Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
File:                     jxVuaflETCsGaHJWCFtqek6Yh_Y.mft (raw, json)
Hash identifier:          zLyEXNOE7XU5y29vXFH3oLN5rUsRLC1FdY4Ii/MRRMw=
Subject key identifier:   3F:71:30:07:EE:5F:BC:34:90:D0:2F:1D:BF:04:32:3B:C4:5E:5A:B4
Authority key identifier: 8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
Certificate issuer:       /CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Certificate serial:       01A0EEC23760C3C31DB71D195D0876B8C1AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
Manifest number:          0E26
Signing time:             Tue 29 Sep 2026 20:01:40 +0000
Manifest this update:     Tue 29 Sep 2026 20:01:40 +0000
Manifest next update:     Wed 30 Sep 2026 20:01:40 +0000
Files and hashes:         1: IGqxlIKv9pQSduOZbyMGfJbT9RI.roa (hash: YZCvKKKTyHwkIul63DB5RjCHdqSG34xePQX/iOEjVC8=)
                          2: jxVuaflETCsGaHJWCFtqek6Yh_Y.crl (hash: ztaG8+8a6NVsrkQQS4X6IG9RG1H7bEfC1Oj5ewSTbzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ee:c2:37:60:c3:c3:1d:b7:1d:19:5d:08:76:b8:c1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
        Validity
            Not Before: Sep 29 20:01:40 2026 GMT
            Not After : Sep 30 20:01:40 2026 GMT
        Subject: CN=3f713007ee5fbc3490d02f1dbf04323bc45e5ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:2e:94:47:24:6e:fc:06:4a:9b:20:95:fb:
                    2a:56:24:41:b8:9f:99:57:b7:e9:31:a3:14:bd:ba:
                    d6:0e:21:e2:a2:99:ee:10:f5:9f:f5:cf:86:5c:ae:
                    4c:8a:5c:8a:aa:1c:6b:49:a2:ee:9f:83:b3:99:b7:
                    dc:ad:f3:0c:a5:3d:d1:a0:a7:5a:1f:bb:04:1f:61:
                    1f:3e:fb:45:33:a0:1b:bc:4a:7c:6b:e7:7b:a5:43:
                    16:c4:d2:3a:10:93:26:09:98:8f:24:80:b1:a1:b3:
                    f9:60:70:19:b6:71:89:64:f8:ae:d0:8b:9a:c9:1e:
                    c0:28:da:58:81:31:a2:ec:21:59:47:77:9a:da:7b:
                    ca:31:21:d2:57:6a:de:ca:cb:8b:39:44:45:e8:1b:
                    eb:4b:d2:f4:c0:cf:e4:da:1c:d8:c5:37:79:05:33:
                    44:e9:d9:64:f0:1f:84:f9:6e:26:a8:ba:40:c4:0d:
                    e3:7d:0a:19:6e:46:d6:f7:9d:8d:d8:2a:5b:84:6c:
                    d8:d3:13:30:6e:a9:81:45:ae:04:6e:6b:ac:18:60:
                    9a:31:06:12:e1:0d:ff:8b:ee:2b:8b:c3:1d:aa:f4:
                    42:08:5a:dc:00:96:db:9c:d5:61:97:fa:0c:8f:51:
                    d5:cb:98:d8:ce:0f:4d:41:33:c3:f8:83:4b:5d:30:
                    a7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:71:30:07:EE:5F:BC:34:90:D0:2F:1D:BF:04:32:3B:C4:5E:5A:B4
            X509v3 Authority Key Identifier:
                keyid:8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:8d:3e:4d:27:d0:be:75:8e:f8:8a:52:f3:c0:47:ca:08:1b:
         dd:50:2e:c8:35:e9:fe:3f:25:c7:97:1f:ea:c9:de:ce:c5:36:
         a6:9f:77:93:44:44:b8:b2:89:67:28:97:60:1f:95:a8:07:2e:
         30:5a:49:61:ce:a7:97:20:8e:ff:dc:2c:ba:09:27:c9:3e:06:
         bf:f8:9b:c3:88:35:0a:d3:ab:db:93:02:4e:ea:62:fe:22:e5:
         e5:44:01:46:64:bf:5c:68:22:d6:37:8a:a0:02:50:b0:e4:26:
         39:9f:62:28:9d:a1:86:83:6a:b4:7e:52:07:3d:94:e0:e6:18:
         40:6b:4b:b8:62:20:d3:0b:71:90:60:15:cd:a7:56:f6:52:ef:
         91:04:34:76:14:b9:c5:05:50:65:b5:28:7e:46:ba:38:85:ba:
         34:f9:63:70:75:f3:73:b4:62:56:7a:15:06:1e:bf:bd:e6:2c:
         7f:f5:0b:47:4d:f9:98:3e:76:fa:ac:e0:de:dd:68:ad:6c:d5:
         88:48:3d:a7:7d:cd:1a:62:6a:6b:27:57:e0:56:e5:12:1a:bc:
         7f:09:26:59:d3:df:82:35:dc:f0:7b:5b:71:34:51:29:ce:29:
         e3:57:68:90:6f:15:92:86:fe:fa:44:da:b8:2b:09:5d:90:b9:
         77:7d:1d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:58:17 2026 by rpki-client