Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File:                     j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier:          F1pTpp+njenvkC9m6LpLGlnxgixYOmLuGIJLd4O2Bv0=
Subject key identifier:   A9:F1:78:F9:E3:72:8A:77:C7:77:37:0D:89:6D:15:03:64:CC:70:02
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer:       /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial:       01A0E13D69977D39C038DACC364C9AE76FC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number:          1A78
Signing time:             Sun 27 Sep 2026 05:01:33 +0000
Manifest this update:     Sun 27 Sep 2026 05:01:33 +0000
Manifest next update:     Mon 28 Sep 2026 05:01:33 +0000
Files and hashes:         1: OZhWUwGTJJgySO4m4Q-1c3zg7BI.roa (hash: fGvKZaOlhgdkgyxl6/1AuWFmm3crcDp6VjKR5yKK6Ms=)
                          2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: oXRB0GYCJMHDA9DAzu7jZOILlJkU8f+qyI4tq7Qe/68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:3d:69:97:7d:39:c0:38:da:cc:36:4c:9a:e7:6f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
        Validity
            Not Before: Sep 27 05:01:33 2026 GMT
            Not After : Sep 28 05:01:33 2026 GMT
        Subject: CN=a9f178f9e3728a77c777370d896d150364cc7002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f6:ce:17:a9:58:b8:4c:bf:62:7a:a0:ec:ea:
                    d8:8a:d3:63:1f:0b:1a:72:9d:db:a7:04:04:b3:32:
                    38:16:d5:2b:63:9c:c5:56:35:06:8c:da:f9:8f:5f:
                    9b:3b:8e:aa:e2:99:a0:cf:9f:3e:70:da:9c:78:7e:
                    c1:a6:8b:ab:8a:70:27:cf:82:3e:1e:b1:e8:07:6f:
                    e7:6d:3b:0e:a7:68:ff:48:37:38:7f:78:8a:d2:1d:
                    cd:84:7e:8b:8b:df:a6:ec:75:16:c7:b9:9f:fe:f0:
                    16:85:10:bd:e2:5e:ad:31:64:57:e9:93:81:1e:b3:
                    ef:2c:4a:2f:48:38:9c:d5:b4:fc:d0:99:2f:07:14:
                    f7:cd:1f:1a:4f:6a:62:f1:49:e1:75:b8:09:09:7d:
                    f9:2a:6a:21:21:da:52:97:70:23:35:f9:1f:64:c7:
                    6e:9e:f9:2f:35:d8:56:8e:29:7a:6f:1d:fa:dc:58:
                    80:f3:63:75:39:4b:d0:51:89:14:71:05:bd:bc:6d:
                    a5:7e:8f:f6:0f:72:3e:c0:e4:a8:07:df:91:80:fc:
                    1c:87:ca:e9:eb:f6:e7:33:46:6a:bf:ad:da:e7:75:
                    21:e9:07:69:11:8d:86:c3:c3:90:f8:5e:cd:2e:e0:
                    f7:39:59:cb:cf:65:db:b8:18:0b:4c:d1:69:b0:9d:
                    6b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F1:78:F9:E3:72:8A:77:C7:77:37:0D:89:6D:15:03:64:CC:70:02
            X509v3 Authority Key Identifier:
                keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b2:5f:ec:5b:c3:23:e6:96:ee:54:1a:58:70:8e:7b:eb:f2:
         d0:09:21:0e:15:c9:45:29:cf:48:d1:17:9a:46:ae:a2:af:30:
         e4:84:a5:6b:ba:dd:7b:7a:d4:ae:44:86:d9:b7:08:88:08:84:
         f1:8b:f8:63:36:77:e7:4d:9c:98:a4:01:ff:a2:99:54:5b:cf:
         0f:c2:68:7d:2d:7a:2a:d9:82:71:0d:d1:c7:f3:f6:4f:c2:0b:
         78:41:53:9e:4c:f6:d3:8b:9e:d7:a2:8e:68:df:98:4e:1f:cd:
         39:47:01:b0:0c:05:41:e7:05:77:18:b9:bb:a5:1d:85:69:78:
         fd:83:5a:59:c2:fb:cd:c5:e9:e6:73:db:60:36:e9:9f:8c:c5:
         dc:5b:6b:ab:49:31:2f:3d:61:73:57:c7:07:48:fd:46:a6:37:
         91:fa:ac:9b:25:17:bb:ee:fd:99:ad:9f:82:ba:10:83:69:50:
         74:cd:ca:b6:8d:79:4e:50:f5:ec:05:e6:fa:b2:fd:f6:e2:e9:
         de:cf:eb:9e:2e:88:16:6a:04:f4:96:ac:46:18:a5:94:a6:ae:
         71:db:ea:79:cc:9a:83:a0:10:75:b4:cc:e7:05:5e:3b:a8:ee:
         65:82:1f:0e:73:bd:58:3d:dd:70:c0:c0:7d:f1:32:84:b7:1e:
         ca:fc:62:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:17:16 2026 by rpki-client