Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
File:                     jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft (raw, json)
Hash identifier:          oDB3fmZHk5FPNqi9eFTfN/iDRmW5kBoQZKwHRdJ4RQ8=
Subject key identifier:   C9:51:E8:35:46:B1:96:E0:BB:97:90:C5:D1:A9:E4:C2:55:C9:F4:AD
Authority key identifier: 8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E
Certificate issuer:       /CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
Certificate serial:       01A0D9BAD7C0A54BE2E15A58A861757B38B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
Manifest number:          033F
Signing time:             Fri 25 Sep 2026 18:01:35 +0000
Manifest this update:     Fri 25 Sep 2026 18:01:35 +0000
Manifest next update:     Sat 26 Sep 2026 18:01:35 +0000
Files and hashes:         1: 8sncQGN_dofXozDeejTadUl8wRs.roa (hash: SW1+/cf3HtR0IB+S11zpo2LhAnvKL4afLlJ8vSGUHZ4=)
                          2: UtXzH5Oi0AulZFx0l8qig6QKaPg.roa (hash: 1qkvw5zb1r9z9CjOBe9UqDsw7BNtoAEFm0cGx+TLWUU=)
                          3: csD7baynGSjXzQdNEWD9wfKjL8Q.asa (hash: vZ5R9yygf5r5lNLY5z+sK8ZyEPTkQJyvjMUOWkhCz/g=)
                          4: jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl (hash: J686ViNHt4gVbf9R7lsC3niyEqGPYrGCwTgFEHfnUxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:ba:d7:c0:a5:4b:e2:e1:5a:58:a8:61:75:7b:38:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
        Validity
            Not Before: Sep 25 18:01:35 2026 GMT
            Not After : Sep 26 18:01:35 2026 GMT
        Subject: CN=c951e83546b196e0bb9790c5d1a9e4c255c9f4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2d:c2:67:d8:16:8e:1c:01:06:51:ef:23:47:
                    29:ae:33:a2:8a:bb:69:3b:94:2e:72:a4:fb:df:08:
                    35:71:85:3d:91:5e:c9:fb:53:e0:54:ee:ac:45:c7:
                    86:13:0a:ba:35:91:db:19:da:a3:cb:26:02:4b:2c:
                    3b:b9:98:a5:08:a8:13:d4:81:e7:15:12:62:4c:98:
                    06:72:91:44:a9:4b:b7:d8:3b:0a:7a:64:e3:c8:0c:
                    e9:cb:d7:00:f4:a0:61:00:4b:64:1a:1d:64:fd:3a:
                    26:79:bb:cb:37:0b:ee:57:3c:39:00:22:fb:8b:53:
                    cf:57:07:31:31:43:f9:6d:ca:a6:37:a9:ae:70:8c:
                    ce:04:53:33:eb:57:77:a4:bc:9e:22:a1:29:44:e8:
                    43:d8:87:77:08:31:65:e6:ff:3e:af:3c:2c:6d:d6:
                    16:6c:35:6a:92:1d:c0:f8:c0:27:e3:39:c8:31:ef:
                    e5:ad:31:fc:db:f3:aa:26:74:23:b6:02:31:96:09:
                    37:5c:56:c6:0c:94:02:0e:c6:e8:db:29:d1:81:43:
                    2b:79:be:5c:41:7f:6c:30:5d:cd:d2:fa:52:46:ea:
                    37:b6:34:5d:7f:b2:a1:58:d9:c5:ed:dd:53:36:bb:
