Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
File:                     jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft (raw, json)
Hash identifier:          RsIoIQrTxJOomPveyfR0Gmhu+FSGyxzvqvIfg5gefWU=
Subject key identifier:   DA:EC:AD:2E:E4:CC:7C:79:42:50:60:34:9C:CF:C6:F4:B4:FC:E3:E4
Authority key identifier: 8C:2B:C6:8C:6B:18:01:DC:43:03:3F:76:FC:A7:35:C7:D8:46:79:E3
Certificate issuer:       /CN=8c2bc68c6b1801dc43033f76fca735c7d84679e3
Certificate serial:       01A1DD5DF4CA967226CEDD5DC1BD2949C119
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
Manifest number:          0164
Signing time:             Sun 15 Nov 2026 04:01:24 +0000
Manifest this update:     Sun 15 Nov 2026 04:01:24 +0000
Manifest next update:     Mon 16 Nov 2026 04:01:24 +0000
Files and hashes:         1: Tj-2zHDfL3Pm8wXS0UwNWI0Hm20.roa (hash: rYP1Gh9xmcWC06XPLj4CF87qroyF6GWHDQDHGo84ucQ=)
                          2: jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl (hash: 08HtelZMpOViE+QMV3LhDhfKZpQfP5s9/VmOGk80aHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 04:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:5d:f4:ca:96:72:26:ce:dd:5d:c1:bd:29:49:c1:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c2bc68c6b1801dc43033f76fca735c7d84679e3
        Validity
            Not Before: Nov 15 04:01:24 2026 GMT
            Not After : Nov 16 04:01:24 2026 GMT
        Subject: CN=daecad2ee4cc7c79425060349ccfc6f4b4fce3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:b0:6d:01:e5:fa:d8:c8:f1:93:44:a9:14:
                    90:03:10:be:b8:2f:2c:ef:80:ab:23:21:b9:fc:fd:
                    10:8d:9f:9a:84:22:48:92:b6:9d:8f:39:e2:a8:da:
                    b2:33:92:2f:bc:7b:fd:e5:96:44:69:c6:5a:39:5e:
                    f2:8b:96:cb:97:97:67:d4:d2:ca:5d:87:20:58:4f:
                    0d:fd:2b:a5:7e:46:48:64:6e:1d:81:01:c3:c0:30:
                    78:8e:07:42:48:43:41:dc:11:37:f8:a4:03:29:cf:
                    41:2a:23:0a:ea:ed:1c:19:1c:7d:25:6b:f6:00:28:
                    2b:89:93:58:54:b6:56:5a:b8:71:66:2a:c2:b6:40:
                    93:7c:1c:09:c2:f8:d5:41:27:42:20:a5:71:b9:e9:
                    ae:04:9f:9b:e7:84:61:42:09:f7:e4:66:31:72:a9:
                    c9:17:00:24:4d:54:9e:8d:94:65:5b:12:1e:9b:cd:
                    12:e6:fe:ca:74:2a:3e:dd:fe:06:6f:3c:f8:58:6d:
                    c8:d1:86:e0:a8:64:0d:52:fd:51:8c:da:e0:be:73:
                    55:4f:f0:94:17:2f:55:67:28:15:9c:dc:36:92:36:
                    73:61:b5:f5:76:6e:00:52:b9:6a:d0:d0:94:24:97:
                    1b:a4:7c:36:9c:21:61:2e:98:e4:83:1d:4b:24:c1:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EC:AD:2E:E4:CC:7C:79:42:50:60:34:9C:CF:C6:F4:B4:FC:E3:E4
            X509v3 Authority Key Identifier:
                keyid:8C:2B:C6:8C:6B:18:01:DC:43:03:3F:76:FC:A7:35:C7:D8:46:79:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:3b:d8:b1:62:f0:f1:f7:f4:09:d2:7f:a9:44:42:2f:98:11:
         8c:66:e0:e2:3c:44:aa:f2:e1:44:86:d8:b3:6b:7f:1c:75:f5:
         38:aa:e3:93:69:85:8d:87:6b:69:00:80:46:f3:10:09:46:b7:
         0d:4f:f9:c6:49:47:e6:0f:c7:70:37:1c:be:ce:cc:c9:1a:2e:
         90:eb:cf:fd:40:c7:60:d3:26:ae:c4:c6:1d:2c:da:e4:8e:b6:
         ca:2d:74:6e:f8:67:59:cf:99:28:b1:c2:0b:65:2b:67:a1:6a:
         db:7d:0d:c5:ed:7c:0c:ee:27:d7:83:50:88:fd:e1:70:0e:57:
         eb:fa:ac:10:ac:90:84:2f:79:bf:2b:8c:07:de:fb:8c:ce:b3:
         eb:ed:41:1f:a5:f5:78:d8:32:5a:2e:0d:7f:b6:b8:72:89:7e:
         a5:2c:f6:4a:53:f4:87:f8:27:18:12:96:0a:7f:17:bb:9f:76:
         66:ea:c2:5c:95:ed:cd:b1:7a:7c:52:0f:7b:59:9a:16:a8:c1:
         d5:b1:6d:1a:d7:b1:dd:03:d9:aa:d2:93:03:39:15:f4:74:ad:
         0d:8c:7a:10:e9:66:72:17:6f:13:86:a7:b7:63:87:dc:ea:87:
         b4:9a:e8:c8:71:eb:fb:88:c2:b7:cf:f6:9a:93:f5:a3:0d:7f:
         41:ae:c2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:17:54 2026 by rpki-client