Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
File:                     j9-HylMGV5hEdkUlX4KbU7wdohU.mft (raw, json)
Hash identifier:          BOGXC1kUxIvyBKRD8jDWxgxAse9UU5rQqelFGp8H/8Q=
Subject key identifier:   EB:62:41:4E:93:07:48:6C:AF:FD:FD:F1:B4:91:24:E9:DD:9B:2F:DF
Authority key identifier: 8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
Certificate issuer:       /CN=8fdf87ca53065798447645255f829b53bc1da215
Certificate serial:       01A0E8F6C946889D4271F63C70717A31DF5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
Manifest number:          09C4
Signing time:             Mon 28 Sep 2026 17:01:22 +0000
Manifest this update:     Mon 28 Sep 2026 17:01:22 +0000
Manifest next update:     Tue 29 Sep 2026 17:01:22 +0000
Files and hashes:         1: aiNfAtwLgUKsL4qA7akVZhQU1bA.roa (hash: Hw2VjFxuxUBTnIvwm5B0o1nhy9vvmSj+hAxZVQnZIws=)
                          2: j9-HylMGV5hEdkUlX4KbU7wdohU.crl (hash: eHDvP8cBiaVG1ppmqAf1nfllU7C0xwbDRkpY2lXmr9w=)
                          3: wRelCGO5kr4PionuAw4TmZeTb24.asa (hash: R4hwvYPLQTU3+ZW26hz18/RfC35G0WghkbbOHFf/yeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 17:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:f6:c9:46:88:9d:42:71:f6:3c:70:71:7a:31:df:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fdf87ca53065798447645255f829b53bc1da215
        Validity
            Not Before: Sep 28 17:01:22 2026 GMT
            Not After : Sep 29 17:01:22 2026 GMT
        Subject: CN=eb62414e9307486caffdfdf1b49124e9dd9b2fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:52:60:37:d0:52:25:f4:81:f1:1e:3f:e6:b5:
                    0d:56:6e:c4:9c:cb:bc:38:ea:e4:c9:d0:30:f4:0f:
                    33:b5:63:9d:92:cf:16:db:ac:3c:80:b7:04:d9:a0:
                    08:a1:d3:64:c7:5d:46:b8:3e:3c:73:44:86:41:7f:
                    0a:3c:3e:c5:33:eb:7f:e6:cf:84:47:65:b3:9b:f2:
                    34:c8:82:ec:31:46:a8:45:ae:33:8f:b0:70:db:72:
                    78:54:cb:cf:ef:eb:8a:86:1a:42:76:6d:7d:e7:41:
                    cb:18:50:c0:f7:e1:d7:fa:09:29:ae:09:9f:e3:6a:
                    94:04:39:f7:cf:4d:8e:b3:85:b3:72:be:66:d0:ad:
                    22:d8:90:6e:c6:7a:60:84:b1:e9:53:e8:56:0d:e3:
                    b9:ba:3b:b2:1b:8f:ee:1c:4d:d1:e8:d6:6c:b5:aa:
                    f4:63:a6:d1:0c:cd:b5:e0:f0:df:58:b0:dc:f8:7b:
                    8b:c7:a1:a7:72:82:9f:c0:fd:b8:45:e1:b5:fd:b9:
                    4c:b4:be:b5:0f:e0:4a:98:32:60:99:c6:cd:38:e0:
                    40:04:c2:c1:5f:49:26:e7:d4:d2:19:bc:db:b7:62:
                    d6:d3:a9:b4:53:ff:8f:79:d4:57:9e:96:68:08:d2:
                    23:e6:3c:02:be:47:f6:b0:21:35:a1:3c:e3:25:b4:
                    cc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:62:41:4E:93:07:48:6C:AF:FD:FD:F1:B4:91:24:E9:DD:9B:2F:DF
            X509v3 Authority Key Identifier:
                keyid:8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:fb:72:5c:e6:f0:29:df:63:b4:c7:ab:86:01:79:17:f9:0e:
         ae:08:9c:2e:0f:e2:6f:a1:69:90:73:90:54:be:f4:22:86:bb:
         5c:37:cc:41:ac:b5:bb:c4:a2:3d:ac:a2:d9:d2:6e:46:a7:1e:
         24:43:a8:1d:09:90:fa:21:94:e0:bd:0d:9c:69:bb:e7:6c:0b:
         ea:94:e1:9a:3e:8b:d9:90:70:a8:f2:9e:dd:d6:80:27:82:47:
         fe:18:ab:63:12:9c:a6:f8:58:bb:de:04:0c:ab:aa:41:64:52:
         3a:67:bf:41:91:ee:df:92:59:db:54:a9:1b:fd:a8:50:60:c4:
         c9:88:28:86:33:7e:8e:a4:c0:e3:82:b8:f1:36:30:8c:45:4d:
         5b:10:bf:a6:8d:28:08:e0:40:fd:00:fa:78:12:50:28:59:3d:
         e0:6c:be:f0:11:ea:e4:da:6d:b6:6a:fb:ab:bb:0d:35:e8:9f:
         ec:8b:ed:5f:ff:f3:f2:ea:4e:30:45:7a:fe:ef:24:b7:5a:ce:
         ee:5d:3e:ed:00:24:af:df:48:56:d8:15:d3:90:06:ca:3c:1b:
         a8:89:59:49:da:6d:23:00:69:5d:a0:42:ba:93:53:74:48:06:
         1d:a7:4f:6e:1d:6b:c1:47:66:2c:1f:38:09:60:4f:4f:d9:fa:
         10:41:0d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:01:57 2026 by rpki-client