Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File:                     JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier:          8CG9sZVswK8AqzpFdRXtcOOzUdFJXTJMWHZYG5mBoog=
Subject key identifier:   92:4B:DA:83:39:4B:79:53:84:19:D1:8E:B7:BC:9E:B2:86:67:DC:46
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer:       /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial:       01A0D07F678AF3A8CA4731D2C50E2355ECA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number:          18DE
Signing time:             Wed 23 Sep 2026 23:00:05 +0000
Manifest this update:     Wed 23 Sep 2026 23:00:05 +0000
Manifest next update:     Thu 24 Sep 2026 23:00:05 +0000
Files and hashes:         1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: aIs4cGw74j7ZDGUR3wrZuEb8OAI2YGp2HsF5YRmmm1o=)
                          2: b2rG26UgVRG8w0IZDQFTt47nkS0.asa (hash: JCJ+TLu/jPVnxxZeI2DePwxG4LHTh7Ix8TBP1/ceRkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:7f:67:8a:f3:a8:ca:47:31:d2:c5:0e:23:55:ec:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
        Validity
            Not Before: Sep 23 23:00:05 2026 GMT
            Not After : Sep 24 23:00:05 2026 GMT
        Subject: CN=924bda83394b79538419d18eb7bc9eb28667dc46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:d9:74:c5:1b:2f:44:fa:1b:70:8e:fd:18:
                    d2:a6:36:f1:d9:d5:cd:62:fd:8d:db:57:c6:3c:50:
                    3c:56:29:9c:da:b9:ba:5a:7f:e4:65:cd:5e:6e:0c:
                    80:08:2e:92:db:0e:b2:b3:13:55:0b:51:cc:9c:10:
                    4b:c0:c2:4a:a0:bb:2f:1e:7c:62:3f:c0:05:05:e4:
                    b6:f8:45:9a:e9:95:3c:66:f5:c3:c5:fd:7d:50:c7:
                    db:3e:b6:1e:c3:c0:05:7c:e6:47:cb:0a:81:80:07:
                    00:bb:e4:d7:07:8e:49:23:b0:25:78:15:0b:0c:01:
                    1e:e4:df:9b:f5:31:26:33:77:05:ea:9b:19:8b:7b:
                    45:93:98:97:2a:52:92:49:48:22:05:7d:11:02:c0:
                    02:07:d3:82:d4:18:40:12:23:02:8b:18:f9:a3:75:
                    b2:17:fa:4b:93:62:2b:58:8c:fe:86:1a:3a:0f:76:
                    de:18:42:d7:90:40:f2:1e:64:25:14:27:2f:e7:10:
                    6c:64:de:0c:e2:1f:48:9a:65:63:34:2b:34:b8:07:
                    06:75:12:d9:00:15:22:87:ed:14:1b:51:4e:c1:35:
                    91:df:8f:99:06:f2:95:36:e2:e8:3f:e2:38:ad:ca:
                    34:ea:55:7a:35:48:28:5e:e4:a3:75:1e:04:20:0f:
                    bc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4B:DA:83:39:4B:79:53:84:19:D1:8E:B7:BC:9E:B2:86:67:DC:46
            X509v3 Authority Key Identifier:
                keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:70:75:d2:dc:e1:07:2f:f0:3f:ea:ae:0a:9b:71:bc:0a:61:
         86:10:fe:a3:98:f6:eb:19:df:20:74:3a:03:c1:84:06:54:9e:
         05:f6:6b:5d:95:43:a1:1f:36:e1:3a:fd:01:6e:e4:d4:26:ee:
         b0:e4:6a:41:01:de:c7:cc:da:e8:53:7b:d6:d5:a3:d0:a2:62:
         5a:f4:d2:75:e5:72:5f:f3:3d:7b:0d:a0:11:3d:da:e0:36:44:
         3b:98:35:06:50:0c:a6:f4:87:1b:d5:e8:5c:ae:6d:03:79:e5:
         75:bf:f6:80:69:7c:01:d6:8c:2d:a0:3c:63:1e:a3:67:b1:9d:
         f3:2a:e0:67:c9:77:2a:78:b4:49:ba:a8:78:32:1b:a7:43:e5:
         06:2c:a9:91:eb:aa:a2:6d:8f:9d:e1:3d:41:68:6c:75:fc:50:
         74:55:81:8d:4b:e6:2c:86:6d:16:1c:ad:3d:81:08:3e:4e:ec:
         7f:6b:4d:a5:1b:cd:2d:1e:3a:66:8c:57:a9:88:aa:ec:0f:b7:
         96:7b:20:cb:2c:a0:e2:1e:41:c1:12:87:14:f6:d2:f8:6a:b7:
         5a:01:db:d1:01:48:a4:73:ed:fa:e6:25:d2:26:e1:ef:61:be:
         0c:44:f0:ae:e3:b8:ba:c6:73:92:7c:31:f7:77:f8:41:53:98:
         55:e0:78:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:50:00 2026 by rpki-client