Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
File:                     0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json)
Hash identifier:          ggBVg1jtFQeQJ7DWO4wV7pLBctR1zDwRkgtjeDlpUqc=
Subject key identifier:   55:87:65:EB:BD:1A:EE:47:C0:88:D5:33:BF:50:0A:FF:87:A8:8E:F4
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Certificate issuer:       /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial:       01A0CF7A732C16BF2E0B526CA550B8040425
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
Manifest number:          17F6
Signing time:             Wed 23 Sep 2026 18:15:03 +0000
Manifest this update:     Wed 23 Sep 2026 18:15:03 +0000
Manifest next update:     Thu 24 Sep 2026 18:15:03 +0000
Files and hashes:         1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: Buca+u5OWZ7sSFjkglhLpARL9HFCU1P1vCxj0MtLpZ4=)
                          2: hCJiTpNkQOc5nBabvxUw_PYHA5A.roa (hash: E9ZgbzE14hI7ZwRKXKRpHKWsp51tuudesAlPeBWMd1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:7a:73:2c:16:bf:2e:0b:52:6c:a5:50:b8:04:04:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
        Validity
            Not Before: Sep 23 18:15:03 2026 GMT
            Not After : Sep 24 18:15:03 2026 GMT
        Subject: CN=558765ebbd1aee47c088d533bf500aff87a88ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:28:a5:ad:c0:87:d3:b8:df:94:a1:20:22:d6:
                    77:2f:11:51:6b:cf:6b:57:05:ef:01:a6:ae:79:ee:
                    b5:f3:c8:a9:89:1f:d0:f9:3b:57:31:f2:47:b1:6a:
                    ab:b0:f3:b1:02:c3:be:a7:22:a0:61:8c:59:f1:be:
                    a1:e2:60:78:b3:7e:a0:ae:b4:7b:b5:5c:cc:74:ec:
                    b7:cc:dc:68:59:06:07:80:57:8f:f6:9a:e9:ef:ee:
                    33:66:7e:98:a5:28:a8:4f:3a:61:a0:ff:b8:98:e0:
                    e2:ae:cc:59:79:3b:91:bc:d9:47:10:11:e9:17:bc:
                    c9:6c:ea:c3:9a:b4:e7:72:8a:e8:c3:4c:83:c5:8a:
                    b3:de:85:80:92:7b:35:a0:25:5f:c3:ef:5c:a5:d3:
                    77:59:74:7a:77:1c:e5:79:93:90:17:d7:ac:05:c1:
                    68:c9:86:0f:34:5f:cd:32:91:cb:7c:41:58:b9:c3:
                    39:cf:92:bd:38:07:b6:33:d8:b8:db:44:22:14:03:
                    ca:ef:e1:54:f8:eb:52:b7:de:33:91:7a:3c:b3:21:
                    fc:98:aa:51:14:41:a0:0b:34:9a:d5:b9:b1:0e:23:
                    f6:27:fd:36:41:d4:dd:2d:f7:90:94:3c:68:5d:e5:
                    ee:14:18:bf:64:d8:2c:9b:d5:21:59:08:01:f7:e2:
                    cd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:87:65:EB:BD:1A:EE:47:C0:88:D5:33:BF:50:0A:FF:87:A8:8E:F4
            X509v3 Authority Key Identifier:
                keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:97:85:d5:ed:9c:0e:35:5d:f0:de:ad:18:47:77:f4:e2:af:
         ba:87:31:7b:f9:eb:fd:c5:a9:7d:3f:4a:01:84:5c:d6:04:ed:
         0f:13:7f:a5:8c:4e:fe:fa:25:c3:50:c6:28:d1:df:35:ff:e5:
         4b:eb:24:ac:8d:4c:02:47:30:9d:0f:8d:20:fb:16:63:45:e8:
         05:89:ca:c5:a2:4b:a2:36:f4:1e:df:bb:4e:ad:1f:fd:6e:6e:
         2d:d2:82:3c:4b:0e:a7:e4:47:3d:19:83:5a:c6:41:24:17:2e:
         c1:5d:95:22:c5:36:ea:27:bc:f5:20:f4:60:d4:28:e5:18:73:
         bb:14:d1:cd:aa:9b:b4:33:ee:82:2b:94:3f:92:3b:62:6a:8f:
         e0:ed:04:d8:66:42:d2:f5:88:ee:2c:9c:60:2a:4e:2f:0d:f0:
         e1:9e:df:f7:9e:6b:72:05:d1:0f:30:96:10:39:17:73:9f:99:
         4e:9a:81:8e:58:23:ae:ee:d4:df:36:57:4d:a1:03:0f:46:10:
         b2:d0:42:ea:02:9c:bb:bf:75:75:3e:5a:bc:e8:7f:2d:64:4c:
         01:18:43:cb:91:24:a6:b7:a4:0e:56:f4:b7:59:67:89:66:3b:
         47:cd:9e:ea:17:cb:58:78:f5:34:63:71:48:af:4d:42:4d:6d:
         1b:b1:ad:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPenMsFr8uC1JspVC4BAQlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTFmZThjNTQwYzQ0ZTIzNGY5YmM2NjhmOGEzYjE2NDdh
Y2RiMDYwHhcNMjYwOTIzMTgxNTAzWhcNMjYwOTI0MTgxNTAzWjAzMTEwLwYDVQQD
Eyg1NTg3NjVlYmJkMWFlZTQ3YzA4OGQ1MzNiZjUwMGFmZjg3YTg4ZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yilrcCH07jflKEgItZ3LxFRa89r
VwXvAaauee6188ipiR/Q+TtXMfJHsWqrsPOxAsO+pyKgYYxZ8b6h4mB4s36grrR7
tVzMdOy3zNxoWQYHgFeP9prp7+4zZn6YpSioTzphoP+4mODirsxZeTuRvNlHEBHp
F7zJbOrDmrTncorow0yDxYqz3oWAkns1oCVfw+9cpdN3WXR6dxzleZOQF9esBcFo
yYYPNF/NMpHLfEFYucM5z5K9OAe2M9i420QiFAPK7+FU+OtSt94zkXo8syH8mKpR
FEGgCzSa1bmxDiP2J/02QdTdLfeQlDxoXeXuFBi/ZNgsm9UhWQgB9+LN4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWHZeu9Gu5HwIjVM79QCv+HqI70MB8GA1UdIwQY
MBaAFNCR/oxUDETiNPm8Zo+KOxZHrNsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85YTNhYWMtMmE0Yy00Mzg3LWFlYTgt
MDRlNmY1NzY0YzUyLzEvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85YTNhYWMtMmE0Yy00Mzg3LWFlYTgtMDRlNmY1NzY0YzUy
LzEvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJeF1e2c
DjVd8N6tGEd39OKvuocxe/nr/cWpfT9KAYRc1gTtDxN/pYxO/volw1DGKNHfNf/l
S+skrI1MAkcwnQ+NIPsWY0XoBYnKxaJLojb0Ht+7Tq0f/W5uLdKCPEsOp+RHPRmD
WsZBJBcuwV2VIsU26ie89SD0YNQo5RhzuxTRzaqbtDPugiuUP5I7YmqP4O0E2GZC
0vWI7iycYCpOLw3w4Z7f955rcgXRDzCWEDkXc5+ZTpqBjlgjru7U3zZXTaEDD0YQ
stBC6gKcu791dT5avOh/LWRMARhDy5EkprekDlb0t1lniWY7R82e6hfLWHj1NGNx
SK9NQk1tG7GtWA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:06:37 2026 by rpki-client