Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
File:                     JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json)
Hash identifier:          iev3k710qrhEI1MAtEpoCFH8e2C6IAHOyojIY9X2W7E=
Subject key identifier:   3A:B9:55:B8:49:91:94:34:E4:53:25:F7:AB:D0:74:16:10:24:0E:A9
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Certificate issuer:       /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial:       01A0D983E94B0E2240AB356903B2C222EB67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
Manifest number:          0B51
Signing time:             Fri 25 Sep 2026 17:01:35 +0000
Manifest this update:     Fri 25 Sep 2026 17:01:35 +0000
Manifest next update:     Sat 26 Sep 2026 17:01:35 +0000
Files and hashes:         1: 1pjPcIc-TbBpzHBksxHHS9pR-WI.roa (hash: pwCZ2fRhs0nJ31upDzz2pN2CJgfwb4g1H8mQoqHdQdQ=)
                          2: A5wtuBfY6dxUh5eS44FlMqwcmog.roa (hash: tZbTVJ0vSZUIP4JV/ZEsCDLjrfqC4a0hum2qjGz/VQE=)
                          3: C6kXQbmf9ed-Rd3RlEcWQXFNlRk.roa (hash: DW0PJcH29KhjZVwZo0qWO+ll1hc593uNe8QjdzH0uYc=)
                          4: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: 61O83maT48rgACKtvRbZXgy9Ehkg5FlJv8Bydk/Vb6A=)
                          5: ROVyIAsBNfwBer4Npp8bVnXZW2U.roa (hash: Z2rohR1T9JeCw9lXsHTXnEJbzYMGmnxfv3f6fLAZwjY=)
                          6: SN7iUL1ZTDZriT9WldHFs3bgME4.roa (hash: KkH9Un51EAXewil4Qmtkkj2B60LR6wL89EVPG96bBUw=)
                          7: q8SJpLXKAHXaFMNj32h3gHAkuhI.roa (hash: pnGsg6QVulEcKBptf5RFCwNqFUz6hr2u8dhV7GIOEe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:83:e9:4b:0e:22:40:ab:35:69:03:b2:c2:22:eb:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
        Validity
            Not Before: Sep 25 17:01:35 2026 GMT
            Not After : Sep 26 17:01:35 2026 GMT
        Subject: CN=3ab955b849919434e45325f7abd0741610240ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:a6:e9:5d:16:f4:fd:db:95:8a:f4:bb:1a:
                    c1:89:aa:d1:fc:74:3b:67:38:e6:1c:dc:78:a6:3e:
                    d3:c5:d4:48:78:69:2a:6a:73:48:3b:15:1a:c1:19:
                    c6:40:66:82:c5:ad:fa:89:7f:41:dd:da:07:ac:df:
                    1e:89:7a:32:91:75:5e:d2:e8:20:20:88:f3:fd:81:
                    53:19:0c:e6:0c:63:8b:48:a5:97:c5:3f:fb:de:bc:
                    6b:2f:3d:8d:19:54:65:d4:ee:d9:94:e0:70:4f:78:
                    cf:31:6e:e9:01:2c:39:4f:26:43:53:d1:a1:01:d8:
                    af:d1:b9:95:ae:6e:8e:a7:9d:f7:11:55:6e:7c:79:
                    2c:9a:12:93:81:87:86:f3:7f:38:fa:b7:98:82:52:
                    f0:b3:4e:03:cc:98:be:70:1e:aa:21:63:92:00:f4:
                    c7:41:83:4e:c7:de:65:32:aa:fb:0f:d4:ae:ae:80:
                    67:13:b5:1e:84:f4:1e:7f:08:b3:51:e2:38:92:03:
                    3b:61:ab:5d:bb:e7:b9:47:88:da:a7:2e:5f:7e:99:
                    d6:3f:67:2d:a9:b8:a5:a0:c1:e8:4f:36:36:c9:34:
                    88:68:7a:bc:20:8b:c8:e5:da:29:72:5a:92:8c:52:
                    70:ab:29:9b:c1:2f:69:ac:05:19:a0:5c:d7:8a:3c:
                    6c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B9:55:B8:49:91:94:34:E4:53:25:F7:AB:D0:74:16:10:24:0E:A9
            X509v3 Authority Key Identifier:
                keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:56:27:90:2c:44:1b:ff:a4:fc:de:6c:c9:12:8e:31:5d:d8:
         8b:b4:37:9e:3b:15:5e:0c:41:56:84:0b:9c:28:61:ff:49:96:
         93:e4:7c:e7:79:7c:20:fd:7f:35:9c:84:b1:65:0c:b2:be:5e:
         73:48:96:d1:04:5d:c3:99:c6:76:d3:38:a6:6c:01:89:62:0a:
         df:6f:1d:db:53:57:f3:fc:35:43:97:df:90:6b:42:fd:53:20:
         0c:7e:7a:8d:ec:ac:68:9d:34:9f:f7:63:01:06:ec:2b:c9:ce:
         2b:ad:c7:e8:3f:8b:b5:f4:97:90:0e:32:e4:90:82:75:9d:f7:
         ff:06:4f:f8:ee:8c:f5:43:49:c2:0e:a1:f2:a0:36:b2:e6:11:
         f7:f1:aa:64:04:05:ce:01:40:ed:1e:73:af:f8:d6:7b:32:86:
         13:da:d0:6f:2a:78:15:5c:75:b3:75:b4:14:c6:84:7b:4f:e3:
         3a:ba:a1:2b:68:99:59:0d:a8:9d:21:af:a1:d9:52:80:b3:41:
         34:aa:87:44:33:e1:45:47:1f:2a:63:e6:87:54:58:62:bf:d6:
         ac:c1:b6:b4:70:36:ac:26:9f:f2:38:7e:20:4b:c0:f6:32:17:
         dc:16:02:59:9f:52:44:0d:54:45:c8:f0:ad:97:40:79:b2:c2:
         fb:0e:b6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:49:52 2026 by rpki-client