Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
File:                     jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json)
Hash identifier:          /aEQhDXhSGksCtFyDvdqy3ObDLddnwRVvFdAPvbtW+s=
Subject key identifier:   20:AA:6A:3D:41:68:F8:DD:89:E7:83:94:86:62:7D:F5:0D:D4:DF:06
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Certificate issuer:       /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial:       01A0D796E73DAB60298FAC265651E14ECC64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
Manifest number:          101A
Signing time:             Fri 25 Sep 2026 08:03:06 +0000
Manifest this update:     Fri 25 Sep 2026 08:03:06 +0000
Manifest next update:     Sat 26 Sep 2026 08:03:06 +0000
Files and hashes:         1: 1EgCfIUZHYf24SrWg9kAOto8Duc.roa (hash: AUpadmn7SxPiN/E2rAaCXCpLwYoRDkhN/Jxbn7p885k=)
                          2: 3GHhVMraDxdiiAskPewL35crdjo.roa (hash: XPSOg6gcqzCXxPqB2AsSmHrynZ5hN5FT4lGxnzezIrw=)
                          3: 8MnxyjCOrSvQ6i3dnWv8KYTCZVY.roa (hash: 0JK4Fw26Ffv1CbJTN1h1lmvQzBmi4JhkRYBwfgGlUiI=)
                          4: B19k1PitIujJpaB0ZKwK-7amv2k.roa (hash: 5KywPlZFag+pODjYDKN24Y+tX6ip9dFPHCvilImjUlk=)
                          5: CI5OA6QXqxDb_vQORKk6q2XDhKs.roa (hash: EhsJRsPXMO4K43zEnBLLLlr95wCN5evyvOqkDdEQez8=)
                          6: C_i3BFwSyufK3kEKnj8AwQJSM-g.roa (hash: RqeBg4qnPKs7LMu02pA0RKL7OpjvJCoQwZAVatnEMK4=)
                          7: G978p2Z4fjPEzTOjuXppglSIr4s.roa (hash: Nz/5Sv/BTu9yF7BMhupkYJxi7TJYJJ/JoGGvUftlZv8=)
                          8: Gnd3MsYe2rufPaMH9tP8tl2-XJM.roa (hash: pGrQx5S2KxHTpkTBouQo/IMtimjqQRdhpHgfquKymNk=)
                          9: M8jgCbSmS_f7pdpfIZJACPF9zFQ.roa (hash: pXnnl9PZijaHt9S33eJN6xuH7nQxj7MBnjM8e2gGQQQ=)
                          10: NZeiCNkAFPPe6mRmV3vIotIey6I.roa (hash: 1okB9NoMuO2fNW/qbueY6s54GpzzWp1KSEo2FrjzOoM=)
                          11: QFBIL98nhWZihq6X9otfp-26AW8.roa (hash: 7lXr8KdBRuxrgLdmbnp5sqy+5Eu7YOk4bILMk23Cxhg=)
                          12: YFekMV6k_znI9JX_sw8Tv3F6sTI.roa (hash: m5Hdd1gjDtnmRTylaY7LXFqGy5f9ant1wS9vgjPqwac=)
                          13: ZqwWAGksfiZKKct8ToZ_J_LNgwo.roa (hash: yNA9Iud4iZ26wPkbKHA01kAUSSNsLVBFRoknHNyK1a0=)
                          14: aagIksMopc799P33hATJVhYhv50.roa (hash: iIkNSdTVd4sXcPwrjUX8C5eltdaFk4s2uMI1T070mOQ=)
                          15: c4DyAsvFXbG5o7jFYYQSHpcqttU.roa (hash: 4O/PlJ6tXg3HjZe3texYnbvtJFDsgoqM8xcWPLuCcns=)
                          16: iKgelSgdHhyAKexXbXYmueOaeUg.roa (hash: +J08ylKBec0E8mLjnpla5kSjNS7Y7MzYev03SpaSkmY=)
                          17: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: wJfAVSuWZnfhx8UsJLoAhY+1t3uvHBAWXZylPMV9l6w=)
                          18: rmDqg6_mwNfYbcdrFON7FhlqYh0.roa (hash: jIARmAph/9tdERae1K6C9u4rfY/UdNtYyTUK8kLHly0=)
                          19: vk8AdaRmwdGEey0-KpqMAa5y-4s.roa (hash: gP9M2HbDQuUF4XHqQmNFAfst7z43j3AWmXSU5dk3Lk4=)
                          20: xJUfKNZ1xwiWMdelR8iN_NauVcs.roa (hash: W+SoqO5Yn7RcvEpB633UMr3Dz2Q++VpVK6LVgymGZUo=)
