Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
File:                     jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft (raw, json)
Hash identifier:          RYZk4wV7j2kDxikqrk0yJwM1VkcOylqNBvPtM4gTY8c=
Subject key identifier:   C6:D1:B9:D5:06:4B:3C:F0:E4:10:8D:9C:78:45:2A:52:5D:A0:CA:4D
Authority key identifier: 8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C
Certificate issuer:       /CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
Certificate serial:       01A101362434BC3656F93DF9969F9ED5133C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
Manifest number:          01CF
Signing time:             Sat 03 Oct 2026 10:01:27 +0000
Manifest this update:     Sat 03 Oct 2026 10:01:27 +0000
Manifest next update:     Sun 04 Oct 2026 10:01:27 +0000
Files and hashes:         1: jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl (hash: +tDH0sTax/HKV9JoIg6m48+3fhx6QwCa6/51o47lBfw=)
                          2: y0t4f3SYiNI2RVeLlWE56pwZqao.asa (hash: 7OCsijFOaHb7cmOa3vj0zykIPZySXdI6fNcvKKq6Oig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 10:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:01:36:24:34:bc:36:56:f9:3d:f9:96:9f:9e:d5:13:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
        Validity
            Not Before: Oct  3 10:01:27 2026 GMT
            Not After : Oct  4 10:01:27 2026 GMT
        Subject: CN=c6d1b9d5064b3cf0e4108d9c78452a525da0ca4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2c:5a:42:79:ce:1c:00:46:1a:02:62:15:a5:
                    70:4b:e9:bb:3f:da:33:02:be:c8:c8:91:aa:fd:0b:
                    cf:77:d0:ef:36:5c:66:02:94:5b:86:76:0a:29:84:
                    18:05:ae:4b:30:47:c9:68:06:ff:f5:c2:ae:f8:93:
                    1e:54:b9:67:56:89:84:75:2e:ed:73:d1:9a:6a:a7:
                    34:ac:cf:84:4d:b2:be:eb:10:63:4d:7c:0d:61:6f:
                    8a:1c:36:6c:8d:b9:c6:aa:2b:bf:bd:ec:a2:6e:1f:
                    2f:a6:bd:4a:69:cd:aa:95:5d:53:56:56:59:33:e4:
                    bd:4a:79:02:ee:66:e2:8c:72:b1:c6:fe:96:15:13:
                    be:dd:ca:d8:54:e1:ce:3e:6e:c7:13:1e:c6:16:30:
                    90:3e:4c:63:3b:38:56:8f:98:aa:23:a4:89:6b:7e:
                    aa:86:d1:1d:9e:71:b2:e5:29:24:dc:73:55:48:3e:
                    b9:24:a8:31:27:5b:48:76:20:fe:0e:b1:b2:1b:04:
                    cf:b6:4a:77:c5:c4:76:69:11:b9:d8:c9:45:52:6e:
                    cf:ee:3d:5e:7e:91:31:10:bb:8e:f1:2b:9c:19:c4:
                    e2:f1:33:1d:4c:6a:6e:5a:a5:19:24:16:68:28:97:
                    6c:17:4b:9f:88:93:65:24:a9:b5:32:3c:0b:62:fc:
                    78:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D1:B9:D5:06:4B:3C:F0:E4:10:8D:9C:78:45:2A:52:5D:A0:CA:4D
