Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
File:                     A_JvJX_M8HUxzX5_6EFhtP9emmM.mft (raw, json)
Hash identifier:          qUL0F4EIpkuX6zCpyChNRR16GeKIUW7sr5HyR9layTA=
Subject key identifier:   2B:9F:8C:19:72:A7:3E:A5:BC:FD:8D:B3:DF:B3:D9:C6:44:95:6F:2B
Authority key identifier: 03:F2:6F:25:7F:CC:F0:75:31:CD:7E:7F:E8:41:61:B4:FF:5E:9A:63
Certificate issuer:       /CN=03f26f257fccf07531cd7e7fe84161b4ff5e9a63
Certificate serial:       01A0CBC80388A6600BB3818F4DD25D587203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
Manifest number:          1018
Signing time:             Wed 23 Sep 2026 01:01:17 +0000
Manifest this update:     Wed 23 Sep 2026 01:01:17 +0000
Manifest next update:     Thu 24 Sep 2026 01:01:17 +0000
Files and hashes:         1: A_JvJX_M8HUxzX5_6EFhtP9emmM.crl (hash: 8lOX/qgMun6zBhqR6y6wj/7i73Xeu9JuDXnLBk8Nnoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c8:03:88:a6:60:0b:b3:81:8f:4d:d2:5d:58:72:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f26f257fccf07531cd7e7fe84161b4ff5e9a63
        Validity
            Not Before: Sep 23 01:01:17 2026 GMT
            Not After : Sep 24 01:01:17 2026 GMT
        Subject: CN=2b9f8c1972a73ea5bcfd8db3dfb3d9c644956f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d0:79:5e:5a:c3:30:32:08:f0:72:61:f9:1a:
                    40:44:fe:5a:c3:ef:ee:d9:cc:f1:47:f0:68:d3:24:
                    45:b2:20:05:4d:dd:79:42:0c:97:88:ab:f3:2c:e9:
                    c0:ad:80:fe:c3:82:67:36:39:a9:1b:bc:d3:3b:ad:
                    7d:7b:7b:e8:f7:fa:ad:85:64:c4:ae:72:6e:ff:17:
                    02:c8:6e:bb:f0:2f:01:8d:a7:2c:f3:6a:b9:13:31:
                    de:62:77:b8:c3:f1:1a:1b:7f:8a:df:f4:d1:3b:2e:
                    59:f6:9d:fd:5a:13:4c:6a:e3:ff:73:9b:ff:a4:ba:
                    c5:0c:8e:4f:7d:4d:14:97:f8:f7:cb:1e:0f:8e:33:
                    a7:57:38:10:4b:5d:07:2f:89:4d:dc:96:e3:7c:92:
                    30:62:a4:d3:d8:6c:1a:cd:8c:f5:ae:b8:60:94:c9:
                    20:68:00:d5:95:4f:b8:69:64:d8:94:71:74:69:a4:
                    29:c7:45:26:be:e5:e9:62:5a:14:ee:0f:99:06:0d:
                    b2:c9:62:4a:2e:9b:7c:b4:1f:78:3f:0c:30:ae:b9:
                    9c:07:61:2e:ec:2c:b3:e0:88:3a:89:aa:bb:e7:e3:
                    8a:60:a9:b3:59:44:78:07:b9:49:e7:85:89:32:80:
                    38:1c:e7:be:f3:85:e9:05:ab:1f:7e:38:65:78:12:
                    1a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9F:8C:19:72:A7:3E:A5:BC:FD:8D:B3:DF:B3:D9:C6:44:95:6F:2B
            X509v3 Authority Key Identifier:
                keyid:03:F2:6F:25:7F:CC:F0:75:31:CD:7E:7F:E8:41:61:B4:FF:5E:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:3c:c7:07:6c:37:4c:c3:ca:83:df:17:f5:2f:fc:01:c8:77:
         6d:7c:b4:51:fd:5d:bc:2e:e7:b5:d6:8f:92:29:f9:30:d7:b6:
         74:df:d7:c8:8d:c9:58:a3:ef:ef:a6:03:3f:92:ba:73:7d:dd:
         bc:6a:e6:5b:ff:1d:25:bb:c1:37:28:bc:4f:3a:86:93:08:d4:
         d1:0c:a7:33:d0:bf:8c:67:3d:94:8a:b4:3b:19:77:bf:59:50:
         8e:23:3d:60:ce:1b:62:58:38:68:40:93:46:00:a9:e5:71:f4:
         a7:bb:60:66:ea:8f:b0:00:84:02:36:f1:b4:24:98:4a:ad:79:
         f1:7d:08:70:d3:9f:46:bf:8f:2c:1d:14:f7:3e:4f:68:0f:6b:
         c5:55:4d:de:07:05:3e:44:9b:1e:21:02:74:03:16:85:07:ee:
         48:97:38:7d:4d:76:1c:1c:d0:37:d3:4b:4f:c1:0d:a4:af:e7:
         e4:cc:b9:76:66:a6:7f:08:52:9a:ef:e4:5c:9b:d8:07:9f:f6:
         a8:b4:eb:1a:25:39:68:e4:3c:b2:7f:14:28:8b:41:ca:f1:11:
         fc:46:e1:8e:ba:2e:34:bd:d5:5d:5c:44:e5:27:d8:bd:88:95:
         41:e0:b7:66:0e:df:5d:e8:2b:2e:d9:cb:b5:b5:b4:de:93:02:
         f2:c7:87:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:03:52 2026 by rpki-client