Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
File:                     Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft (raw, json)
Hash identifier:          bXWGT1a90lXmudtn2LnZkTrNAQCldN4ramUW4XGUiTk=
Subject key identifier:   C0:CB:18:CD:FD:29:B2:24:92:6B:BE:05:11:83:DA:9F:27:CE:B9:5C
Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
Certificate issuer:       /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Certificate serial:       01A0DD29DE294826C8CA200711840359104D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
Manifest number:          1605
Signing time:             Sat 26 Sep 2026 10:01:43 +0000
Manifest this update:     Sat 26 Sep 2026 10:01:43 +0000
Manifest next update:     Sun 27 Sep 2026 10:01:43 +0000
Files and hashes:         1: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl (hash: Uz4AnZ+5kS4qcM6sDsQE3v2WkWOiijJIsiMxjIrBoWQ=)
                          2: o82as8Pp65IOMGZ2l9--UN04jxE.roa (hash: 1ACvBsYWfHGc1kJQlC6LwuaFRNU2JMZS6o4Vp3pXj6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 10:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:29:de:29:48:26:c8:ca:20:07:11:84:03:59:10:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
        Validity
            Not Before: Sep 26 10:01:43 2026 GMT
            Not After : Sep 27 10:01:43 2026 GMT
        Subject: CN=c0cb18cdfd29b224926bbe051183da9f27ceb95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5b:a4:6e:77:41:a0:cd:24:96:e1:13:84:70:
                    11:ad:ee:48:91:63:44:89:6a:04:35:df:aa:e2:aa:
                    85:e0:1f:d7:83:23:24:3c:c5:1e:d5:3e:b0:19:50:
                    95:98:3c:59:9e:83:39:ce:cb:9f:e8:67:7b:b5:48:
                    86:3e:46:38:5e:6c:72:cc:68:1c:a5:0d:e2:b7:e0:
                    8e:5d:d6:8d:6e:7c:d9:a1:4b:f2:ad:05:72:e1:53:
                    c2:ef:65:ae:ac:87:0d:18:23:5c:a0:45:0c:5b:f3:
                    d4:37:0e:da:dd:04:e2:0a:49:78:30:e8:36:66:69:
                    43:55:e0:f3:d4:e3:da:9d:bf:e1:7e:70:97:5d:93:
                    7e:9d:92:76:b3:8b:e6:de:08:81:5a:27:5a:25:e9:
                    95:71:ab:2a:69:fc:05:d8:d8:d6:c5:e1:7e:af:0f:
                    63:57:ae:d3:79:8f:41:03:fd:aa:fd:71:43:30:df:
                    c0:77:4c:27:1a:a0:e6:b1:04:c6:3d:ce:b7:e6:a4:
                    9a:62:11:61:f9:06:27:1a:0c:9d:8b:4b:e5:2c:3d:
                    b1:db:47:e8:02:d8:b8:13:11:5e:ec:50:6b:10:05:
                    8e:7e:28:05:c8:52:b9:7b:16:df:f2:a0:34:38:36:
                    20:50:49:0c:42:db:e3:e1:a7:60:02:76:30:f0:79:
                    4a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CB:18:CD:FD:29:B2:24:92:6B:BE:05:11:83:DA:9F:27:CE:B9:5C
            X509v3 Authority Key Identifier:
                keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:11:23:3e:a6:67:ec:02:7a:fc:dd:49:2a:05:a2:12:b2:97:
         71:52:2d:ab:fa:ac:f7:ba:35:38:55:84:bc:5c:24:17:be:c1:
         ca:6f:a9:e6:5e:49:15:f3:bc:e8:a4:c5:23:40:f2:91:e6:0c:
         d0:a8:dd:5a:f5:2e:67:2b:25:2a:22:10:89:92:3a:23:48:84:
         00:88:a3:00:9f:01:04:81:a7:1b:58:c4:b1:ca:65:87:36:29:
         a4:b3:4a:68:76:be:8b:cc:ac:7b:26:32:78:40:08:b3:a7:27:
         21:51:b4:b8:64:39:d0:2a:60:e3:95:8f:80:90:d3:9b:a9:c0:
         9b:c3:d9:3f:af:fe:93:73:a3:5d:cc:2d:20:eb:3c:6c:6c:a8:
         d5:92:e7:ce:c8:3f:fb:58:be:87:72:1e:d8:47:33:09:70:ae:
         c7:73:f1:2b:75:0b:e6:f5:f5:ca:0c:6b:64:7c:2a:63:b5:1a:
         5d:dc:47:f1:d3:8d:b2:89:9a:0e:98:2b:75:5e:26:6b:79:d2:
         ca:1d:97:8f:d6:38:35:64:79:70:1a:64:0f:50:ed:77:5f:eb:
         59:45:35:44:42:19:93:f9:36:7d:00:8a:ad:80:e4:60:18:ca:
         d3:75:04:43:8f:56:23:2a:64:2b:e2:ca:dd:9b:3f:9c:d0:75:
         3f:40:c0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:50:34 2026 by rpki-client