Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/JWIiXTLCDbC4HlggFbe-XD4JlrQ.mft
File:                     JWIiXTLCDbC4HlggFbe-XD4JlrQ.mft (raw, json)
Hash identifier:          dbj+uCJ7nRNRjPizylUZWfu2qHlKTyMfRp90D2/Dfmc=
Subject key identifier:   DC:02:88:9B:85:29:1F:20:0C:2C:9A:D3:DD:F5:AC:96:B4:30:70:62
Authority key identifier: 25:62:22:5D:32:C2:0D:B0:B8:1E:58:20:15:B7:BE:5C:3E:09:96:B4
Certificate issuer:       /CN=2562225d32c20db0b81e582015b7be5c3e0996b4
Certificate serial:       01A0E51A00F3CB2DA00ECBEE8BE8FA818928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWIiXTLCDbC4HlggFbe-XD4JlrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/JWIiXTLCDbC4HlggFbe-XD4JlrQ.mft
Manifest number:          6B
Signing time:             Sun 27 Sep 2026 23:01:21 +0000
Manifest this update:     Sun 27 Sep 2026 23:01:21 +0000
Manifest next update:     Mon 28 Sep 2026 23:01:21 +0000
Files and hashes:         1: JWIiXTLCDbC4HlggFbe-XD4JlrQ.crl (hash: 3/8y5BmWM1JbPkMxhjmWbzXFvlQxVMihRGLG747A4GE=)
                          2: klrosDEOjckTGs7uNWRpWVh-PXA.roa (hash: Mee86lzuSd1BMBKUUa6c68fXrs93E31ysp5BpoC8Y9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/JWIiXTLCDbC4HlggFbe-XD4JlrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/JWIiXTLCDbC4HlggFbe-XD4JlrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWIiXTLCDbC4HlggFbe-XD4JlrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:1a:00:f3:cb:2d:a0:0e:cb:ee:8b:e8:fa:81:89:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2562225d32c20db0b81e582015b7be5c3e0996b4
        Validity
            Not Before: Sep 27 23:01:21 2026 GMT
            Not After : Sep 28 23:01:21 2026 GMT
        Subject: CN=dc02889b85291f200c2c9ad3ddf5ac96b4307062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6a:eb:f6:20:58:5a:89:a1:a8:cf:ac:9a:41:
                    81:c4:f5:8d:a3:23:64:3e:fa:74:63:a1:38:c9:b3:
                    25:f4:43:5d:0c:d5:44:c4:bc:10:f7:d2:db:71:1c:
                    aa:c4:ad:5d:4d:fd:ef:19:f7:ef:cd:8a:bf:07:f6:
                    2e:c5:d6:64:68:b0:9a:4b:1f:e9:67:d2:df:11:f3:
                    39:fb:11:c0:2e:a2:b8:95:02:f9:06:b3:b9:59:5d:
                    0e:04:29:9f:2a:c9:db:43:4d:85:48:c3:f2:67:1d:
                    a6:f9:aa:1d:a9:a9:9b:a7:19:f7:a1:88:87:ba:83:
                    4c:a5:d8:25:57:e7:5c:66:3c:18:5c:cb:86:78:98:
                    9d:0d:02:49:b0:1e:2b:b0:87:32:6f:ee:b1:2c:69:
                    4a:5e:ca:c4:18:35:6f:53:e7:12:a8:c1:76:a8:e7:
                    73:94:92:f7:3a:02:f3:16:01:fd:61:e6:de:d3:b4:
                    e6:96:fd:23:0a:27:32:dc:8b:f1:39:a3:38:9e:12:
                    30:6c:4e:9e:81:e2:95:84:9b:16:6a:24:08:3b:ed:
                    3c:54:f8:b1:7b:44:a8:59:83:43:43:fb:d1:43:69:
                    48:96:f7:23:8f:92:32:a2:76:b6:1b:eb:6c:a1:40:
                    ce:9b:51:dd:1b:21:c7:c7:ee:22:09:4e:46:de:d9:
                    44:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:02:88:9B:85:29:1F:20:0C:2C:9A:D3:DD:F5:AC:96:B4:30:70:62
            X509v3 Authority Key Identifier:
                keyid:25:62:22:5D:32:C2:0D:B0:B8:1E:58:20:15:B7:BE:5C:3E:09:96:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWIiXTLCDbC4HlggFbe-XD4JlrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/JWIiXTLCDbC4HlggFbe-XD4JlrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/JWIiXTLCDbC4HlggFbe-XD4JlrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:43:6a:f7:08:da:7a:1c:87:7b:b8:8f:ea:3a:a9:62:cc:06:
         18:4b:45:06:5a:88:f3:d2:51:cc:09:58:ff:79:a1:4c:68:80:
         46:f9:5e:80:91:ee:84:b1:76:28:b7:3d:eb:d5:72:4b:71:aa:
         63:61:85:83:67:dd:ca:8e:81:c1:fd:36:c7:61:b3:3c:f4:92:
         f8:66:c2:fe:95:b8:6e:54:df:a5:83:08:9c:c0:87:fb:24:26:
         1d:d8:4e:d9:4f:16:a9:29:6d:43:67:41:c8:8d:d6:9f:b5:dc:
         81:bf:89:b0:b1:64:5e:13:e9:00:f9:f5:d5:01:60:60:ed:20:
         bc:42:26:61:89:e7:c3:67:6a:0f:67:bd:16:e0:1e:a0:09:70:
         d4:2c:8a:c9:ec:6c:86:81:2b:db:3a:aa:06:e1:9d:30:37:e1:
         30:a2:dc:38:40:67:b7:ed:fa:f5:2b:97:e1:0a:ff:18:97:0a:
         39:3a:27:d5:c7:8b:13:07:f2:01:47:6b:dd:a6:54:ce:6b:d4:
         cb:d2:4c:4d:b5:a3:73:c9:fc:ff:db:55:f8:18:5e:31:d6:af:
         18:c4:6e:7a:0c:3a:3d:9d:5d:80:2d:23:40:ac:a7:a5:dc:61:
         ce:2f:6a:13:60:a0:c8:8b:10:41:0a:98:c0:d2:45:13:80:d7:
         7e:df:51:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 02:11:18 2026 by rpki-client