Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
File:                     j06-YGSqsD8mniKBWs1JSab7cmU.mft (raw, json)
Hash identifier:          DbqOVxV3smFGLtEwoqkr/Ych8SgTcsIc06mGzW6LUbM=
Subject key identifier:   3A:DD:6E:12:54:43:FA:F9:08:6C:2B:50:4D:A4:B2:AA:46:76:B7:48
Authority key identifier: 8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
Certificate issuer:       /CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Certificate serial:       01A0D3EF29826634F4E21ADC3B3384FBEBFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
Manifest number:          1A6A
Signing time:             Thu 24 Sep 2026 15:01:01 +0000
Manifest this update:     Thu 24 Sep 2026 15:01:01 +0000
Manifest next update:     Fri 25 Sep 2026 15:01:01 +0000
Files and hashes:         1: W3uvblkeLxKiQmHFvyNEpAVu6aA.roa (hash: 0luJ58suj1wqyqBjH68N/sdcZED51ZMRtFlcISkt8r8=)
                          2: j06-YGSqsD8mniKBWs1JSab7cmU.crl (hash: rJdYtiTBAnEqBXhA/Da2OTrQDH72RyZAm3VKiIP1Yg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:ef:29:82:66:34:f4:e2:1a:dc:3b:33:84:fb:eb:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
        Validity
            Not Before: Sep 24 15:01:01 2026 GMT
            Not After : Sep 25 15:01:01 2026 GMT
        Subject: CN=3add6e125443faf9086c2b504da4b2aa4676b748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:8e:fd:6f:7e:4f:c2:54:2e:c9:4b:c7:ec:
                    ae:44:26:0e:6a:88:56:5e:24:96:1a:1d:0f:44:d6:
                    9b:e2:12:aa:9d:18:f7:a8:15:4a:93:51:6c:3c:ae:
                    39:47:69:24:d9:03:62:b6:53:d2:63:08:b1:9c:e5:
                    e7:cc:20:fa:04:6b:f6:ea:b4:1c:d8:d8:86:08:c7:
                    bd:96:8a:b8:76:c9:4d:18:e7:e2:40:0a:fb:03:56:
                    63:d9:b8:34:88:0e:26:39:bc:75:4c:ab:0f:98:ed:
                    c9:13:d8:1b:14:a1:25:1a:55:10:cb:c2:74:e6:76:
                    0e:9b:2d:bf:82:9a:e6:da:a0:8d:a4:13:11:0b:16:
                    bc:86:7b:56:58:fa:5c:6d:b5:72:43:c1:3a:28:cd:
                    ad:8c:4e:6d:3e:f6:aa:30:9e:ea:54:29:71:0c:03:
                    22:63:54:9b:5b:43:b1:fc:f7:57:97:f0:06:c8:8b:
                    6f:66:17:35:39:60:9b:39:e7:20:86:97:d3:d4:1e:
                    6e:23:f2:ca:29:df:78:7d:3f:3a:fe:6b:6b:4c:19:
                    39:f1:f2:16:3b:dd:e4:d3:06:78:49:e2:64:4c:52:
                    a7:99:22:ee:07:ea:9e:d1:42:be:fc:5b:35:c9:7f:
                    46:0e:14:f8:42:e8:32:b0:8d:62:71:37:c3:ee:a1:
                    67:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DD:6E:12:54:43:FA:F9:08:6C:2B:50:4D:A4:B2:AA:46:76:B7:48
            X509v3 Authority Key Identifier:
                keyid:8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:cc:aa:80:8b:5a:83:9d:c6:8f:e6:c2:7d:27:80:f6:b1:53:
         b9:f4:9c:50:33:ee:65:ea:00:60:c6:10:da:12:15:4c:27:d1:
         fe:66:7b:0f:84:db:92:45:8d:4e:0f:9b:34:48:ff:d6:ab:e4:
         02:a9:55:39:a3:6d:ce:87:38:22:3e:a2:db:7b:80:d3:30:59:
         5e:23:8d:09:3d:b2:a8:a8:78:18:90:21:60:49:d7:1d:42:7b:
         f1:e7:72:46:a8:cb:f8:d7:4c:b9:79:5a:6f:0e:83:ad:b2:13:
         eb:e5:f7:52:f9:5d:76:04:54:dc:17:78:22:dc:94:04:7a:0c:
         79:6b:3f:16:9e:3c:06:1a:25:77:9e:ba:52:32:7b:0a:d0:35:
         13:19:12:a5:f7:84:98:d2:78:bc:11:dc:d7:64:d2:6f:4a:3a:
         2a:e2:2b:fa:b5:d0:a7:04:9a:fa:e0:5d:d2:0f:5c:e1:f8:58:
         0d:81:9f:4a:94:f2:03:26:05:ee:21:fa:7f:2f:02:39:3d:e2:
         f1:a4:36:2e:e4:60:4e:6b:32:d6:47:d8:90:87:e4:0f:42:16:
         d7:1c:9d:7a:c8:2c:66:17:f6:81:64:86:97:99:b2:a9:dc:fb:
         bc:a7:0f:a4:63:a1:77:ed:b5:4d:08:86:2e:e4:fa:62:7a:03:
         ad:dd:9e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:26:10 2026 by rpki-client