Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
File:                     J0zEEJs00UTL604gpr08B1kYIbU.mft (raw, json)
Hash identifier:          fDsfOAVsvwwG1F+C+Xk3NkxfRclEVIRBQdhbveLGIPA=
Subject key identifier:   6C:2A:B8:4F:81:4C:99:5C:00:DF:9F:FF:19:C4:65:09:01:8F:AB:2E
Authority key identifier: 27:4C:C4:10:9B:34:D1:44:CB:EB:4E:20:A6:BD:3C:07:59:18:21:B5
Certificate issuer:       /CN=274cc4109b34d144cbeb4e20a6bd3c07591821b5
Certificate serial:       01A0DBA95220C693C6412F320AEAA75FC115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
Manifest number:          1A70
Signing time:             Sat 26 Sep 2026 03:01:41 +0000
Manifest this update:     Sat 26 Sep 2026 03:01:41 +0000
Manifest next update:     Sun 27 Sep 2026 03:01:41 +0000
Files and hashes:         1: 1YV-n6eVDyBMy2lAG2BB0xXnzzk.roa (hash: W+GPGe5q5iuYl+QBGPJokCqY2QUI29XV5EWynoVR34s=)
                          2: J0zEEJs00UTL604gpr08B1kYIbU.crl (hash: wGwIw6ibJPP9h8Fg8x6Xg+6UishwU6MdKeotGolPkPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a9:52:20:c6:93:c6:41:2f:32:0a:ea:a7:5f:c1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274cc4109b34d144cbeb4e20a6bd3c07591821b5
        Validity
            Not Before: Sep 26 03:01:41 2026 GMT
            Not After : Sep 27 03:01:41 2026 GMT
        Subject: CN=6c2ab84f814c995c00df9fff19c46509018fab2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:85:27:23:65:83:6d:4b:d2:df:60:cb:f8:e7:
                    dd:f6:51:16:b5:e2:ad:be:cc:c9:b2:9f:02:b8:49:
                    d1:53:d2:60:57:ad:2e:18:30:e8:74:7f:54:33:d2:
                    92:55:e1:b4:e6:6b:3b:2f:44:c5:2c:b6:32:4e:48:
                    64:c3:e9:54:75:fb:04:77:2f:44:0d:47:54:09:09:
                    62:2f:2a:c9:57:46:23:b4:20:ef:ee:2c:61:e2:72:
                    ea:b1:b2:41:d1:ed:b0:2e:0b:8c:78:6a:8d:85:b9:
                    53:63:d6:d5:51:8a:33:17:46:e2:b6:46:eb:4e:c9:
                    99:9c:57:8f:14:ab:d8:1c:54:a9:88:96:02:61:99:
                    7a:5c:9e:96:ce:64:46:71:87:f5:56:ee:9e:d2:8d:
                    89:e2:bd:95:07:ec:6a:d5:82:e1:88:a8:cd:64:3b:
                    cd:42:dc:a9:6d:44:4b:9d:d5:57:8f:f8:6a:3e:c7:
                    49:56:f4:f8:87:2c:42:56:f4:96:8c:21:2b:9a:df:
                    41:39:90:07:d1:f0:76:65:d0:20:f6:f3:1c:60:f4:
                    6c:25:b2:11:1c:f5:23:ed:ca:a1:ca:77:31:3f:45:
                    5f:84:9e:31:d4:f7:df:ef:fa:b6:f7:dd:34:ac:1d:
                    2c:06:f1:f6:d6:f4:cb:d5:2a:cc:f8:e9:6c:3d:cc:
                    1c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2A:B8:4F:81:4C:99:5C:00:DF:9F:FF:19:C4:65:09:01:8F:AB:2E
            X509v3 Authority Key Identifier:
