Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
File:                     jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json)
Hash identifier:          WU8szE2R+ln0pAyH+ry99DBAITsmAdXS9qaBAaIF6qw=
Subject key identifier:   68:F8:CF:27:2F:D4:A6:FF:10:46:1B:1D:9A:92:1F:9C:1F:36:7A:B2
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Certificate issuer:       /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial:       01A0DC1796D30C39561B6CFB20B47EB1032E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
Manifest number:          1926
Signing time:             Sat 26 Sep 2026 05:02:08 +0000
Manifest this update:     Sat 26 Sep 2026 05:02:08 +0000
Manifest next update:     Sun 27 Sep 2026 05:02:08 +0000
Files and hashes:         1: iufQHL1rrp5XzvULdBkr0SPCCu8.roa (hash: o7Un0OaNswzLrJGI0RBqiK6v18+B62LAaKhklEYedo4=)
                          2: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: gtBJEWlqXV/+n0sV3RMZdjoLOWzVfCCBaoCWWLJ6hi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:17:96:d3:0c:39:56:1b:6c:fb:20:b4:7e:b1:03:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
        Validity
            Not Before: Sep 26 05:02:08 2026 GMT
            Not After : Sep 27 05:02:08 2026 GMT
        Subject: CN=68f8cf272fd4a6ff10461b1d9a921f9c1f367ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bc:9b:13:1d:88:b8:84:14:bb:ce:5c:76:5e:
                    61:67:56:60:99:27:f5:63:09:50:20:f7:a6:63:bd:
                    cf:7c:ee:90:32:0b:06:ad:2e:97:9b:00:f9:3c:7c:
                    70:e0:fa:b2:ef:09:69:dd:2d:f6:88:cb:a7:a7:8f:
                    e3:8d:1c:ac:f2:b7:2c:0c:06:22:b5:43:c3:58:c0:
                    5f:b1:02:41:54:01:25:cf:3b:2e:7e:59:1b:61:88:
                    a9:f8:8d:b7:f5:19:90:2a:a8:bc:5d:37:fd:48:b3:
                    8b:71:7a:1c:b6:d5:54:72:90:96:e3:89:0d:f6:be:
                    c3:1b:a0:1e:4b:5f:05:e0:fd:f2:15:e5:d8:9c:79:
                    73:99:f2:cd:21:a3:4b:9f:12:59:2a:c4:ee:8a:83:
                    33:26:7a:ff:a4:c0:87:c4:50:9a:38:5d:3a:06:7f:
                    3c:a8:5b:22:6b:03:f5:21:6c:a9:cb:a3:b5:12:4e:
                    99:8d:e6:e0:68:4a:11:18:c8:19:ef:7b:28:57:04:
                    2a:e8:ef:b6:86:bd:6d:d8:dd:88:5d:f1:d7:b6:a8:
                    ff:36:e0:6b:57:f3:48:d2:0e:d5:d7:d7:0b:9f:29:
                    89:59:df:75:04:01:18:67:1a:84:05:8a:23:f7:cd:
                    78:0c:3e:14:f5:93:4c:12:a3:12:16:ba:ce:25:02:
                    07:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F8:CF:27:2F:D4:A6:FF:10:46:1B:1D:9A:92:1F:9C:1F:36:7A:B2
            X509v3 Authority Key Identifier:
                keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:50:df:10:44:0e:a8:bc:63:27:a1:7b:76:d0:63:57:f6:c5:
         6a:19:57:ec:8f:2f:e4:73:a4:af:cf:e8:cc:54:fd:c5:83:2d:
         3d:3e:c3:03:f6:6e:ee:fc:3f:a7:2a:2a:c4:8e:55:8a:7b:18:
         8a:a0:9d:2f:9f:6d:6a:f3:78:1d:c4:90:7a:ef:74:04:c6:7e:
         e3:35:7a:14:d9:9f:2a:f5:3e:4a:a2:b7:3e:bc:0a:9a:2f:be:
         bc:1d:d7:5c:fa:ff:ca:39:c4:b3:07:4b:03:ae:9c:fb:67:6a:
         c5:c4:bc:d9:eb:fa:3c:2e:63:cf:76:a8:be:d4:f7:c0:24:87:
         bf:90:4e:c1:2e:22:00:41:12:70:ba:9e:82:2c:29:f2:83:8a:
         6e:d3:83:a0:30:11:03:44:80:a5:15:20:2b:c2:5a:48:7a:aa:
         f1:0c:4f:4d:af:dc:22:28:87:65:e6:18:05:9f:01:48:df:89:
         b5:e3:5a:08:9e:49:c1:5f:0d:26:67:d2:f1:09:77:97:d1:24:
         36:0a:3a:8c:fc:a7:9e:b9:83:e8:f3:da:a3:39:cb:85:41:fd:
         01:5f:af:24:7d:c7:3a:52:fe:54:57:cc:82:43:19:84:98:9c:
         de:4f:ff:eb:97:e6:cc:86:90:6c:e2:c5:df:7e:ee:38:91:ee:
         96:6a:82:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcF5bTDDlWG2z7ILR+sQMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzM3YzBjODU2OTQ2YjhmYmRhZjI4NWY1MmNhZGRjZjM4
YWQwYTgwHhcNMjYwOTI2MDUwMjA4WhcNMjYwOTI3MDUwMjA4WjAzMTEwLwYDVQQD
Eyg2OGY4Y2YyNzJmZDRhNmZmMTA0NjFiMWQ5YTkyMWY5YzFmMzY3YWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbybEx2IuIQUu85cdl5hZ1ZgmSf1
YwlQIPemY73PfO6QMgsGrS6XmwD5PHxw4Pqy7wlp3S32iMunp4/jjRys8rcsDAYi
tUPDWMBfsQJBVAElzzsuflkbYYip+I239RmQKqi8XTf9SLOLcXocttVUcpCW44kN
9r7DG6AeS18F4P3yFeXYnHlzmfLNIaNLnxJZKsTuioMzJnr/pMCHxFCaOF06Bn88
qFsiawP1IWypy6O1Ek6ZjebgaEoRGMgZ73soVwQq6O+2hr1t2N2IXfHXtqj/NuBr
V/NI0g7V19cLnymJWd91BAEYZxqEBYoj9814DD4U9ZNMEqMSFrrOJQIHqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGj4zycv1Kb/EEYbHZqSH5wfNnqyMB8GA1UdIwQY
MBaAFI0zfAyFaUa4+9ryhfUsrdzzitCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMt
M2YxNWY4ODM2ZGJiLzEvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMtM2YxNWY4ODM2ZGJi
LzEvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlDfEEQO
qLxjJ6F7dtBjV/bFahlX7I8v5HOkr8/ozFT9xYMtPT7DA/Zu7vw/pyoqxI5VinsY
iqCdL59tavN4HcSQeu90BMZ+4zV6FNmfKvU+SqK3PrwKmi++vB3XXPr/yjnEswdL
A66c+2dqxcS82ev6PC5jz3aovtT3wCSHv5BOwS4iAEEScLqegiwp8oOKbtODoDAR
A0SApRUgK8JaSHqq8QxPTa/cIiiHZeYYBZ8BSN+JteNaCJ5JwV8NJmfS8Ql3l9Ek
Ngo6jPynnrmD6PPaoznLhUH9AV+vJH3HOlL+VFfMgkMZhJic3k//65fmzIaQbOLF
337uOJHulmqCCw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:38:46 2026 by rpki-client