Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
File:                     Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft (raw, json)
Hash identifier:          ARTssMo3MRDeo6cwoBHf4VnUgNmPT7vYQejhgYmAYxM=
Subject key identifier:   54:6E:60:CF:62:9A:49:11:98:EE:D8:61:E9:60:4F:6B:B0:4F:72:EA
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Certificate issuer:       /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial:       01A0D61514BF285CF4D24664AA8D392C6C44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
Manifest number:          11D3
Signing time:             Fri 25 Sep 2026 01:01:40 +0000
Manifest this update:     Fri 25 Sep 2026 01:01:40 +0000
Manifest next update:     Sat 26 Sep 2026 01:01:40 +0000
Files and hashes:         1: BmTt_K_BLwv-pJIWhVhf0HoNBHI.roa (hash: 7LYJkFKH+ULhI+BQpkEXahBALgXPwOMMlmmdsz27u58=)
                          2: Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl (hash: kHdGeVJq58kyumlC1ZirP9uk7J/MF2BDFwAqUMNiZYE=)
                          3: Vgo75o1byZ75srMc1A2hc4DB5JM.roa (hash: qe0LN4rfy4gZig75QZhjlSmuXCiHXIfLzzagGqaLMRA=)
                          4: z3jiOX0l8XrsI6phSwPZ5D4UGqs.roa (hash: CcVgaMQKxvkfawhUGWzE3K5Xi3BSkw5Z4uMhoNWWbsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:15:14:bf:28:5c:f4:d2:46:64:aa:8d:39:2c:6c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
        Validity
            Not Before: Sep 25 01:01:40 2026 GMT
            Not After : Sep 26 01:01:40 2026 GMT
        Subject: CN=546e60cf629a491198eed861e9604f6bb04f72ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:02:24:c1:64:a4:aa:ae:25:71:c5:ea:64:
                    a6:46:bd:3a:a0:71:e8:28:51:cb:93:a4:ce:61:ad:
                    91:ff:90:5e:11:4a:46:90:08:bf:1d:d5:b2:e0:81:
                    38:a8:7c:b0:75:1e:b9:c1:f7:be:b9:8f:66:d9:dd:
                    2b:02:b1:ac:35:1d:df:d4:8f:be:a9:75:3f:43:46:
                    05:35:4f:16:13:f1:b9:6c:2c:57:4b:ed:1e:13:8d:
                    66:0c:c2:47:da:40:14:d4:32:10:c7:b8:9a:5f:69:
                    14:ab:6d:f7:f7:fe:d5:27:d1:d6:c8:ba:7a:f8:30:
                    2e:3c:12:83:1d:39:66:f7:90:53:41:e4:44:1b:2b:
                    23:86:78:20:06:06:bc:00:d3:e6:d6:76:47:64:85:
                    c4:e1:35:03:ec:d5:01:6a:24:3b:63:e0:5c:59:56:
                    2f:56:26:0b:fd:16:ef:f2:dc:8a:9a:6d:da:27:99:
                    a6:18:cf:05:19:ea:6c:80:3a:e8:dc:0c:6f:e2:28:
                    74:64:01:2f:e6:13:b4:d1:d6:fd:4b:2c:96:15:0f:
                    0f:d2:7d:5f:74:e5:40:8c:69:c4:60:bb:bb:16:6d:
                    c0:0b:47:43:29:79:81:53:1e:b8:64:ce:d1:c7:52:
                    13:f2:66:ca:46:88:c6:b4:11:df:ab:30:ae:27:0b:
                    b7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6E:60:CF:62:9A:49:11:98:EE:D8:61:E9:60:4F:6B:B0:4F:72:EA
            X509v3 Authority Key Identifier:
                keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e6:68:20:af:1d:11:d3:ab:f1:c9:72:04:1a:fd:f3:65:e6:
         4f:4c:b8:db:bc:0e:29:a8:da:ed:28:fa:c6:39:85:ad:fb:14:
         b2:e8:c7:2e:dc:46:67:ed:da:78:2a:8d:f2:29:ab:3f:c5:2d:
         51:1b:67:70:c2:5e:1b:d3:0b:e6:c3:5c:1a:70:53:3b:93:8b:
         24:1c:dd:9e:07:da:f7:f6:2e:0b:49:bf:0a:e0:6b:73:37:fd:
         d4:8f:ab:08:87:45:d9:7a:3e:aa:c7:7f:f3:50:b2:04:9e:7f:
         fa:44:30:fb:c3:cc:5d:41:33:fd:5c:7e:68:b5:37:4c:d5:17:
         b3:99:83:3d:24:5e:0a:11:08:c9:30:c1:ae:dd:bf:81:c4:82:
         a1:be:13:3d:0b:7d:c3:d4:a7:94:9c:f5:b7:03:db:b7:0c:ba:
         93:5e:00:3d:18:e5:ee:22:6c:8e:74:ae:4c:fe:52:a8:ef:55:
         ee:68:37:36:4b:41:18:53:37:4a:15:9e:24:4d:62:40:aa:97:
         03:49:18:b6:98:67:6d:78:f0:8e:60:40:1b:2c:45:6c:5f:82:
         ff:97:e2:1b:7f:93:02:0b:19:3d:a5:ff:8a:9f:b8:a2:fc:fb:
         3e:47:3b:9b:d4:1c:57:60:ae:e8:af:fa:3f:ed:c2:a1:9f:cb:
         e2:a3:80:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:21:52 2026 by rpki-client