                    58:6c:4d:4e:b8:4e:df:bf:a3:ef:e0:96:8c:78:7b:
                    ff:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:51:E8:35:46:B1:96:E0:BB:97:90:C5:D1:A9:E4:C2:55:C9:F4:AD
            X509v3 Authority Key Identifier:
                keyid:8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:94:02:75:b3:56:bf:10:ca:31:09:2a:67:94:a4:d2:4a:b9:
         07:7a:8e:b6:32:c3:16:af:5f:4a:76:8e:b0:d4:3b:a1:f4:c6:
         f2:98:ee:41:00:58:59:4c:d6:5e:a8:fc:9d:a9:da:f7:64:1e:
         9c:77:8d:72:b1:51:86:35:bd:b1:c0:ee:49:d0:de:e2:b0:68:
         bd:98:d6:88:98:cb:aa:91:50:59:8f:c8:c5:33:13:91:47:b2:
         bb:b0:ea:56:06:98:64:b8:c2:9f:fe:ee:fc:bf:da:a1:eb:13:
         75:1d:99:7a:21:81:a6:50:01:35:f2:8e:34:20:b0:c8:50:2c:
         62:bf:2e:43:67:1f:a0:cf:b6:75:10:9d:48:73:a4:e9:9f:db:
         9b:df:7f:a6:34:bb:f4:79:c3:0b:e9:e0:35:25:b4:90:55:16:
         4a:4d:2f:1d:e0:37:3e:a3:5c:10:40:70:b9:a4:a9:25:f5:21:
         b3:6d:b3:4a:19:5b:80:e3:b5:e9:22:3b:01:2e:42:bf:16:9d:
         2d:8e:17:c3:03:37:e6:20:3c:39:70:53:f3:12:48:b4:3d:2b:
         82:df:64:20:00:19:25:39:af:6a:2e:7b:06:db:a0:06:88:cf:
         4d:e2:91:0c:f4:77:15:7b:6c:67:13:e3:e7:b7:a6:9b:4b:65:
         ee:df:d0:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZutfApUvi4VpYqGF1eziwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0YjA3ODUyMmRhOWMzMTA2MmI5YzdlZjdmNTE3Mjdl
NzNlNWUwHhcNMjYwOTI1MTgwMTM1WhcNMjYwOTI2MTgwMTM1WjAzMTEwLwYDVQQD
EyhjOTUxZTgzNTQ2YjE5NmUwYmI5NzkwYzVkMWE5ZTRjMjU1YzlmNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki3CZ9gWjhwBBlHvI0cprjOiirtp
O5QucqT73wg1cYU9kV7J+1PgVO6sRceGEwq6NZHbGdqjyyYCSyw7uZilCKgT1IHn
FRJiTJgGcpFEqUu32DsKemTjyAzpy9cA9KBhAEtkGh1k/TomebvLNwvuVzw5ACL7
i1PPVwcxMUP5bcqmN6mucIzOBFMz61d3pLyeIqEpROhD2Id3CDFl5v8+rzwsbdYW
bDVqkh3A+MAn4znIMe/lrTH82/OqJnQjtgIxlgk3XFbGDJQCDsbo2ynRgUMreb5c
QX9sMF3N0vpSRuo3tjRdf7KhWNnF7d1TNrtYbE1OuE7fv6Pv4JaMeHv/gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlR6DVGsZbgu5eQxdGp5MJVyfStMB8GA1UdIwQY
MBaAFI60SweFItqcMQYrnH739Rcn5z5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81NzkyZTAtNmEzYS00NTI3LTkwZmMt
NjdmZjVhMGNlMWE1LzEvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81NzkyZTAtNmEzYS00NTI3LTkwZmMtNjdmZjVhMGNlMWE1
LzEvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZQCdbNW
vxDKMQkqZ5Sk0kq5B3qOtjLDFq9fSnaOsNQ7ofTG8pjuQQBYWUzWXqj8nana92Qe
nHeNcrFRhjW9scDuSdDe4rBovZjWiJjLqpFQWY/IxTMTkUeyu7DqVgaYZLjCn/7u
/L/aoesTdR2ZeiGBplABNfKONCCwyFAsYr8uQ2cfoM+2dRCdSHOk6Z/bm99/pjS7
9HnDC+ngNSW0kFUWSk0vHeA3PqNcEEBwuaSpJfUhs22zShlbgOO16SI7AS5Cvxad
LY4XwwM35iA8OXBT8xJItD0rgt9kIAAZJTmvai57BtugBojPTeKRDPR3FXtsZxPj
57emm0tl7t/QGw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:07:44 2026 by rpki-client