Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
File:                     JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft (raw, json)
Hash identifier:          gFFlYQl0NxbWo6WWqekAzyOTL+dvbKiQ/XEFbQZ/CL8=
Subject key identifier:   AB:BE:9E:14:9C:FD:1B:BB:B5:82:FB:2D:62:37:16:36:DA:97:26:D4
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Certificate issuer:       /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial:       01A129C40D2AEA8CCF43DFCA08F1B62C2F11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
Manifest number:          1761
Signing time:             Sun 11 Oct 2026 07:01:16 +0000
Manifest this update:     Sun 11 Oct 2026 07:01:16 +0000
Manifest next update:     Mon 12 Oct 2026 07:01:16 +0000
Files and hashes:         1: 4FkVPC5vNrtpSNqa5G2ag64hn2c.roa (hash: eJNipDPmSjNdjnVGlbWB4N9kyxVoJyek2lU7Qg0nNCk=)
                          2: Cqg-JLEFS3E3SQW_nbJXY_G0YvQ.roa (hash: DReEkN/hfTnnC9nhnsHSBiwG7Yl2oVS+UgMhg+IV99A=)
                          3: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl (hash: cfTT4GIgcWEhVNRy0+eDvucHA3SmBYoo7AUpAwSlQT8=)
                          4: KSqbYIiPC6hjZpCBNYyri7RkHz8.roa (hash: 7dy/EjEvp/VIWQEGsyWTmFFkXo9hH0Lswc/1YNyFJRs=)
                          5: auNVP4GRdb-yov4RSHrL_OcE8r0.roa (hash: 5t12mbfhtFY5bSdUBeTultxiZTke4fOQV/q83M9/n1I=)
                          6: eBHffMc_OQgLVRhR9CGd779MAbw.roa (hash: qhXCq6p6fkTw8jwxWPhjXqKYMhPmkunhkqWsFwzUDmY=)
                          7: lTSu-_goZ6WOGMk5fQuX5HNBsEk.roa (hash: 6W6cMWiv5hRgx8grAeA4pofmiH98gBs3rUiuBjlvWwo=)
                          8: ni321Mar-ni3Fng6sRVQrZYJFJE.roa (hash: kQmfkuMhd35mY7SEXHcSPmCi04npAfw+HLHIprCZrEA=)
                          9: vN6bypKPP4_R4Oe8TnxxO8a9uoE.roa (hash: DO9hzzZioH0/1uVISXc0MOo1gFy5vQG85oKJKF4Qh/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:c4:0d:2a:ea:8c:cf:43:df:ca:08:f1:b6:2c:2f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
        Validity
            Not Before: Oct 11 07:01:16 2026 GMT
            Not After : Oct 12 07:01:16 2026 GMT
        Subject: CN=abbe9e149cfd1bbbb582fb2d62371636da9726d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:43:7e:60:38:dc:6f:a8:bf:2b:36:ae:fe:0a:
                    ee:9d:5f:0b:a6:85:59:49:e3:4e:9a:84:66:76:58:
                    bb:11:c9:3a:56:7c:a8:80:5c:76:55:d2:de:08:18:
                    cf:b4:2c:a8:76:ce:3e:24:fa:e0:36:6a:d7:c4:7c:
                    7b:60:d8:76:df:42:ab:e8:ee:98:7d:55:bd:84:69:
                    38:0f:9c:b3:c0:0f:46:54:bc:68:0a:ae:73:68:59:
                    ba:72:ac:6f:e4:45:39:fd:30:89:c0:bc:67:cb:7e:
                    61:dc:4a:37:a3:67:12:9f:df:d1:46:40:ed:c3:1e:
                    cd:f5:92:d6:f5:16:60:b1:17:35:dd:b0:ae:4c:5e:
                    2c:58:ad:05:18:4a:33:4a:4d:6a:77:92:3f:0a:b8:
                    a6:7f:c3:6d:db:df:55:c5:f6:75:e3:46:00:0a:aa:
                    69:cc:47:07:5d:0e:17:cf:4d:45:71:f1:f1:e2:d4:
                    34:10:91:36:17:d3:50:e0:14:77:f9:ef:4d:f2:fc:
                    aa:68:1d:af:0a:c0:f4:f6:cb:aa:8d:34:f1:d7:0a:
                    07:0f:be:6f:75:b2:cb:df:dc:3b:73:97:a7:cc:80:
                    fa:bc:20:4f:09:84:2c:4c:bf:fa:df:16:9c:37:fa:
                    b3:32:5a:12:22:81:59:87:77:23:c9:c8:a3:3f:a3:
                    ab:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BE:9E:14:9C:FD:1B:BB:B5:82:FB:2D:62:37:16:36:DA:97:26:D4
            X509v3 Authority Key Identifier:
                keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d4:aa:27:ff:c9:83:05:06:ac:08:9b:a5:72:2b:3c:2d:1d:
         6f:8e:69:ab:25:06:49:27:38:01:e6:64:7e:1e:5b:fa:c1:ae:
         10:77:4e:9a:9a:52:72:b8:4e:fa:e7:1a:11:73:fc:6e:20:39:
         c4:f0:39:5f:60:a7:5f:22:02:e7:cf:63:91:db:6a:fe:e6:a7:
         39:b7:7e:b0:9f:c1:1f:01:4f:e4:86:94:be:98:7c:3c:d3:45:
         e5:b4:3a:14:57:50:14:8a:d3:a5:84:e7:6c:5a:a0:5c:44:d7:
         53:ac:94:bd:fc:1c:54:52:ad:b0:ef:72:c5:18:7a:d3:a1:17:
         37:1c:7f:76:c2:b6:e3:7c:f7:91:6a:a1:ee:7d:9a:ea:0c:4e:
         49:27:13:21:a1:ef:5c:cd:ff:76:a4:8d:fb:f4:a8:ce:d1:eb:
         60:2a:f9:c6:a1:d2:d9:28:94:bd:e1:5e:1b:5f:46:35:4f:1d:
         1e:b3:70:f1:3d:d6:6e:74:8c:a6:ea:48:66:91:52:53:7b:07:
         93:f7:df:af:91:0b:e0:4f:40:ce:66:ea:be:33:f5:ed:c9:4d:
         5a:d6:a7:c4:dd:c9:63:b4:5d:87:ef:d0:09:37:85:c7:64:1e:
         ec:b4:32:a9:9f:4f:c2:66:b1:a5:c5:55:8c:ea:e8:63:c1:07:
         77:6f:7d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:30:09 2026 by rpki-client