Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
File:                     jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft (raw, json)
Hash identifier:          icxPda21ZQDw49N042qUX1a4f79svsokdTJUhD8hhN4=
Subject key identifier:   F4:DC:DE:D5:32:72:D7:DB:D6:FC:91:0A:BB:B1:DC:C4:81:28:04:AB
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Certificate issuer:       /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial:       01A10FCCBB49E14A8F78F9F189CEB71D8F75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
Manifest number:          0704
Signing time:             Tue 06 Oct 2026 06:00:37 +0000
Manifest this update:     Tue 06 Oct 2026 06:00:37 +0000
Manifest next update:     Wed 07 Oct 2026 06:00:37 +0000
Files and hashes:         1: 6fbN8X-Zd_3bLagCKNLcI6U0ZQ8.roa (hash: 9tQRoU2KNqyt5jisalOBz3HOC+o/8ZxBiQNdSn21t9k=)
                          2: jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl (hash: DRL0wEMUtGYcH8AXrrrWyVzxvRGPItVMiRh1Ly6Jlno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:cc:bb:49:e1:4a:8f:78:f9:f1:89:ce:b7:1d:8f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
        Validity
            Not Before: Oct  6 06:00:37 2026 GMT
            Not After : Oct  7 06:00:37 2026 GMT
        Subject: CN=f4dcded53272d7dbd6fc910abbb1dcc4812804ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6f:43:c1:21:5d:06:2f:d4:f6:88:74:30:f4:
                    ca:89:49:d0:06:79:00:1e:39:0e:43:f4:0b:40:de:
                    02:84:41:d1:a3:2f:bb:c0:65:20:17:ba:cf:ee:70:
                    d8:38:64:51:3b:ad:82:31:97:47:0d:51:52:18:cd:
                    e9:67:e8:c2:af:e8:d0:1e:c4:ed:09:03:f8:fa:9c:
                    6c:c8:59:f9:1b:38:d9:f0:aa:47:c9:2c:d4:fd:c3:
                    3d:25:96:83:64:d5:77:82:0e:f4:e9:a5:dd:a0:a1:
                    c7:d5:23:12:71:2d:7c:ab:60:79:2a:b8:17:36:a8:
                    3e:ce:7f:ad:7a:c6:ab:49:db:d9:eb:6e:e0:c0:4b:
                    e1:b0:55:d6:03:3c:fc:f2:35:f3:b9:8c:26:6f:29:
                    11:f2:12:f8:b7:b6:f4:d4:8a:e2:8e:0c:26:24:94:
                    fe:9c:79:e6:d6:4e:0c:69:d8:a3:5a:d7:f1:c1:f8:
                    e7:c0:de:a0:f8:32:cc:10:9e:a7:10:67:b9:b4:e0:
                    cf:70:60:3a:0b:3e:7e:a8:98:42:d5:46:ed:80:00:
                    11:4b:1b:6d:01:91:09:f8:0a:30:26:43:23:8c:94:
                    c6:61:da:58:26:d4:48:c9:d0:a5:4c:62:88:69:ab:
                    87:57:14:1b:fc:32:2f:ae:b3:d4:05:4c:db:78:e7:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DC:DE:D5:32:72:D7:DB:D6:FC:91:0A:BB:B1:DC:C4:81:28:04:AB
            X509v3 Authority Key Identifier:
                keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f0:d8:4c:1b:08:74:f0:f3:e6:b4:54:3c:87:0a:4c:ef:90:
         7a:b6:28:c1:51:7c:9a:31:8d:3a:03:68:1c:0c:36:80:fc:8b:
         8b:c8:2b:66:23:0d:22:6d:f2:8d:9d:a2:25:ef:34:9f:62:d7:
         cb:54:fa:e4:6e:09:8a:d4:c2:8e:7c:6d:3e:cc:cf:44:0c:1d:
         a4:3f:d7:23:c3:e8:0c:f3:a6:15:8e:ff:b4:99:01:79:57:7f:
         21:53:6f:46:15:6f:54:63:3c:bc:09:f6:a5:79:69:86:8b:26:
         a2:8f:c6:dd:98:12:fe:88:9b:c8:0f:40:31:ab:25:0f:65:d6:
         ed:87:e3:31:fa:1c:9c:a9:b5:07:39:a1:49:87:43:d0:0c:08:
         a6:cc:7b:32:3a:b1:5b:68:02:61:39:bb:2f:2e:a9:e0:d3:ea:
         40:09:df:4d:37:ff:60:89:aa:59:fa:18:90:d3:21:21:a7:4c:
         3c:c8:a5:9d:71:e4:50:9c:4d:84:3f:2c:00:0a:62:1f:f1:13:
         56:bf:cc:7a:42:9c:0b:c3:41:b5:9b:2b:5b:f3:86:00:0c:f3:
         ee:1f:17:54:7a:32:0a:b4:de:de:28:d9:a2:c3:f6:d4:a6:f5:
         81:b0:43:03:f6:4a:44:bb:6b:0b:6b:5b:f0:d1:a1:ef:50:df:
         e5:6f:d4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:29:55 2026 by rpki-client