            X509v3 Authority Key Identifier:
                keyid:8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:36:36:ee:3a:8b:54:b2:50:a4:59:e4:33:e7:ad:99:f1:b8:
         30:02:92:cd:6e:9a:ca:bd:bf:d2:fd:29:55:f8:ef:52:62:0b:
         6b:c6:7d:d4:70:e2:77:b2:d4:40:df:fd:ec:2c:3d:87:32:3b:
         42:cf:6e:47:1d:7d:c6:b3:1d:e1:d3:70:e1:75:a6:d5:c2:99:
         07:36:88:d9:c9:6c:46:60:9f:68:4c:de:6c:e3:f6:96:ca:8b:
         1b:a9:61:fb:08:17:91:cb:56:18:b4:44:2c:af:67:73:1e:05:
         24:3e:c3:62:8a:bb:f5:99:42:12:77:05:fc:41:f7:bc:1b:e4:
         da:b2:66:04:0f:25:30:0d:9e:f2:b8:be:79:c6:87:34:db:2f:
         ad:a2:5f:fe:5a:46:34:3d:25:d6:a7:33:34:d5:9d:1c:a1:d9:
         36:f0:e2:13:92:96:25:24:62:bb:d1:bc:f8:28:68:c5:5e:67:
         a9:6b:75:73:14:25:31:bc:3b:06:6c:49:22:4d:cf:2e:58:e3:
         95:a1:9d:71:f9:05:65:3e:12:6c:b8:9c:39:15:36:21:10:19:
         7e:c8:61:dc:27:0d:5c:7a:3c:78:48:51:e3:d7:3e:ca:84:1c:
         75:05:4c:f3:de:93:17:2b:f8:90:b1:40:83:7d:d0:e9:b4:be:
         3b:5f:81:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEBNiQ0vDZW+T35lp+e1RM8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMDUxZTg0ZTVmY2M0MDAwMzU1MjZmMzdlN2RlYTBiNTIy
YWQ4MmMwHhcNMjYxMDAzMTAwMTI3WhcNMjYxMDA0MTAwMTI3WjAzMTEwLwYDVQQD
EyhjNmQxYjlkNTA2NGIzY2YwZTQxMDhkOWM3ODQ1MmE1MjVkYTBjYTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyxaQnnOHABGGgJiFaVwS+m7P9oz
Ar7IyJGq/QvPd9DvNlxmApRbhnYKKYQYBa5LMEfJaAb/9cKu+JMeVLlnVomEdS7t
c9Gaaqc0rM+ETbK+6xBjTXwNYW+KHDZsjbnGqiu/veyibh8vpr1Kac2qlV1TVlZZ
M+S9SnkC7mbijHKxxv6WFRO+3crYVOHOPm7HEx7GFjCQPkxjOzhWj5iqI6SJa36q
htEdnnGy5Skk3HNVSD65JKgxJ1tIdiD+DrGyGwTPtkp3xcR2aRG52MlFUm7P7j1e
fpExELuO8SucGcTi8TMdTGpuWqUZJBZoKJdsF0ufiJNlJKm1MjwLYvx4fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbRudUGSzzw5BCNnHhFKlJdoMpNMB8GA1UdIwQY
MBaAFI0FHoTl/MQAA1Um83596gtSKtgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalFVZWhPWDh4QUFEVlNiemZuM3FDMUlxMkN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8yYTZhOTktMGE2MS00OWM1LWI4MTUt
MWMwNTAwOTgwY2JmLzEvalFVZWhPWDh4QUFEVlNiemZuM3FDMUlxMkN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8yYTZhOTktMGE2MS00OWM1LWI4MTUtMWMwNTAwOTgwY2Jm
LzEvalFVZWhPWDh4QUFEVlNiemZuM3FDMUlxMkN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzY27jqL
VLJQpFnkM+etmfG4MAKSzW6ayr2/0v0pVfjvUmILa8Z91HDid7LUQN/97Cw9hzI7
Qs9uRx19xrMd4dNw4XWm1cKZBzaI2clsRmCfaEzebOP2lsqLG6lh+wgXkctWGLRE
LK9ncx4FJD7DYoq79ZlCEncF/EH3vBvk2rJmBA8lMA2e8ri+ecaHNNsvraJf/lpG
ND0l1qczNNWdHKHZNvDiE5KWJSRiu9G8+ChoxV5nqWt1cxQlMbw7BmxJIk3PLljj
laGdcfkFZT4SbLicORU2IRAZfshh3CcNXHo8eEhR49c+yoQcdQVM896TFyv4kLFA
g33Q6bS+O1+BuA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:53:17 2026 by rpki-client