Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft
File:                     Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft (raw, json)
Hash identifier:          PFiBtcgoCFiKRgWKcrdzgCnTw8E5y4g9u6qb58wvVyk=
Subject key identifier:   03:D3:CA:5E:94:D4:77:97:94:13:26:90:9B:52:BF:8D:5A:28:5F:62
Authority key identifier: 26:F9:77:77:9E:90:83:66:DD:24:60:E3:A6:F7:8E:A0:00:22:D8:45
Certificate issuer:       /CN=26f977779e908366dd2460e3a6f78ea00022d845
Certificate serial:       01A0F6E91F855DC945EF836AB2D88E69D91C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jvl3d56Qg2bdJGDjpveOoAAi2EU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft
Manifest number:          0730
Signing time:             Thu 01 Oct 2026 10:01:08 +0000
Manifest this update:     Thu 01 Oct 2026 10:01:08 +0000
Manifest next update:     Fri 02 Oct 2026 10:01:08 +0000
Files and hashes:         1: GRicLr8guTYt3-UUA8RWG0VyhWM.roa (hash: sT2xKcm+4VmWL6SPDZS4tTrOEUyFhJvtIzYNam0gNC8=)
                          2: Jvl3d56Qg2bdJGDjpveOoAAi2EU.crl (hash: 7ha1a9bso3J8LYlTPNitPSQfXTvsDg20DxADoG8kGXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jvl3d56Qg2bdJGDjpveOoAAi2EU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f6:e9:1f:85:5d:c9:45:ef:83:6a:b2:d8:8e:69:d9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f977779e908366dd2460e3a6f78ea00022d845
        Validity
            Not Before: Oct  1 10:01:08 2026 GMT
            Not After : Oct  2 10:01:08 2026 GMT
        Subject: CN=03d3ca5e94d47797941326909b52bf8d5a285f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fc:cb:cd:44:20:c1:eb:0e:a1:25:a3:73:63:
                    dc:64:9f:29:1c:cd:bf:33:da:ed:33:84:32:26:0e:
                    21:f3:e3:9b:e1:04:2f:88:fb:1a:79:45:74:73:b8:
                    9a:d8:ea:71:9d:9d:6a:1c:ae:2f:e1:94:fb:38:ef:
                    9c:f4:db:3c:cc:4b:bd:c9:11:87:c6:b9:1a:4e:28:
                    b1:b3:f2:0f:d5:56:d0:79:40:47:3e:be:28:19:43:
                    c3:8e:79:f1:13:41:d1:28:62:97:f8:1f:72:9c:34:
                    7b:ad:59:0b:46:bc:8f:84:96:96:00:2b:2c:a3:6f:
                    ab:ce:44:fa:16:63:3d:f4:cf:7e:5d:8d:91:d8:44:
                    21:a7:cc:85:96:d2:32:90:e1:df:95:bf:bd:23:8b:
                    36:88:6a:43:5a:4a:98:c4:9e:4f:30:98:47:38:9d:
                    5d:75:91:50:e3:37:1b:fe:29:6a:6c:7d:2e:ae:35:
                    03:40:d5:f2:9a:ca:e8:ed:16:6d:26:6e:f0:de:59:
                    d5:87:c6:c8:ac:52:91:85:0d:31:1b:a6:96:28:2d:
                    80:02:58:d4:ae:78:d1:d7:24:e5:52:1e:b3:2b:06:
                    db:f3:70:1b:d4:08:66:8d:53:4d:6b:00:0b:c1:f5:
                    c1:fc:cc:ea:9c:7e:bc:17:d7:e1:f5:92:ea:69:5e:
                    0a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D3:CA:5E:94:D4:77:97:94:13:26:90:9B:52:BF:8D:5A:28:5F:62
