Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
File:                     JVnpvh-9HmkJoL6akLOA-CT6saU.mft (raw, json)
Hash identifier:          MKjTveBOO7Tw6ZUnPUG9DxQLuMaCGPPweBmAKwLbE8Q=
Subject key identifier:   C6:3E:7F:DE:12:FF:D8:D6:EA:2A:77:71:44:74:2F:4F:19:AC:DC:91
Authority key identifier: 25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
Certificate issuer:       /CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Certificate serial:       01A0D15B617F0334A61994DB0F2871B44117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
Manifest number:          1A6C
Signing time:             Thu 24 Sep 2026 03:00:21 +0000
Manifest this update:     Thu 24 Sep 2026 03:00:21 +0000
Manifest next update:     Fri 25 Sep 2026 03:00:21 +0000
Files and hashes:         1: IYGAT9JOggdgIzWw5Z6Q-LvafsU.roa (hash: 1AFyldkPiOPqEw+6SWUdNjowNkvDINTfUcjnk283dIQ=)
                          2: JVnpvh-9HmkJoL6akLOA-CT6saU.crl (hash: xf5x1n58udQ8jU7Rw5ezjY2rArW5/zli8GenGqFtjyg=)
                          3: LA_XeJ2XL6uqqIjDC-DrFSY7Rts.roa (hash: 9TX7Fzg1+Qnk+2k2ngL2zOqaTn3qXWn6P9IDGR9xUb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5b:61:7f:03:34:a6:19:94:db:0f:28:71:b4:41:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
        Validity
            Not Before: Sep 24 03:00:21 2026 GMT
            Not After : Sep 25 03:00:21 2026 GMT
        Subject: CN=c63e7fde12ffd8d6ea2a777144742f4f19acdc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2b:a9:9e:6e:b5:6e:93:67:15:77:f6:aa:68:
                    49:29:e6:10:e6:f8:e0:b5:de:d4:bf:d0:bb:f9:ff:
                    70:35:21:2e:5b:0b:d2:cc:04:18:e6:08:2d:c8:3a:
                    e9:c3:b0:16:b5:38:64:b6:7d:40:ad:82:14:43:c9:
                    31:17:89:b5:5a:af:8b:ee:b2:8f:c1:d8:e8:b6:37:
                    77:78:90:09:35:17:e2:bd:d8:4f:1e:3d:09:47:25:
                    5e:f5:20:fc:44:82:e7:0f:bb:53:a1:56:ff:2f:49:
                    01:e3:f0:ab:0e:3b:ff:ee:06:81:61:15:97:e6:f7:
                    c0:98:98:9d:d2:ce:69:70:8e:3d:95:47:b9:a2:52:
                    7a:5c:07:25:53:95:5a:7a:43:b4:fb:a0:de:62:4a:
                    d1:13:39:c7:ed:5b:5c:9e:c0:59:57:ca:8f:ec:c9:
                    00:36:fc:f6:ee:e4:2e:55:a4:6c:86:ae:3d:61:e8:
                    7a:a5:5b:0f:df:1d:8e:f7:cd:f4:94:ee:20:cd:f0:
                    46:0c:30:89:a9:1e:f7:93:fd:fd:ec:f4:ce:46:93:
                    c4:62:9c:10:e9:d7:aa:41:dc:7c:70:6d:c1:f0:fb:
                    69:90:2e:dc:79:f2:7c:75:23:d6:28:4a:d7:ff:ea:
                    91:4d:c7:ec:7b:5d:9a:59:93:11:91:d0:6b:57:30:
                    d9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3E:7F:DE:12:FF:D8:D6:EA:2A:77:71:44:74:2F:4F:19:AC:DC:91
            X509v3 Authority Key Identifier:
                keyid:25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:91:fa:46:82:60:70:80:33:94:b4:99:9c:96:07:92:42:24:
         53:ae:e3:70:bc:d0:15:9a:94:4b:47:ed:7f:ba:26:e1:c9:28:
         5a:8f:1e:c9:17:1e:5f:0c:4a:bf:66:05:97:56:2d:bd:5d:3d:
         7b:aa:c2:68:2e:29:4f:23:15:e3:d2:39:1d:71:46:1f:af:1a:
         d6:c5:87:85:d3:45:61:0c:e4:cd:b3:44:72:53:1a:69:b1:e5:
         28:ae:16:30:36:ff:1f:0b:2d:05:28:a1:95:44:ae:03:c3:e1:
         6b:65:a4:c5:5a:75:69:e7:08:5d:90:71:0c:bd:80:f2:d3:65:
         af:83:30:99:7a:94:ea:f2:db:16:f5:a5:14:0b:47:18:ef:9c:
         56:bf:bd:91:f4:6c:c4:04:ac:b2:09:63:80:e6:75:46:c2:56:
         2e:7b:dc:1d:ee:61:7e:45:71:18:bd:8b:81:7f:e6:6f:8d:30:
         c9:25:26:e2:1b:20:7b:89:6d:5a:ff:7b:3a:7e:ae:5d:84:21:
         08:c6:de:7b:09:d5:b7:bb:8a:f9:4c:9d:10:fb:8a:35:1d:fe:
         8b:52:0b:cc:a6:0b:f7:f1:c1:06:ab:47:92:7e:bf:eb:f7:8e:
         5a:d9:bf:08:bf:00:7e:d9:11:e6:d3:9c:cd:2f:3f:25:57:d8:
         f7:1c:bf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:41:01 2026 by rpki-client