Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft
File:                     jXskLMdAYjU4IyQFjJHa_GOZACY.mft (raw, json)
Hash identifier:          uKkheLayFmfY/omawId6drpUisgVkd8TEhh3ab1eyVg=
Subject key identifier:   D1:99:86:98:AE:1A:8E:AD:1E:CC:5F:5E:C1:09:D1:67:0A:01:4B:13
Authority key identifier: 8D:7B:24:2C:C7:40:62:35:38:23:24:05:8C:91:DA:FC:63:99:00:26
Certificate issuer:       /CN=8d7b242cc7406235382324058c91dafc63990026
Certificate serial:       01A0D012659F75EFC672987ACE12DA0C9FAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft
Manifest number:          0304
Signing time:             Wed 23 Sep 2026 21:01:01 +0000
Manifest this update:     Wed 23 Sep 2026 21:01:01 +0000
Manifest next update:     Thu 24 Sep 2026 21:01:01 +0000
Files and hashes:         1: ViAGgGMP8tjX4dX7fa8-4EuXDPI.asa (hash: iudEKv9JULJb4ZORQPgBjMDE7t10hoMYz/3tClWkHX4=)
                          2: jXskLMdAYjU4IyQFjJHa_GOZACY.crl (hash: O2tCYK+1NxUQRyOe+tT4TcWAST4ZmwawpS8hWlgfC3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:65:9f:75:ef:c6:72:98:7a:ce:12:da:0c:9f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d7b242cc7406235382324058c91dafc63990026
        Validity
            Not Before: Sep 23 21:01:01 2026 GMT
            Not After : Sep 24 21:01:01 2026 GMT
        Subject: CN=d1998698ae1a8ead1ecc5f5ec109d1670a014b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bb:c0:60:1e:b2:b0:43:2d:79:0a:34:26:13:
                    53:24:3e:52:0e:6c:7a:9b:81:32:86:95:c0:7b:16:
                    54:20:4a:15:9b:e9:9b:09:2b:0b:7a:2e:a4:16:37:
                    0a:c9:c9:52:bb:d1:0d:2f:86:cd:a1:4e:7c:51:2f:
                    4e:35:d0:7f:cf:10:ee:2e:34:df:1b:4f:fa:88:1d:
                    85:b7:bb:e7:9a:ad:09:a3:6a:15:02:5b:71:a5:b4:
                    93:fa:e3:ac:c6:93:18:e6:6e:d0:a5:b5:3e:74:8b:
                    db:7f:77:48:a5:9c:90:0a:80:bf:a7:45:da:76:e7:
                    3d:ba:86:50:c0:fa:57:0b:fb:28:04:b5:68:9e:94:
                    d3:ad:eb:b8:4c:cc:dc:06:88:55:3c:05:75:c5:29:
                    56:d0:fe:f6:91:56:5d:e1:15:df:88:ab:52:ad:6b:
                    dd:20:d8:cb:dc:7b:e9:6c:ba:7e:46:d9:19:fc:e9:
                    5f:82:73:99:49:36:8e:db:f4:75:53:0f:c2:97:70:
                    76:27:b5:29:90:19:f7:d5:04:db:7f:f6:7c:da:42:
                    3a:42:b2:e0:ee:20:41:5a:eb:0b:6b:f3:16:37:0f:
                    8f:95:35:02:9a:1e:af:d1:f3:89:50:a2:b2:76:cb:
                    c1:cf:3d:7c:72:d8:77:c8:c5:cb:56:fd:eb:83:bd:
                    09:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:99:86:98:AE:1A:8E:AD:1E:CC:5F:5E:C1:09:D1:67:0A:01:4B:13
            X509v3 Authority Key Identifier:
                keyid:8D:7B:24:2C:C7:40:62:35:38:23:24:05:8C:91:DA:FC:63:99:00:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:df:2b:33:34:12:0f:57:cc:e1:0e:3b:a6:1f:a0:18:33:37:
         ec:09:a1:cc:8a:d4:28:06:d4:2c:c3:d4:39:83:8e:a3:38:38:
         0f:e4:98:ed:89:f9:4e:00:b9:9c:a4:f4:ae:c8:57:12:c2:13:
         a4:73:4f:78:69:d4:c5:a3:6a:20:d6:41:ff:fa:f6:69:cb:cb:
         fe:25:94:38:2a:5f:80:16:31:e7:86:e9:d4:7a:e0:9f:a0:ff:
         e5:94:36:bc:ec:4d:d7:cf:c7:7a:03:b1:8f:44:89:6d:93:6f:
         36:7e:ea:ec:e8:bb:2d:c6:32:40:96:e8:c1:df:d9:17:41:65:
         88:88:45:f5:28:9e:f4:00:ed:b6:c7:cb:90:63:ea:c9:0a:ac:
         ba:40:e1:ce:fb:18:fe:75:e7:42:b2:2f:3e:60:83:8c:31:0d:
         cd:59:6e:2e:70:dc:4f:bf:3c:e3:17:19:e0:32:d4:a4:07:b3:
         0a:a5:ef:3e:8e:de:dd:22:ae:f7:b4:4c:58:3f:3f:b6:7b:60:
         5e:0c:5c:96:e6:fa:3f:77:0c:77:f7:b0:ed:6c:e5:92:14:32:
         f7:f2:47:f6:df:fc:87:91:2a:0d:ee:de:72:ab:2a:16:8b:f0:
         0c:d1:11:b2:ca:8e:e3:42:4c:14:e9:26:64:17:2d:27:ed:3a:
         22:fc:7e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:30:17 2026 by rpki-client