Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
File:                     jYdAeZyRwmMKgJIXjbgk86iJp18.mft (raw, json)
Hash identifier:          ugu06tWcxN/h9dwk1BLPzk0K3ZpATERS72Q15VoSVA8=
Subject key identifier:   08:CE:58:EA:CE:DA:72:07:C8:F7:40:F8:29:D2:97:45:6B:11:1A:65
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Certificate issuer:       /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial:       01A12FFC92FCC315CF1D364B30B95CDAAA2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
Manifest number:          1A9C
Signing time:             Mon 12 Oct 2026 12:00:43 +0000
Manifest this update:     Mon 12 Oct 2026 12:00:43 +0000
Manifest next update:     Tue 13 Oct 2026 12:00:43 +0000
Files and hashes:         1: Qx0ddBKlSvnACpzjugQJrfWkEs4.roa (hash: aJD4jYhJCqk7+8Q4F//sAqddVJklJ5JHNsKetWjBmH4=)
                          2: dElS2LHmvzOJL3jvJ8t1FWNOXRQ.roa (hash: pKoUZvmEW4liSwgxySiejWpEorumEVEvbMzgYr8Wr84=)
                          3: jYdAeZyRwmMKgJIXjbgk86iJp18.crl (hash: Ixdv3k54o0kJmDgJipCsqgxehxREZpdtxq0pV40ZjeY=)
                          4: lKM1gHFyylwdRUKMaY5fLo9cQo4.roa (hash: s0i27z26ycWaj2Sw/lN75r12wdUfV6zW3S6uMy4zqRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2f:fc:92:fc:c3:15:cf:1d:36:4b:30:b9:5c:da:aa:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
        Validity
            Not Before: Oct 12 12:00:43 2026 GMT
            Not After : Oct 13 12:00:43 2026 GMT
        Subject: CN=08ce58eaceda7207c8f740f829d297456b111a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:38:44:56:fb:98:24:a1:16:1f:03:00:7f:
                    7c:3e:a8:13:bc:b4:20:45:df:67:09:38:0e:75:8c:
                    f7:5c:75:a8:1e:d6:b3:21:30:bb:ea:cc:12:66:ee:
                    65:0a:7e:a5:8e:60:52:08:c6:b6:62:86:18:3b:95:
                    2b:63:71:d1:4d:68:54:70:aa:46:30:c4:9f:8f:65:
                    dd:6d:66:0e:86:48:a8:c2:3b:bc:79:66:95:96:9d:
                    4b:b8:35:a3:45:ec:db:5b:0e:b4:c2:25:eb:79:17:
                    13:3d:3d:71:33:83:fd:9c:c1:c6:2a:b3:c6:36:44:
                    7b:67:79:a9:9f:c2:39:a8:b9:fb:41:ce:91:dc:52:
                    c9:e9:50:71:fd:00:a7:a9:6d:89:05:b9:51:ea:54:
                    1f:77:df:a9:2d:4f:68:85:80:2a:34:5e:37:69:5d:
                    6f:f6:4f:3d:36:75:d3:5e:29:26:f0:d1:ea:6c:59:
                    13:47:a4:c4:18:09:8d:5c:fa:be:88:f0:36:62:bb:
                    9e:94:68:4a:53:9b:20:46:ab:77:73:4c:c6:a7:60:
                    e9:b4:d1:87:23:f4:ff:a2:dd:75:c0:0f:01:7e:5c:
                    96:b5:5d:58:a8:cd:1c:37:56:bb:dd:fa:77:6a:7a:
                    09:06:9e:d6:17:26:20:37:80:da:90:b8:2f:7f:18:
                    bf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CE:58:EA:CE:DA:72:07:C8:F7:40:F8:29:D2:97:45:6B:11:1A:65
            X509v3 Authority Key Identifier:
                keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:19:f9:02:c4:34:15:70:84:78:c7:b2:4b:e9:f3:1a:b4:21:
         2f:ce:bf:ea:a9:cb:ce:b9:93:26:5c:73:55:1d:b5:5a:81:3b:
         ec:9e:cc:67:48:b5:fd:8d:b5:3b:d2:72:1c:9b:09:d2:73:52:
         b6:cc:48:ba:6d:c9:4a:75:e7:da:63:4d:0e:b2:a1:d3:0d:e8:
         1b:db:56:02:19:6c:e3:75:8d:66:06:b0:80:61:30:7c:f7:bd:
         65:da:ce:da:29:7b:a7:5b:61:84:4c:27:5d:61:f0:d9:5f:2a:
         aa:e8:0f:76:eb:18:1f:30:bb:46:c4:3d:82:f2:d0:6a:18:ad:
         55:ab:34:b0:f9:df:45:64:2f:87:34:21:9f:f4:5b:b5:8f:84:
         50:b2:3d:a0:a5:7c:20:ad:a4:6c:d2:d1:f0:35:c9:dc:f2:1c:
         08:4a:0c:a7:13:b3:e6:96:7d:c0:13:e0:3e:d3:cb:6d:ce:90:
         d2:c2:47:63:07:1c:72:cf:65:f5:e1:a4:03:50:e3:1a:30:29:
         5c:ce:c9:84:91:61:55:d2:50:f2:26:a8:cb:7c:ef:06:4c:98:
         1d:da:d7:7f:3f:8f:8c:6d:14:f2:91:bd:d3:f2:e6:b3:de:8c:
         dd:2e:65:bc:f6:6b:62:c9:30:d1:eb:75:4f:4c:df:d3:97:67:
         47:39:b4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:48:05 2026 by rpki-client