            X509v3 Authority Key Identifier:
                keyid:26:F9:77:77:9E:90:83:66:DD:24:60:E3:A6:F7:8E:A0:00:22:D8:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jvl3d56Qg2bdJGDjpveOoAAi2EU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c5:02:27:91:02:bd:33:61:53:3e:75:bf:a2:9f:5f:38:af:
         d9:c3:c5:5f:b7:b6:bf:1d:e5:db:f5:e6:82:0a:f8:48:ef:89:
         11:1a:df:8b:ce:56:96:f2:03:11:51:2c:6d:ae:f2:72:90:8c:
         56:5c:68:a5:4c:2a:0b:20:58:20:f2:b5:5a:11:8d:4d:4f:3e:
         ed:39:8c:f9:2b:a9:51:b9:d9:e9:a2:77:13:79:03:ed:3a:e4:
         5a:9c:02:53:c6:24:32:77:02:85:15:fd:1a:73:31:68:e5:f6:
         d2:20:a7:f6:e9:86:96:d6:4f:c0:b6:e8:b4:d4:70:10:98:f0:
         f8:7b:3d:36:11:f7:86:02:3d:ec:b8:fa:b6:22:e6:e1:2f:2a:
         eb:34:32:e7:9b:60:37:37:a8:70:b8:c2:93:a1:85:2c:78:e6:
         54:b8:c6:75:d0:13:42:65:32:51:ce:0f:18:10:70:2d:9b:db:
         fa:74:ed:28:94:a9:24:9e:12:a9:08:ad:4c:99:49:34:1d:23:
         62:e5:db:d4:dc:54:ff:f0:fe:45:a7:e8:8e:75:4a:2a:0d:97:
         8c:8c:6f:67:2a:e3:1c:13:ad:27:b0:57:f3:78:f2:db:8b:5e:
         fb:97:47:7b:35:7e:d5:96:c0:53:e4:fc:8a:52:f5:21:ce:51:
         8c:0c:74:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD26R+FXclF74NqstiOadkcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2Zjk3Nzc3OWU5MDgzNjZkZDI0NjBlM2E2Zjc4ZWEwMDAy
MmQ4NDUwHhcNMjYxMDAxMTAwMTA4WhcNMjYxMDAyMTAwMTA4WjAzMTEwLwYDVQQD
EygwM2QzY2E1ZTk0ZDQ3Nzk3OTQxMzI2OTA5YjUyYmY4ZDVhMjg1ZjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvzLzUQgwesOoSWjc2PcZJ8pHM2/
M9rtM4QyJg4h8+Ob4QQviPsaeUV0c7ia2OpxnZ1qHK4v4ZT7OO+c9Ns8zEu9yRGH
xrkaTiixs/IP1VbQeUBHPr4oGUPDjnnxE0HRKGKX+B9ynDR7rVkLRryPhJaWACss
o2+rzkT6FmM99M9+XY2R2EQhp8yFltIykOHflb+9I4s2iGpDWkqYxJ5PMJhHOJ1d
dZFQ4zcb/ilqbH0urjUDQNXymsro7RZtJm7w3lnVh8bIrFKRhQ0xG6aWKC2AAljU
rnjR1yTlUh6zKwbb83Ab1AhmjVNNawALwfXB/MzqnH68F9fh9ZLqaV4KZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPTyl6U1HeXlBMmkJtSv41aKF9iMB8GA1UdIwQY
MBaAFCb5d3eekINm3SRg46b3jqAAIthFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZsM2Q1NlFnMmJkSkdEanB2ZU9vQUFpMkVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC84MGUzYTMtMjExZS00MTdkLTgzZGYt
ZmFjMWZlZjRkMGY3LzEvSnZsM2Q1NlFnMmJkSkdEanB2ZU9vQUFpMkVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC84MGUzYTMtMjExZS00MTdkLTgzZGYtZmFjMWZlZjRkMGY3
LzEvSnZsM2Q1NlFnMmJkSkdEanB2ZU9vQUFpMkVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcUCJ5EC
vTNhUz51v6KfXziv2cPFX7e2vx3l2/Xmggr4SO+JERrfi85WlvIDEVEsba7ycpCM
VlxopUwqCyBYIPK1WhGNTU8+7TmM+SupUbnZ6aJ3E3kD7TrkWpwCU8YkMncChRX9
GnMxaOX20iCn9umGltZPwLbotNRwEJjw+Hs9NhH3hgI97Lj6tiLm4S8q6zQy55tg
NzeocLjCk6GFLHjmVLjGddATQmUyUc4PGBBwLZvb+nTtKJSpJJ4SqQitTJlJNB0j
YuXb1NxU//D+RafojnVKKg2XjIxvZyrjHBOtJ7BX83jy24te+5dHezV+1ZbAU+T8
ilL1Ic5RjAx0CQ==
-----END CERTIFICATE-----
Generated at Thu Oct 1 17:32:32 2026 by rpki-client