Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
File:                     J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft (raw, json)
Hash identifier:          MxeOPpeBDmrHoWKBVjAJ90ipZN9UP+m5dMr4z0Sngbc=
Subject key identifier:   F8:6D:1B:CD:A7:3B:98:DC:1A:12:7E:16:D3:E3:55:32:2B:68:B0:ED
Authority key identifier: 27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
Certificate issuer:       /CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Certificate serial:       01A0DBA98B6BC3688DBFCC48CB98923A5898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
Manifest number:          EB
Signing time:             Sat 26 Sep 2026 03:01:56 +0000
Manifest this update:     Sat 26 Sep 2026 03:01:56 +0000
Manifest next update:     Sun 27 Sep 2026 03:01:56 +0000
Files and hashes:         1: AlUMjDs1AMrse1G7Mm4Ls5MOqbg.roa (hash: 1qWTrC8IRHVNBmVAFfK+oN6U6pjXzgDE6zNivII8rew=)
                          2: FQ-cn1xD6KsvCiukzaSyL7Bi5fs.roa (hash: 9/gq5XTu7uOiRhd+dP7NFtGAPJ4cf/D1aTBzP0UWPcg=)
                          3: J50zmCtQdo-LbJV1zf8tg_pspRY.roa (hash: rmMwifoRriqaztxBUMCiGtVjFrOwYaPJiXLxhJjafM4=)
                          4: J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl (hash: 8rBmfuJyQrEd7VnGopeDA6/3FN9ncl999qwNfz0XnQc=)
                          5: Jq-ed1QLe89-gO6ULPwLKZ71NmE.roa (hash: 1NLRbyHK8osbUIIyQ+NGdNAbsIQXKp6uKjtiu7OYwC0=)
                          6: b80T5aKo89J4YEAP6bAiheKe6EY.roa (hash: CLeP0I5fgLyLMgId9gEX6E6rFzYBTw+ow8e/05qzkMY=)
                          7: icPfEymP4sS-B5f6ECwDv6uqJfE.roa (hash: dEtKNt+6pxMCaYnPSrEzFG7rO6REUpLEotnEHbtCIIY=)
                          8: r0qZ8D2aTVCBnUaFMEdO5JjY_WE.roa (hash: vpPL8rRx0AJAgJ6HwLPSPxj+S6uKrcpsWXCyy/Hr0EY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a9:8b:6b:c3:68:8d:bf:cc:48:cb:98:92:3a:58:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
        Validity
            Not Before: Sep 26 03:01:56 2026 GMT
            Not After : Sep 27 03:01:56 2026 GMT
        Subject: CN=f86d1bcda73b98dc1a127e16d3e355322b68b0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:e8:4f:84:72:04:35:3e:28:3a:70:97:f5:
                    ca:59:06:b8:8b:f8:4d:e0:58:ce:d1:00:d9:1e:a0:
                    83:ff:ac:18:64:68:c6:1d:e8:45:b3:8f:58:dd:ce:
                    17:ee:60:a1:be:8d:44:cb:ec:19:49:11:26:d1:f9:
                    5d:da:30:b2:5d:52:3d:ef:59:aa:4f:f6:cc:56:b9:
                    e1:65:fd:a5:9f:3a:33:9b:ec:2b:34:a3:81:9d:d0:
                    56:ce:c5:5a:bc:60:dd:16:75:74:3c:ce:98:f5:e9:
                    34:b4:4a:5e:02:64:30:f2:e3:e9:af:b5:2d:1e:24:
                    1f:f7:4b:4a:c4:2d:a4:38:8d:96:ce:9e:e7:92:71:
                    42:a7:31:27:30:95:08:43:82:6c:ec:13:34:95:f4:
                    3f:ba:0d:c0:6e:6a:04:3a:e6:3e:44:0c:64:d8:37:
                    cd:d9:35:38:77:27:99:31:18:ee:c9:fe:cb:e4:8b:
                    12:ac:c2:57:38:8d:77:f0:69:ba:23:20:e5:26:0f:
                    33:4c:24:aa:77:0c:67:55:06:d8:77:fd:8d:62:52:
                    66:d6:12:af:d4:ab:32:02:f0:38:77:59:53:48:fd:
                    d1:9f:39:05:e6:32:79:32:1b:58:0c:97:77:ad:69:
                    04:9f:aa:35:81:ae:db:4f:e2:89:2b:82:62:24:d4:
                    24:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6D:1B:CD:A7:3B:98:DC:1A:12:7E:16:D3:E3:55:32:2B:68:B0:ED
            X509v3 Authority Key Identifier:
                keyid:27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:48:3b:a6:10:b0:3a:f5:8a:fe:21:8e:64:f6:72:40:90:95:
         51:67:76:da:d1:a4:17:ee:0c:89:35:91:40:71:2b:7a:56:ce:
         8d:c9:c0:82:f7:54:47:0c:ec:22:ea:21:dd:ed:5e:83:a7:9f:
         95:5f:a9:f6:70:56:8f:bc:f0:d2:98:ef:ed:17:7a:e1:79:40:
         1c:91:b9:49:e0:37:f0:a7:a4:88:9e:73:58:5d:20:51:5b:75:
         38:9e:71:2c:5d:2d:28:ef:31:10:42:a5:27:e1:52:6a:48:e5:
         94:cc:5d:73:f2:2a:ef:0c:f8:1e:54:e3:8c:48:ae:40:79:06:
         6b:d5:da:4f:31:ef:10:4e:48:69:18:3f:85:b2:bb:54:7c:85:
         29:1a:98:93:c1:0a:da:fb:a6:ac:f0:bb:e0:a2:55:c9:2b:6f:
         cc:bc:90:b3:e6:ed:59:b5:15:85:2b:a6:ca:0e:56:68:a3:d5:
         1f:30:5c:a0:a7:34:71:bc:a3:f8:f3:5f:81:ad:3c:6f:65:85:
         7a:d1:a0:90:20:6f:eb:07:1c:1c:17:13:19:0a:9a:63:de:34:
         0a:14:49:d9:47:38:a3:08:52:62:c9:3e:9a:44:e5:f8:ce:89:
         91:58:53:a1:2f:be:1e:52:7f:98:40:6e:57:65:79:00:24:04:
         e1:ff:3c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:41:49 2026 by rpki-client