Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
File:                     J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft (raw, json)
Hash identifier:          VAV0nwj1VyrVGvB4EpCKwTFVG7h5yYdaO8sxoCwNctc=
Subject key identifier:   9B:49:43:0C:F5:26:31:54:97:E1:D2:8F:D6:AF:8B:F6:13:DD:0A:98
Authority key identifier: 27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
Certificate issuer:       /CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Certificate serial:       01A0CD7F2D7E81D308BB440B1096414A7329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
Manifest number:          1A6C
Signing time:             Wed 23 Sep 2026 09:00:59 +0000
Manifest this update:     Wed 23 Sep 2026 09:00:59 +0000
Manifest next update:     Thu 24 Sep 2026 09:00:59 +0000
Files and hashes:         1: 59N_FbtPNjS-X8qEGjwRBx9gj6U.roa (hash: zqciCASRz6Ow8h9qV27zLicMITUO/QE2EldM0xQqA/0=)
                          2: J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl (hash: u69oHjFMu1GVVpWF2vKQ7uJgmILYBdlKNgDsX851U1A=)
                          3: L_d7sC1R-mbLzW9DrMzKNe6UOAg.roa (hash: YuFXusfcI5nio5zXfyLJHyv9wkoAQsqQQp2+ktVOe60=)
                          4: hSA37ReSJwBifq2FS6j7Qro1BSg.roa (hash: JWuo0foQtCUfW16LX8x62PTXkA++1LDR398enjd4AHQ=)
                          5: rKVY0_fItLIiVj9V8mJDTPynXcE.roa (hash: IfTS67z75TmPMIXk2VJTyDhp40a+K2K1bHBTbVIL3Og=)
                          6: y-G3OrD2kALtXwb7pySuVjpgNR0.roa (hash: 06asegLBB4yirxCTpyjUKg3V9v5ZpUPrBpVjVtVSxmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:7f:2d:7e:81:d3:08:bb:44:0b:10:96:41:4a:73:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
        Validity
            Not Before: Sep 23 09:00:59 2026 GMT
            Not After : Sep 24 09:00:59 2026 GMT
        Subject: CN=9b49430cf526315497e1d28fd6af8bf613dd0a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:59:5d:21:cf:b5:a2:a0:a7:4e:98:ab:fb:
                    7c:ce:a6:28:d5:ae:15:8f:48:0e:d8:43:a3:c5:b2:
                    14:18:85:66:be:b8:06:f3:74:47:2f:67:e0:86:28:
                    a4:6c:5f:2d:4f:49:94:18:77:9c:91:e0:a0:35:cb:
                    8b:62:16:ed:0a:30:9a:22:25:8b:b2:c1:f7:7f:e4:
                    24:67:05:ed:2e:f2:c9:b1:2f:a3:5c:78:d9:d8:d9:
                    f1:b6:98:a5:17:54:eb:e6:50:60:ec:c0:1d:a3:52:
                    36:43:13:88:bc:37:b2:f8:58:5d:a8:88:4a:68:4c:
                    89:11:25:08:c2:54:0f:0f:03:06:b4:05:92:bd:32:
                    1b:97:2f:2b:78:f8:62:d8:e7:50:a7:33:b2:31:2b:
                    5c:83:7a:b2:ce:b7:9d:4b:81:f6:7f:7a:d8:ea:fe:
                    48:2c:0e:0a:d1:4e:c1:5b:a9:5e:46:14:61:37:06:
                    a1:4a:f6:b5:90:b9:1d:a9:28:d5:7b:01:ef:a2:42:
                    0f:71:8c:62:35:6c:c0:fd:ae:17:03:4c:40:43:c3:
                    81:35:fd:30:86:36:01:a4:73:ef:b4:d2:bc:43:16:
                    03:04:a8:d7:2e:e5:e1:23:e2:11:83:57:31:48:d7:
                    03:ed:06:a9:28:6b:cd:af:db:d5:12:57:a6:36:e4:
                    97:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:49:43:0C:F5:26:31:54:97:E1:D2:8F:D6:AF:8B:F6:13:DD:0A:98
            X509v3 Authority Key Identifier:
                keyid:27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:da:7a:9f:81:3b:23:c5:38:a2:d3:18:11:40:1d:df:55:39:
         6e:f1:dc:98:c2:85:c0:16:9f:22:3d:1a:1c:50:74:87:b6:ea:
         d1:17:22:93:aa:28:d9:33:37:a7:96:d8:f6:1e:55:79:21:98:
         69:9f:2a:b3:6c:f2:90:2f:cb:f2:ff:da:16:99:3e:ef:0b:63:
         d0:98:55:92:4e:ba:9b:1b:07:de:28:86:cd:99:3e:68:72:da:
         cd:92:2a:db:89:01:f2:f7:f7:6d:ed:ee:8a:0d:56:2a:eb:b8:
         68:cc:b8:df:f0:74:4b:48:fc:12:d4:d3:a8:98:db:e9:cc:91:
         db:4c:80:6b:2c:a8:a2:46:f4:fe:c1:dc:e7:87:23:ff:a1:fe:
         91:2b:bc:4e:92:b5:11:3e:5c:d4:9d:ba:a9:47:f3:f1:b7:4a:
         f5:3d:7a:8f:a8:c9:5e:41:6b:41:29:38:9c:39:ad:9b:12:70:
         b5:41:56:ae:9b:73:fa:58:f4:5f:16:a1:11:36:1d:04:eb:e0:
         87:96:5e:ca:49:ec:da:5c:d4:4b:39:93:e6:ed:75:74:36:c0:
         2f:01:79:a5:2c:fb:d9:45:95:2e:20:f2:11:33:87:84:b0:27:
         a6:4c:b2:6e:20:d9:12:bd:59:fb:0c:37:92:15:ae:5f:6c:9b:
         23:0f:54:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:50:14 2026 by rpki-client