                          21: yFniHWXO7_eCIiqp5zEklB0-E4M.roa (hash: AVejDieEOPpUjiHa4BQgEX+ocNwhYeJQ16YzzFkL1AM=)
                          22: zACbew-GGDfV_PK86Nbolx1SxaQ.roa (hash: D57qhpDyGLmWHribQIP+4h8O4QGVd3pMoP+ytRMK0jc=)
                          23: zSrZfDynMxjHsni65bw3lNFxjdo.roa (hash: B3r/Ky/6d0oUxMT1wJmgm/sCz+cdvAcj1deLNp7FbDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:96:e7:3d:ab:60:29:8f:ac:26:56:51:e1:4e:cc:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
        Validity
            Not Before: Sep 25 08:03:06 2026 GMT
            Not After : Sep 26 08:03:06 2026 GMT
        Subject: CN=20aa6a3d4168f8dd89e7839486627df50dd4df06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:78:52:a0:8d:c1:64:b7:ae:ef:28:da:2d:
                    c6:c8:7e:db:99:a6:a4:79:da:f7:0e:bf:70:8c:f0:
                    e4:77:14:76:d8:d0:f9:e0:33:7b:b1:07:a0:d6:61:
                    d8:a5:49:a9:a4:c1:6a:1c:5b:a5:4d:08:b5:16:9b:
                    4c:27:51:c8:c9:ad:7f:58:15:30:3d:aa:7b:2a:aa:
                    44:01:74:5c:ca:bb:68:8b:ee:be:c3:bf:6d:b9:51:
                    e6:0d:2a:d2:af:bc:88:a1:72:de:1b:5e:93:6f:e2:
                    3c:8a:a0:2a:61:a4:30:13:4d:e2:1c:96:05:d0:8f:
                    2c:56:de:40:32:b1:17:4e:4b:5c:27:2a:d6:8a:4e:
                    1f:80:59:9f:56:61:3f:d5:59:97:ed:26:64:df:c3:
                    31:48:54:b8:3a:bd:22:5b:bf:fc:3f:4a:46:31:60:
                    6d:6b:98:d4:ba:19:cf:22:eb:e8:66:a1:93:96:ea:
                    05:48:9d:51:f2:0b:04:f2:89:72:64:17:9b:37:df:
                    92:bb:b6:9f:64:07:80:da:d0:fe:fe:a9:b9:cf:6e:
                    2a:80:95:f8:74:ff:12:45:ff:d4:d0:ad:7f:ca:03:
                    16:4a:24:c6:b4:b7:87:7a:17:ad:d6:05:76:7a:24:
                    a4:d9:c9:5e:52:23:1b:e4:4a:e4:9b:f4:a4:24:67:
                    c5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AA:6A:3D:41:68:F8:DD:89:E7:83:94:86:62:7D:F5:0D:D4:DF:06
            X509v3 Authority Key Identifier:
                keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:24:7c:be:47:ee:aa:ef:40:58:02:29:70:bd:4c:2f:61:2f:
         06:44:7f:dd:cb:a5:71:96:9a:5f:cf:36:80:8b:0f:32:ba:57:
         17:6e:70:16:13:9d:62:ef:91:0d:f6:b3:16:96:2b:87:ea:95:
         fa:8b:a2:cf:ce:74:85:86:40:e0:33:1c:a4:91:f0:83:cb:5f:
         76:a6:6f:70:77:b9:48:f9:96:36:70:5f:b9:d2:46:4f:a1:16:
         28:36:2b:69:27:cc:78:22:c6:9c:d4:98:63:f1:28:0e:ed:92:
         5c:46:eb:48:1e:2c:69:e9:53:22:d9:38:2c:58:d3:f6:b6:0f:
         95:69:e4:b8:36:40:c8:ac:29:0c:d5:4a:ed:33:42:6f:b1:c1:
         06:d8:68:85:e4:f2:93:ce:35:26:d1:4a:58:ec:4f:38:e0:41:
         e7:62:30:ef:7a:94:dd:1c:51:8e:46:b6:88:c8:a6:58:72:68:
         c6:81:dd:3e:bf:82:06:29:64:29:8e:0a:3e:b1:b9:b8:af:99:
         44:fc:5a:0c:38:11:14:21:d7:e0:83:7d:2b:56:4b:6b:81:84:
         e0:2e:36:c2:25:2d:b5:42:a9:43:63:1d:54:87:23:6d:89:81:
         c5:69:e1:f7:74:e2:80:b2:2b:c2:ea:6f:96:8a:ab:f3:f4:8f:
         57:e7:39:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:03:43 2026 by rpki-client