Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File:                     JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier:          owO2nmRuzpsk1mFPV9IwFVsmYkQqS+StyEr+zBcUK2U=
Subject key identifier:   8B:5F:C2:6A:E3:4B:37:FC:08:04:4E:AB:2E:F4:59:BA:75:D9:21:8A
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer:       /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial:       01A10701A0C113AB308BE0C1BD3B8A1320F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number:          094E
Signing time:             Sun 04 Oct 2026 13:01:49 +0000
Manifest this update:     Sun 04 Oct 2026 13:01:49 +0000
Manifest next update:     Mon 05 Oct 2026 13:01:49 +0000
Files and hashes:         1: 13QEtilMsPvjSBACtmSM2gevovs.roa (hash: 7sZAAEzQHgY8dc7AwJ5Zb9+RwpGZZztjrIKtYajzllU=)
                          2: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: 6vxlturo++EXRnFDFqzfk/1Zm2b4UcLwvrUJV12+ZtQ=)
                          3: UvLYNIhvwJQmFVsOPpU_BD36ddY.roa (hash: yXxmCleC93S0pqurn9Uelv8pljT932UA9IhlOEdPEeA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:01:a0:c1:13:ab:30:8b:e0:c1:bd:3b:8a:13:20:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
        Validity
            Not Before: Oct  4 13:01:49 2026 GMT
            Not After : Oct  5 13:01:49 2026 GMT
        Subject: CN=8b5fc26ae34b37fc08044eab2ef459ba75d9218a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:f8:86:bc:18:0d:ae:c1:d9:62:55:af:61:
                    3c:b6:6f:78:1b:b0:d2:aa:3c:78:2a:af:70:36:b9:
                    ae:f9:7f:21:5b:fd:aa:34:c6:0e:ba:c2:d8:b0:f4:
                    c4:19:c3:41:89:34:20:6f:c1:58:e5:82:b3:01:9b:
                    b3:cc:8d:1e:cf:b1:5f:56:89:07:c5:21:5a:de:72:
                    f2:c2:11:a6:20:60:e9:a0:a8:60:66:f6:d5:bb:5d:
                    22:25:95:19:47:9f:db:f5:3f:c4:62:0a:d0:8d:c3:
                    3b:5e:1f:32:85:b8:98:14:2b:55:d5:00:16:fb:71:
                    73:0d:21:b5:10:7b:f7:b0:23:9c:58:d8:e9:18:ea:
                    1a:cc:5e:f3:bf:01:cb:33:2b:5a:29:a3:a0:c3:75:
                    85:01:aa:d6:f4:6e:76:af:81:37:a6:4c:68:c6:e8:
                    be:1d:7a:8d:5b:2c:ac:bd:5a:8b:38:b4:bb:5f:e5:
                    7b:4b:c5:e5:b4:68:bf:08:f7:ed:26:03:3e:5d:ff:
                    0b:d3:b6:d4:0f:35:f0:29:43:e1:28:48:ce:8e:98:
                    60:b0:1a:9c:e6:08:48:fa:52:19:c9:47:00:e3:1b:
                    55:e9:71:0c:6c:c1:b0:0e:21:45:71:52:d0:51:36:
                    e2:39:2d:85:80:da:1c:e9:a1:67:10:b7:94:52:cc:
                    c7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5F:C2:6A:E3:4B:37:FC:08:04:4E:AB:2E:F4:59:BA:75:D9:21:8A
            X509v3 Authority Key Identifier:
                keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:94:b2:ed:44:f2:89:a2:07:5e:1b:c1:b3:67:17:24:a9:d3:
         9b:8a:dc:68:a4:35:43:12:b1:3f:c6:1f:b5:26:de:20:95:62:
         98:ac:31:41:1d:c6:4b:5f:f8:e1:61:45:f9:0e:1b:35:a5:ba:
         74:cd:42:99:d8:28:4c:d5:8b:f4:b0:a6:39:47:36:a8:c9:36:
         fa:6b:e4:56:f8:9d:39:18:a1:e9:32:fe:91:5b:d8:cb:a6:cf:
         5a:cb:3f:e2:87:f3:6a:b4:46:5c:36:22:a2:91:d2:5d:65:6f:
         46:96:9f:c4:18:d9:67:a7:55:0c:1d:42:b7:00:41:a2:59:ac:
         87:f2:39:b5:51:ad:99:16:cf:89:e0:b1:0f:2c:a6:e3:2c:46:
         1b:0d:f7:5b:0c:14:ee:56:ca:3d:56:e4:0d:59:ca:05:18:31:
         64:26:fb:9e:75:b0:dd:c5:b9:f0:43:bb:65:0d:41:43:b0:14:
         37:82:8c:ed:d6:9d:db:36:0b:34:37:55:65:ab:d3:ad:c9:ce:
         f6:fb:99:e4:44:2e:74:14:20:e4:36:2e:ac:6e:53:f6:e8:17:
         c7:71:d5:3f:67:9f:73:55:03:bb:1e:e6:45:24:16:0e:fd:ed:
         12:38:13:6b:83:dc:c0:85:47:f8:53:d7:5e:8a:08:b0:8b:c5:
         3b:57:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:10:19 2026 by rpki-client