Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
File:                     raJar-Ophw6VJK-gJlmH7VpaTaM.mft (raw, json)
Hash identifier:          yieV9ijvT9BnRU13MnEa3rUoryZP+Vwk6YJnBMTbjZU=
Subject key identifier:   A4:B7:6A:73:DD:6E:5D:DF:EA:DE:DC:A3:E1:56:22:34:34:8D:69:73
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Certificate issuer:       /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial:       01A1065CAC90EE0269F43C1AE27673F66EA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
Manifest number:          1ACC
Signing time:             Sun 04 Oct 2026 10:01:39 +0000
Manifest this update:     Sun 04 Oct 2026 10:01:39 +0000
Manifest next update:     Mon 05 Oct 2026 10:01:39 +0000
Files and hashes:         1: 026sZ3BE6bcDtWjexrpGViYYmn4.roa (hash: 8jjGMUOjUwdyrPafoVal8W6B+wC2kikoQs9YW0zoJJs=)
                          2: fMF9qnlP4WB5LHh5V8LwNwc9f4Q.roa (hash: fmzVayjcNIPJoq0/A+Ybi5cj066xRm3fDk6Fawjmxcg=)
                          3: hMCrIUKHXGHOtkHZ8Y6eI3UIeCw.roa (hash: rMGJFYfVplpRpoCAdt4v/1BCKdLOOcSLzsmFWHhqGnQ=)
                          4: lPiHeORLKEKfujHMYKmMKgjplak.roa (hash: jBAhlOJ7x1dzG58s1VItmsDLFO+pFQTxwtJmgsn2S2o=)
                          5: mS8tnbA8YK7l-MbOUY5q-8ZOThg.roa (hash: eZEcq7z1/SIiSQ1+v1fAeWHe9SlknoEdloBfTp8Rfac=)
                          6: q0e2mOxIUzAfYPRIbushYUqYPEk.roa (hash: mjQc3SMPF6rvuC90lgX5o3Yun+cCb8geikGE6fcJ2cw=)
                          7: qlCniZKRSW19hMt5vi2uYj3QmZc.roa (hash: sEr/46aBEQr8R7V1CQ3g6SAcCDYBi1Em54PpDngn9z4=)
                          8: raJar-Ophw6VJK-gJlmH7VpaTaM.crl (hash: CYqRSXbF5cV5NQ18xrX1hX+638+aN7nBboTLvIA3ZZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 10:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:5c:ac:90:ee:02:69:f4:3c:1a:e2:76:73:f6:6e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
        Validity
            Not Before: Oct  4 10:01:39 2026 GMT
            Not After : Oct  5 10:01:39 2026 GMT
        Subject: CN=a4b76a73dd6e5ddfeadedca3e1562234348d6973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:19:28:74:aa:6f:1f:9d:61:d2:83:34:7a:e9:
                    30:8f:15:c3:3e:92:58:c5:14:ed:90:05:44:92:c0:
                    88:f6:41:9d:d0:04:31:05:54:e2:6f:83:7f:92:b2:
                    a3:e9:83:76:b9:99:a6:2c:4d:5f:17:21:1e:e1:db:
                    b3:de:49:49:b2:ed:54:2c:0d:31:83:a3:8c:0d:d1:
                    e3:a6:1e:60:78:4c:c5:ab:e8:20:56:8b:2f:4b:41:
                    9c:a2:16:f0:56:ab:bd:cb:6e:bd:a6:51:30:7d:b0:
                    a8:f3:9a:f0:95:72:42:b5:a7:ec:5f:cf:99:5e:ab:
                    ef:7c:59:9d:de:d5:1a:56:50:66:4d:c2:0b:20:03:
                    a6:5b:1b:72:a6:eb:10:ce:c4:7e:76:fe:52:44:a5:
                    2d:9c:78:52:b1:60:44:b6:60:af:6c:ea:7c:b3:1e:
                    2f:65:55:c2:d2:99:33:53:be:e3:d5:cf:05:52:d6:
                    c3:3c:b7:87:5f:b9:de:00:8b:af:33:b1:d1:a1:df:
                    7e:a8:fc:78:29:8d:48:1f:44:05:2e:af:30:f3:02:
                    a4:cf:77:ec:df:79:01:87:53:19:64:6f:6c:91:87:
                    1a:23:f5:bb:d7:19:52:58:49:32:56:34:51:0d:bb:
                    c2:43:d4:17:db:fc:8d:38:4c:e2:f3:b0:28:6e:bd:
                    49:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B7:6A:73:DD:6E:5D:DF:EA:DE:DC:A3:E1:56:22:34:34:8D:69:73
            X509v3 Authority Key Identifier:
                keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:27:ff:4f:fe:3f:97:f0:1f:9e:63:93:97:13:4b:aa:5b:91:
         94:5d:c7:b0:ec:f5:c0:28:0c:bc:6d:f7:f5:a2:62:47:40:f6:
         e3:31:4d:fe:97:75:34:ec:24:62:bb:46:0b:a4:b6:72:0d:f6:
         a2:3d:f9:2d:b7:c5:88:d2:3a:a8:ce:d9:14:ea:fb:a1:e3:70:
         55:11:21:b9:78:e6:5c:56:ec:16:8b:27:f8:28:4a:61:77:0e:
         96:6b:89:cc:c4:ff:ac:14:21:c8:42:2b:7f:7f:ba:e5:e7:2a:
         15:89:51:e0:25:1b:14:3b:36:c2:11:c0:3c:8c:91:c0:94:35:
         8b:96:12:87:cf:29:67:e4:52:da:b0:d3:76:bb:c9:7c:fb:b9:
         26:18:85:63:d6:a8:9e:88:5e:31:a2:c7:51:45:93:0f:fa:99:
         0c:0c:8a:76:06:0e:15:78:df:a7:ae:30:0b:45:02:bc:49:f9:
         32:f1:e7:a5:5a:a0:52:b2:8b:4b:3b:0a:4f:f2:df:c5:e5:db:
         84:ff:a0:41:ba:8a:e3:05:a1:0d:3c:68:ad:92:59:0c:61:ed:
         65:50:0e:9c:59:b4:cc:fe:d3:3e:4d:21:c5:4d:f2:3b:f6:4f:
         99:4d:ba:be:95:3b:67:a4:27:d0:e9:13:e0:f2:a9:01:60:fc:
         26:98:46:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:36:01 2026 by rpki-client