Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
File:                     jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft (raw, json)
Hash identifier:          QKbnkPOURAxk1+FNxh17mrWcx3bUi4vg5CJwv8SxoeU=
Subject key identifier:   5F:4C:C8:24:D4:3F:5E:64:BD:51:11:A6:A2:68:42:66:A5:EE:EA:AD
Authority key identifier: 8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E
Certificate issuer:       /CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
Certificate serial:       01A0D012C37294041EBFE5B1FB0C7AA1BBCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
Manifest number:          033A
Signing time:             Wed 23 Sep 2026 21:01:25 +0000
Manifest this update:     Wed 23 Sep 2026 21:01:25 +0000
Manifest next update:     Thu 24 Sep 2026 21:01:25 +0000
Files and hashes:         1: 8sncQGN_dofXozDeejTadUl8wRs.roa (hash: SW1+/cf3HtR0IB+S11zpo2LhAnvKL4afLlJ8vSGUHZ4=)
                          2: UtXzH5Oi0AulZFx0l8qig6QKaPg.roa (hash: 1qkvw5zb1r9z9CjOBe9UqDsw7BNtoAEFm0cGx+TLWUU=)
                          3: csD7baynGSjXzQdNEWD9wfKjL8Q.asa (hash: vZ5R9yygf5r5lNLY5z+sK8ZyEPTkQJyvjMUOWkhCz/g=)
                          4: jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl (hash: OZu2Zqix/t7EMImcQtmeUGV0oIGMwpBaoS6Z9/V1waY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:c3:72:94:04:1e:bf:e5:b1:fb:0c:7a:a1:bb:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
        Validity
            Not Before: Sep 23 21:01:25 2026 GMT
            Not After : Sep 24 21:01:25 2026 GMT
        Subject: CN=5f4cc824d43f5e64bd5111a6a2684266a5eeeaad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8b:2d:15:b2:e6:bf:24:61:6f:ff:08:a2:bf:
                    0a:d3:a4:b5:a6:4a:34:f7:f2:0c:36:06:0c:a2:c3:
                    11:1a:80:66:7d:6d:04:d2:7e:9c:7f:d8:22:f6:a1:
                    d2:21:d2:95:15:45:8e:3d:c8:90:31:5f:07:82:3c:
                    2b:cc:21:92:c0:62:ac:11:af:54:fb:ff:c3:43:89:
                    ef:59:9c:ee:b6:86:b0:4b:0d:a7:a1:c3:dd:aa:93:
                    85:5e:48:fd:7a:6d:48:8f:f5:78:c6:ee:74:48:a7:
                    7d:d2:0b:25:f4:43:03:79:e9:fa:b8:7a:39:12:17:
                    f9:cd:2e:cd:c9:9a:fd:a8:2d:c4:df:97:b9:3f:6a:
                    d2:88:70:ba:5e:33:12:dd:cb:c0:f9:dd:47:8c:5e:
                    93:67:0d:bb:83:27:cb:06:46:aa:55:48:11:f8:73:
                    3f:3e:55:ea:86:b4:f9:67:29:02:a9:d9:82:91:63:
                    68:58:a4:78:8f:27:c0:de:06:46:cb:c9:cb:4f:d5:
                    7c:9d:92:c5:8c:9b:b7:a6:a1:c0:12:73:a4:e8:3e:
                    00:40:3d:80:93:0e:84:6a:92:f0:c3:43:dd:20:e7:
                    11:94:aa:5a:43:9e:d2:3e:2e:df:54:e8:76:8c:58:
                    a0:a6:f4:c9:8f:c6:97:47:23:e3:19:2b:d3:43:e8:
                    68:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4C:C8:24:D4:3F:5E:64:BD:51:11:A6:A2:68:42:66:A5:EE:EA:AD
            X509v3 Authority Key Identifier:
                keyid:8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f5:18:a3:23:5e:54:b2:de:50:72:98:64:8f:6a:42:bb:90:
         6a:30:e6:19:40:27:ff:2a:60:8c:34:24:d9:49:3a:1a:ff:d8:
         f9:8e:ed:f9:fc:37:ff:25:94:cd:15:84:56:48:7c:88:35:48:
         d3:68:f0:2c:f7:c7:bd:47:d0:51:5c:73:36:a2:b2:95:31:5a:
         4e:04:02:48:e9:ed:25:48:da:d8:1c:76:9f:ef:a4:3b:d4:99:
         33:38:78:cd:4b:66:69:ef:fe:33:b4:28:74:25:af:7d:cd:4f:
         95:e9:94:7c:36:2b:84:1c:26:08:34:18:ca:dd:5b:e3:96:c8:
         e8:23:9c:8a:a7:15:7c:ad:d9:66:44:c0:1d:73:09:48:92:43:
         bd:ee:b5:a6:5a:b0:1a:c1:f6:d3:2a:2d:c3:29:8c:3b:d0:a4:
         ea:98:f2:06:29:46:c3:61:3d:76:b3:a5:ce:3b:c6:90:59:23:
         ad:c1:9c:25:4b:d9:40:b8:1a:69:22:cd:bf:cd:ec:f6:df:f9:
         76:a3:30:1a:e5:a8:47:11:52:aa:c2:38:9c:2f:6b:a3:3c:dd:
         8e:e1:59:3b:6a:44:70:3e:81:59:4d:d5:d2:82:04:ed:96:3c:
         30:b5:a8:b5:22:30:fd:08:d5:30:f2:24:d0:91:80:24:25:80:
         74:1e:49:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:23:05 2026 by rpki-client