Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
File:                     jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json)
Hash identifier:          6m5FfdTPz6jzKonstkl8gRDkvzPp0lGEJGbniaA/Grs=
Subject key identifier:   AA:1B:DE:63:C8:A3:55:7F:8D:C3:92:B9:6E:42:E1:27:A8:A6:A8:11
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Certificate issuer:       /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial:       01A0D1246B26CC38F6E9BD666A3474791EE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
Manifest number:          1A0E
Signing time:             Thu 24 Sep 2026 02:00:19 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:19 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:19 +0000
Files and hashes:         1: 2rVgJyxoTboo6DUxsVd0VYXicAU.roa (hash: X52WnSx4UXGK7QvOms2/DV0R18ZO7IPkzPCPa9/Vpo8=)
                          2: ABhJOuq81aAMPa4_YYIO3v-t4oU.roa (hash: 0eeFSSqt4KgbYUOgEizxWBOCbjrR9YB3YtAIVlPFnN4=)
                          3: IPWNhyQxn8-D80dsDEI3Muy7j4w.roa (hash: JR2kZnfGEReYvLarJyG91LQRoVZfPpAoA2dBMj0ig2w=)
                          4: MJk2hRWFPXbWPid66y-yooVzeJI.roa (hash: hXdMru/lhTHGd2pc4sxdOlRtEDGUTqlGbfj85klFeUI=)
                          5: Mcn8ffph0vFbf5y77sp8qX9cvuQ.roa (hash: oh6B2oDiINNmRv7LyEyRUP7+GJCatnxM+IyU6VV9yRs=)
                          6: Oi-RJ2dhND8R3bCPKlX2wVza8B4.roa (hash: AY1jUsJQoUBtPYQaCHvczNv8Mdfj3rI4udwi0diUU84=)
                          7: TXWio7T0yQ8fPQNndu5iMXKIPyk.roa (hash: Ptazack76ll8xJWikp2M96Ej4NUgmKdtpGkA8A7sIE0=)
                          8: __KT70ir2b12tsfvWsQwOzZ4SWs.roa (hash: U40qvVXwLqE+3d+p8VD5hkkPBVtM5TzS/GB+oxmksS0=)
                          9: ceKjGHCvCXf_MEK8NMfyXBnLoVU.roa (hash: hhPEmrABIH3Expe/KF3PZ8pAmJCxcVnuEeGLXskO2EU=)
                          10: dNyetmWu_99kmHhkiZvcLr-cuzU.roa (hash: forzVhrHGmXFVsQJmgLEUSqJW9c/HnLATZaoS4TWk3M=)
                          11: gnoYrT4knURKrt5KKBfShHVozwM.roa (hash: OjJdSpf+iXwyfGjxwCj90eq75k08MDbax/f+tQriWTM=)
                          12: gxcl9XCHDE4fGimi4jiKM9IDg8o.roa (hash: DzMBaQYtlFhqXC65m2URCwbC9IBE5rQY6qBFudLZErg=)
                          13: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: wYOJ/ajnAyikgAiOY4TufGWnL8tIWljMNr4XQO+STuU=)
                          14: mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa (hash: 3ZvEE02yM0Yj5XqmRnhIug23pmfqiLpaNpSz+FFkWwI=)
                          15: r8_-tV7Ps-g2u70jfHclQnvoEf4.roa (hash: aq49nLbAL3NpREIkaDZ5YZko/p5YLSFu8OdWv3BLfCU=)
                          16: vDEzYqBkCfgUY7uwB1YZdOKY4lA.roa (hash: FWKvLV4V8Zp4mvo/6tBcMGGo3HEXFD5ePSPM/5NPrKo=)