                keyid:27:4C:C4:10:9B:34:D1:44:CB:EB:4E:20:A6:BD:3C:07:59:18:21:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d4:20:cc:aa:49:19:99:22:ac:0b:77:cf:23:e0:b7:ef:75:
         26:b3:e6:d6:30:5e:30:9c:37:0b:7a:91:c8:0d:97:f7:d7:a7:
         df:15:c1:09:82:b6:3e:3a:fc:d0:0d:b6:f1:b4:8d:37:17:9e:
         8d:f7:2e:f7:f7:fa:b7:05:db:8a:63:d0:32:33:52:76:67:0a:
         bd:15:3a:19:7e:53:42:75:44:0e:34:5d:ac:6c:2a:92:36:f9:
         da:2b:48:6a:9e:fa:15:61:d0:44:94:7f:fb:11:d2:93:e4:24:
         6e:ab:21:4e:47:9f:5e:b9:fa:f6:a4:83:25:cf:13:17:01:0e:
         0b:bc:16:12:1f:08:66:33:6c:80:46:2d:1a:fd:c5:34:28:64:
         fd:ed:69:46:b2:87:de:da:8d:99:bd:6b:b6:ab:b1:3e:69:d1:
         c8:9c:2f:cc:7f:af:1e:17:0b:08:0d:2a:fc:89:59:c9:c5:15:
         4b:64:54:41:fc:50:bb:33:e5:cc:ff:19:52:2d:62:cb:f5:53:
         17:44:49:3c:fa:e0:80:59:72:35:80:33:26:d0:0f:ff:86:14:
         08:49:89:d5:20:f6:60:24:1d:66:ed:49:2c:d0:21:9d:b5:cd:
         ff:b8:b1:d8:4b:2e:af:e8:d9:ee:8f:8f:36:2b:8c:93:a7:8a:
         02:f5:1e:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbqVIgxpPGQS8yCuqnX8EVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NGNjNDEwOWIzNGQxNDRjYmViNGUyMGE2YmQzYzA3NTkx
ODIxYjUwHhcNMjYwOTI2MDMwMTQxWhcNMjYwOTI3MDMwMTQxWjAzMTEwLwYDVQQD
Eyg2YzJhYjg0ZjgxNGM5OTVjMDBkZjlmZmYxOWM0NjUwOTAxOGZhYjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYUnI2WDbUvS32DL+Ofd9lEWteKt
vszJsp8CuEnRU9JgV60uGDDodH9UM9KSVeG05ms7L0TFLLYyTkhkw+lUdfsEdy9E
DUdUCQliLyrJV0YjtCDv7ixh4nLqsbJB0e2wLguMeGqNhblTY9bVUYozF0bitkbr
TsmZnFePFKvYHFSpiJYCYZl6XJ6WzmRGcYf1Vu6e0o2J4r2VB+xq1YLhiKjNZDvN
QtypbURLndVXj/hqPsdJVvT4hyxCVvSWjCErmt9BOZAH0fB2ZdAg9vMcYPRsJbIR
HPUj7cqhyncxP0VfhJ4x1Pff7/q29900rB0sBvH21vTL1SrM+OlsPcwcIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwquE+BTJlcAN+f/xnEZQkBj6suMB8GA1UdIwQY
MBaAFCdMxBCbNNFEy+tOIKa9PAdZGCG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjB6RUVKczAwVVRMNjA0Z3ByMDhCMWtZSWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zNDRiNjAtODg5ZC00MWYyLWI5ZjIt
YmUxNWRmOTliMTFkLzEvSjB6RUVKczAwVVRMNjA0Z3ByMDhCMWtZSWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zNDRiNjAtODg5ZC00MWYyLWI5ZjItYmUxNWRmOTliMTFk
LzEvSjB6RUVKczAwVVRMNjA0Z3ByMDhCMWtZSWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9QgzKpJ
GZkirAt3zyPgt+91JrPm1jBeMJw3C3qRyA2X99en3xXBCYK2Pjr80A228bSNNxee
jfcu9/f6twXbimPQMjNSdmcKvRU6GX5TQnVEDjRdrGwqkjb52itIap76FWHQRJR/
+xHSk+QkbqshTkefXrn69qSDJc8TFwEOC7wWEh8IZjNsgEYtGv3FNChk/e1pRrKH
3tqNmb1rtquxPmnRyJwvzH+vHhcLCA0q/IlZycUVS2RUQfxQuzPlzP8ZUi1iy/VT
F0RJPPrggFlyNYAzJtAP/4YUCEmJ1SD2YCQdZu1JLNAhnbXN/7ix2Esur+jZ7o+P
NiuMk6eKAvUegA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:42:52 2026 by rpki-client