c1:6f:e8:49:b0:5d:aa:97:2b:53:50:67:89:ee:98:
                    f5:85:4b:66:02:c9:37:7e:2d:e9:88:f4:fe:bc:2f:
                    88:7e:77:c3:d1:5e:13:47:10:71:a4:96:c9:97:ad:
                    7d:62:75:83:75:dd:b6:eb:fd:7a:55:ec:5b:bd:96:
                    a7:4a:5d:d6:10:87:58:97:6f:f2:2d:ad:7f:13:48:
                    57:6f:f8:84:3b:08:03:07:4a:00:17:c1:8a:b9:73:
                    24:07:63:05:08:a1:67:3e:68:e4:71:12:34:54:93:
                    8b:5f:a0:a3:8b:03:25:43:0f:1b:bb:9e:b7:c4:d1:
                    e9:e1:37:05:03:39:95:6b:c0:f0:11:de:ef:01:81:
                    8c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:38:2D:FF:8B:34:B9:7D:52:E4:AF:96:00:E5:E9:5A:16:F9:03:27
            X509v3 Authority Key Identifier:
                keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a2:5f:1b:12:d7:55:3d:8a:60:52:fe:dc:e6:00:a3:a8:f7:
         1e:25:c3:d2:ae:84:ea:b3:cf:c9:31:c4:3c:2d:c8:62:bf:98:
         01:0e:20:b1:61:2a:09:40:cc:99:95:31:c2:58:bd:c2:95:21:
         55:f4:7a:4c:55:df:bb:0d:22:3c:9f:af:ee:5c:0c:fd:78:24:
         d6:13:3a:21:7d:2f:cb:18:4e:04:c0:bf:21:36:94:c1:6e:bf:
         72:2c:5c:14:34:9f:cc:4f:e7:56:ff:16:fb:0b:c3:8e:18:b6:
         80:2d:03:89:99:1a:43:b4:0f:4f:95:cd:d0:86:8d:bc:34:3a:
         7b:5a:4d:2b:70:e9:98:9e:6b:c3:4a:e3:cb:a8:d3:35:03:de:
         33:dd:c0:0e:d8:63:13:47:32:cf:a1:0f:a6:28:95:ff:96:f9:
         88:1a:f8:54:f1:39:41:cf:80:24:4b:06:e5:53:dc:3b:4c:5e:
         66:00:ba:9a:2b:49:26:9e:71:7a:5c:92:a3:bf:22:ea:26:b7:
         e2:71:bf:8b:11:40:5f:d0:70:06:b3:c5:d8:e2:27:cc:7a:b2:
         41:c7:05:26:57:be:f1:18:f2:a5:0e:72:47:44:0f:84:8d:7d:
         a2:ce:c6:f7:01:3e:ee:05:45:4d:03:1b:38:6d:a8:a8:75:18:
         3f:42:ef:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:36:48 2026 by rpki-client