Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
File:                     j06-YGSqsD8mniKBWs1JSab7cmU.mft (raw, json)
Hash identifier:          LB2I2xoIW6XLTd7nzQkv1K+hNn4e1diIgi31mqBc3xw=
Subject key identifier:   13:D8:BE:6C:15:D3:1C:E9:46:27:FD:11:69:12:A3:CE:C6:56:F8:CE
Authority key identifier: 8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
Certificate issuer:       /CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Certificate serial:       01A0E3622E73DADCB7137F9BD8D90E18F1BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
Manifest number:          1A72
Signing time:             Sun 27 Sep 2026 15:00:57 +0000
Manifest this update:     Sun 27 Sep 2026 15:00:57 +0000
Manifest next update:     Mon 28 Sep 2026 15:00:57 +0000
Files and hashes:         1: W3uvblkeLxKiQmHFvyNEpAVu6aA.roa (hash: 0luJ58suj1wqyqBjH68N/sdcZED51ZMRtFlcISkt8r8=)
                          2: j06-YGSqsD8mniKBWs1JSab7cmU.crl (hash: SqPsgKx8IAZ7glle1ukyFZFJ6vSUWRRR6ER6flRuRTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:62:2e:73:da:dc:b7:13:7f:9b:d8:d9:0e:18:f1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
        Validity
            Not Before: Sep 27 15:00:57 2026 GMT
            Not After : Sep 28 15:00:57 2026 GMT
        Subject: CN=13d8be6c15d31ce94627fd116912a3cec656f8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b7:59:79:fb:d6:4d:70:e1:5f:ea:7b:79:c1:
                    58:29:12:99:3b:22:1d:e2:52:8e:d1:97:1d:79:9d:
                    aa:27:50:d3:05:64:9c:c8:80:3b:a6:e4:af:19:4e:
                    ac:a6:b0:26:5b:0f:2e:02:a1:5b:9c:b6:4c:b0:e6:
                    b9:ce:fc:ad:08:ab:0f:bf:6c:fc:4f:00:aa:b7:bd:
                    ee:e1:8a:5d:c5:86:41:9f:25:1b:33:df:b7:8b:1b:
                    71:37:ad:c6:49:83:83:d9:7e:57:29:fc:dc:d2:66:
                    59:be:cc:74:2a:3c:85:8f:4c:71:45:0a:39:de:87:
                    d9:f2:13:ad:41:8d:02:5b:c9:2b:7f:4a:98:0e:36:
                    32:ec:9a:26:2d:fa:32:d0:39:5f:a2:ed:3e:f4:ce:
                    06:23:63:86:35:c7:03:18:9d:b7:a1:ec:4d:bb:50:
                    8b:8e:dd:2b:de:a3:ec:d6:d3:31:f6:20:fe:17:56:
                    8d:e9:34:20:7c:40:a8:b2:7c:8d:41:92:43:b4:28:
                    84:ba:9c:02:85:da:d2:ad:28:13:e9:e6:d6:8c:00:
                    68:07:ba:87:64:5a:24:83:b3:25:4b:ff:b4:8a:29:
                    6e:07:e0:1b:83:9b:5c:e7:4d:7c:e7:06:42:0c:e4:
                    f7:cd:e2:3e:f3:14:18:3b:97:1a:8a:80:ab:e7:b3:
                    06:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D8:BE:6C:15:D3:1C:E9:46:27:FD:11:69:12:A3:CE:C6:56:F8:CE
            X509v3 Authority Key Identifier:
                keyid:8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:26:db:8a:95:77:df:8b:cd:9f:ec:df:29:66:17:fa:63:37:
         8b:20:ef:0d:aa:6f:84:e6:25:83:88:8c:e7:35:58:8a:00:c5:
         32:30:ec:ec:09:84:5f:58:5d:1d:f6:c4:3a:16:98:81:53:61:
         d9:ea:d4:ac:21:2d:34:52:fe:9f:fd:06:30:68:7d:f8:03:2f:
         8e:67:7f:9b:cd:33:ce:e1:bb:00:f3:6d:86:2d:99:d1:70:2c:
         5b:83:36:64:4d:b5:7f:5f:e8:dd:14:1c:df:86:f4:06:2f:b1:
         65:7e:b2:bf:54:72:e3:cd:62:99:d5:8c:8a:86:fe:6e:d1:71:
         09:47:97:4b:75:d8:8e:79:8a:de:74:23:f8:57:65:e6:5a:9e:
         5e:f2:6e:6e:c8:e1:38:28:58:dc:2b:9b:07:7e:83:64:76:be:
         ed:27:03:19:61:2d:a1:ba:0a:6e:af:87:86:67:0a:3c:a7:77:
         ce:1e:37:d7:3f:02:53:57:6d:b1:ee:b1:37:05:f0:85:02:89:
         04:cb:e8:77:18:26:14:4d:58:3e:a8:ab:7d:5a:13:12:dc:0f:
         3b:69:db:a0:b7:16:aa:26:5a:4b:16:67:60:ad:02:a4:6b:92:
         2a:69:fd:04:77:7f:ad:80:a6:a4:c1:55:8b:7e:8a:2c:1f:cd:
         67:6a:5e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:46:48 2026 by rpki-client