Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
File:                     jY9-tNJUj5zL88s45wKhkMEXQvU.mft (raw, json)
Hash identifier:          K7gLIw0NC99LP09cyXKf83kqxmCdhcaliIZXaXM/Tdk=
Subject key identifier:   29:CA:33:CA:8F:5B:44:FB:47:90:6E:E9:ED:4D:73:CD:5F:50:30:6C
Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
Certificate issuer:       /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Certificate serial:       01A0FF7EB97786F0F1A888A749418095EE7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
Manifest number:          1A8E
Signing time:             Sat 03 Oct 2026 02:01:30 +0000
Manifest this update:     Sat 03 Oct 2026 02:01:30 +0000
Manifest next update:     Sun 04 Oct 2026 02:01:30 +0000
Files and hashes:         1: BjDmUvjz2g0wnSp3u9Zwel-a2_4.asa (hash: naAJfE5EHss/EHa5WATU6Y51VhODzzTsRCijcIt3VT0=)
                          2: LzytmBipoUeh75Q4k5RM_4cTxvI.asa (hash: c79lN03JC1WXFharL3B4h2BCr/rBcKCY884Q/IuCxJg=)
                          3: jY9-tNJUj5zL88s45wKhkMEXQvU.crl (hash: a5uHcFvR78Bfhav3tbHjziRYPY8nCF8cvft/AsYkYb8=)
                          4: kzE8V2n8t4VkwijQkuHTrLSYg_M.roa (hash: vDJXzEhACcVJt1Zhg/9zbLQmv+eSZCD2dXjNBm17jSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ff:7e:b9:77:86:f0:f1:a8:88:a7:49:41:80:95:ee:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
        Validity
            Not Before: Oct  3 02:01:30 2026 GMT
            Not After : Oct  4 02:01:30 2026 GMT
        Subject: CN=29ca33ca8f5b44fb47906ee9ed4d73cd5f50306c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6a:b8:d6:fd:ed:d1:0d:44:ac:8e:18:37:a4:
                    4b:00:d4:1a:2f:fc:08:50:ae:9b:0f:e8:38:84:b8:
                    ec:0b:24:45:a5:0c:1d:ab:ee:b2:e3:82:38:f0:45:
                    9f:22:26:1d:f4:14:83:bd:7c:4d:81:cd:b3:2d:31:
                    ee:7f:60:19:cb:fb:9b:06:96:50:3d:5b:5d:bc:43:
                    1b:f5:ff:8a:62:ab:2a:dc:a8:09:50:1c:fd:53:75:
                    bc:d2:85:24:4e:ee:f9:66:25:45:4d:ff:65:77:06:
                    db:8a:3a:b1:cd:f9:a5:00:c0:62:7f:bd:63:94:d7:
                    a8:fa:0c:b2:b3:af:60:79:09:ce:23:63:73:9c:ea:
                    b2:f0:2c:b8:9e:a8:08:12:a4:87:ca:9c:ac:1e:f8:
                    6b:ab:f7:1d:fa:44:a9:c3:3c:0d:e6:2e:c9:d2:23:
                    cd:f9:e9:8e:2a:e4:0e:62:d6:47:a1:35:f4:10:35:
                    d6:94:a2:5c:1c:32:76:fb:a1:6e:ea:fe:d5:7a:cb:
                    23:39:b6:c6:73:5e:85:f0:2a:6f:3b:e3:21:c7:eb:
                    9d:c8:f5:4b:0d:be:03:26:9d:75:4b:32:39:3b:ed:
                    a9:41:1d:fe:38:eb:c8:1d:b0:63:29:f0:8c:1d:e8:
                    dc:58:2c:5a:21:94:9b:81:47:62:2c:57:cc:77:6d:
                    f4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CA:33:CA:8F:5B:44:FB:47:90:6E:E9:ED:4D:73:CD:5F:50:30:6C
            X509v3 Authority Key Identifier:
                keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:8e:55:78:b3:43:cb:d3:13:bf:7f:76:8c:ff:d7:78:2e:58:
         51:af:49:66:27:a2:92:00:0d:bc:b3:b5:5e:15:2b:46:76:08:
         74:5b:c0:26:27:aa:57:d7:92:d6:04:2a:ad:62:41:69:4c:d8:
         83:a1:73:45:78:00:2f:d0:22:ff:b8:ec:39:76:97:a5:e8:a4:
         a6:51:02:0c:d9:5f:67:4f:4a:9d:a7:1b:d0:25:6f:44:19:04:
         3e:a7:80:71:19:9c:49:9d:f9:9d:f9:75:6a:75:9b:72:e3:f7:
         ab:e0:ba:36:28:bb:73:39:7c:3e:12:92:af:42:7a:ac:02:aa:
         c8:5a:19:e2:69:3c:c6:0a:ce:ea:2f:88:17:39:bb:c2:d6:9f:
         2d:fd:48:b2:b9:37:c3:27:9f:2b:2a:e9:96:f2:98:61:5d:63:
         a9:20:9c:d6:63:d4:df:99:ae:4f:4a:78:88:31:33:03:9e:40:
         d8:fb:f1:2c:6e:d3:9b:71:d8:b9:ea:d7:35:5b:78:c0:41:08:
         48:e7:84:01:4b:a6:2f:f1:ba:62:9c:02:b9:7a:62:f0:a7:7c:
         46:fe:d5:ef:a7:33:14:13:01:9a:df:f7:23:ef:cd:cd:0f:6f:
         85:c5:e0:0a:01:ce:19:6c:b7:7a:59:fa:7c:39:00:bd:a8:aa:
         73:1f:c4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:14:02 2026 by rpki-client