                          17: yo2ggwAD85SNNQPIQb6yRaxOrWc.roa (hash: WrPp+dfsMZ+WFpULoYs3ZQMI2AEc3f6rXkU0dwgG658=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 02:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:6b:26:cc:38:f6:e9:bd:66:6a:34:74:79:1e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
        Validity
            Not Before: Sep 24 02:00:19 2026 GMT
            Not After : Sep 25 02:00:19 2026 GMT
        Subject: CN=aa1bde63c8a3557f8dc392b96e42e127a8a6a811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:bf:e6:0d:35:9d:4c:28:55:22:a3:4e:fa:
                    20:4b:1b:b8:c3:60:6d:64:de:3a:09:7f:72:23:00:
                    e7:9d:fb:73:fc:7e:98:2f:1a:38:f3:ad:4f:25:17:
                    73:31:4e:d1:a2:3a:cf:67:d1:5b:66:b4:bb:58:67:
                    c9:f1:48:b8:e2:da:da:d7:0a:09:c6:49:3b:59:ba:
                    30:b5:82:e0:30:32:ad:0d:c3:a9:d8:4d:ff:95:ae:
                    49:5b:c4:d4:23:1a:f5:b8:2d:4c:2c:61:78:cc:b0:
                    8a:36:dc:b5:5c:61:8b:7b:47:5a:46:b3:70:db:6f:
                    98:2a:a4:12:bd:a4:cd:98:aa:26:92:fc:b4:79:fc:
                    21:3d:35:b1:9f:74:30:0a:12:e4:9c:14:07:a3:c1:
                    dd:99:71:ca:47:d6:92:d3:7b:f1:f3:ac:74:49:6b:
                    6b:97:64:50:9f:01:91:8e:c3:f2:41:53:b0:01:d2:
                    24:47:65:df:39:85:71:0c:3a:c0:c1:b4:95:46:da:
                    3a:96:d2:f8:f1:ee:40:e4:a9:f3:ef:0e:b3:a1:ce:
                    15:dc:a9:f2:ee:08:be:1c:c5:0c:2b:6a:11:b8:c6:
                    cf:90:ce:d9:6f:b8:f4:e0:99:0a:06:13:b0:a3:65:
                    30:2d:4a:2e:04:4a:df:7d:ef:3c:69:93:30:0d:59:
                    45:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1B:DE:63:C8:A3:55:7F:8D:C3:92:B9:6E:42:E1:27:A8:A6:A8:11
            X509v3 Authority Key Identifier:
                keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:3b:d5:ef:0a:b4:51:55:1c:f4:33:ce:b0:f8:cb:05:06:12:
         f8:48:41:f6:6c:16:ed:bd:c1:b8:ac:a6:d2:f5:a5:e0:5f:f5:
         c6:60:c2:5f:9e:c6:e2:d5:97:0a:8f:f7:5f:1b:65:ea:4f:34:
         9c:9f:7e:89:db:b1:35:7c:d2:32:66:eb:dc:21:a6:d9:6f:4f:
         64:6a:76:c7:c2:a8:4f:a8:2f:f1:34:9c:97:36:e4:2a:00:47:
         3f:76:f4:ba:4a:76:0b:55:26:62:01:64:c4:96:60:42:ee:4a:
         85:17:18:d4:7b:cb:9c:5e:37:ca:c4:b7:45:cb:a5:60:09:40:
         74:1d:7a:de:ea:b4:56:a8:9d:ca:ff:12:f9:19:b0:0e:5c:0d:
         4b:3e:81:c7:bf:a9:d6:2f:30:66:63:48:36:fb:0a:ed:83:84:
         cc:f9:33:68:c2:0c:9c:58:c8:0a:c9:07:3b:94:c2:3f:23:e2:
         0c:25:57:5c:2d:25:52:b0:c5:9b:0e:c7:70:3a:78:e0:28:6d:
         b5:10:ff:e8:a2:05:5f:de:b5:be:2c:4a:1c:3d:d8:d0:8a:0c:
         d1:82:10:74:c1:31:37:50:1f:3d:99:2e:6d:c0:ce:32:78:1d:
         78:31:06:a6:2e:e8:6c:08:51:23:04:5a:b9:83:30:14:fb:f9:
         11:50:a5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:45:31 2026 by rpki-client