Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
File:                     jSmNY5cKsDzfv1FPoOjtITEJhfE.mft (raw, json)
Hash identifier:          XfVAzYatjknUgqT6j/5MlL172fB1hpHdiA/DsKKUJSw=
Subject key identifier:   92:B5:80:50:BD:3F:D1:34:A4:3C:46:18:26:AC:65:D6:CB:91:29:98
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Certificate issuer:       /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial:       01A0D79630236E112CA1EF8A7A67FB230655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
Manifest number:          04D3
Signing time:             Fri 25 Sep 2026 08:02:19 +0000
Manifest this update:     Fri 25 Sep 2026 08:02:19 +0000
Manifest next update:     Sat 26 Sep 2026 08:02:19 +0000
Files and hashes:         1: 3W5LTxrMaiJELX4kr8QstTlBWOo.roa (hash: dd3yKGhLOhOsRnmHmLH8iiQEZ2KKaU0CStYDn90Tkac=)
                          2: Av7Tod1G7bVf0RLE6AF_1uspRQ4.roa (hash: PKJbe7R30nXLIKZVxr4PxR3DgHe3p9fuHQbiz5PGfP0=)
                          3: MZF_p3jMKGfUhISu7itbGm8fVPc.roa (hash: 1+Bei67+jd9KSPOgvA1EOkdwYvs4YCuptX/4MdFdYpM=)
                          4: Yf20QMXkj8GFJGSLeIPw0rNOpPU.roa (hash: aWACKntsxHH3Va6cTR9cG1/KJpBjS153dDHspJ2qJ94=)
                          5: eeoFWs0EeMzDNXzBgME3-Q7Zi40.roa (hash: Ym0Iu/9+fRHj5itQ0uhzHv3jsEKnG3SriEsKFuazFW4=)
                          6: jSmNY5cKsDzfv1FPoOjtITEJhfE.crl (hash: AcY6ADf5Tt2faNYdJaJ91U/D/jOXU7RrxlGQeCAxph0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:96:30:23:6e:11:2c:a1:ef:8a:7a:67:fb:23:06:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
        Validity
            Not Before: Sep 25 08:02:19 2026 GMT
            Not After : Sep 26 08:02:19 2026 GMT
        Subject: CN=92b58050bd3fd134a43c461826ac65d6cb912998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a2:41:a0:31:fc:ad:00:14:c1:a3:59:2f:b1:
                    48:32:3e:3d:8f:4d:17:14:48:e2:3e:0d:3d:c4:e0:
                    e5:e2:68:b3:81:68:ca:a1:b3:6a:d3:bd:e8:89:0a:
                    ad:13:6a:ba:96:8b:14:00:d8:a8:c2:89:a2:6f:77:
                    ff:94:58:c1:7a:c6:9f:a9:a4:d4:6d:eb:95:69:16:
                    30:c8:c8:b6:a2:cc:71:39:e7:4d:85:6b:44:89:29:
                    61:fa:d7:75:f3:10:71:45:e8:0f:af:68:18:35:da:
                    8b:5d:cd:d9:d4:69:94:c5:2a:75:56:08:0a:4a:7a:
                    c6:1d:aa:d0:15:d8:6b:d0:91:27:c7:ea:e4:5a:f5:
                    4a:72:2a:4c:80:3a:f3:d2:54:98:7e:54:4d:a5:d8:
                    32:19:bb:d7:c9:c2:ca:c8:85:1e:d8:c8:d0:12:b5:
                    74:b6:85:c7:68:0f:21:d7:25:7f:4f:8f:18:30:3e:
                    4b:3b:45:70:34:61:23:47:2f:d6:3b:e8:90:7e:10:
                    87:dd:e9:3e:04:35:08:7e:86:3b:28:1e:ee:cb:4b:
                    d1:33:d3:55:be:f1:f5:d5:75:28:28:e2:4b:2c:c3:
                    87:0d:60:28:13:7b:94:49:7e:6b:16:e2:50:12:15:
                    83:cc:80:78:59:dc:01:66:a8:4d:9b:a3:5e:45:d0:
                    2b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B5:80:50:BD:3F:D1:34:A4:3C:46:18:26:AC:65:D6:CB:91:29:98
            X509v3 Authority Key Identifier:
                keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:27:42:ce:63:66:52:97:cd:75:29:2e:31:8f:19:a7:4c:ce:
         33:6d:0d:1b:9d:a6:64:bc:d1:c8:03:09:91:bc:2c:8c:69:b8:
         4b:74:61:f8:38:95:0c:c3:93:e0:35:02:c4:55:84:b5:6e:b1:
         a4:72:1c:69:59:47:36:75:90:2b:18:81:ba:1d:76:f0:6c:92:
         b6:8a:d2:08:ec:89:b3:89:b6:6e:d3:5e:31:5c:c8:93:32:f6:
         2e:88:15:3d:58:92:a2:2c:d6:99:a4:f2:8d:9b:63:4d:8c:c5:
         b2:2d:35:84:b7:97:48:ab:b5:8d:c4:b6:5a:65:c4:15:2d:ed:
         34:02:02:17:8c:fb:a7:5f:c1:6c:86:c3:6d:9b:dc:33:fe:26:
         45:af:4b:c5:8f:41:90:03:e3:69:f2:6e:57:78:ab:63:83:a0:
         92:98:be:68:bc:7b:61:41:d9:39:95:97:ca:87:45:dd:50:66:
         52:a5:9f:46:2a:bb:ee:61:56:33:95:0f:ae:a6:ad:86:7d:a5:
         7f:1a:a2:a3:fe:33:f3:18:b6:29:47:5a:cd:58:5a:24:3f:85:
         70:2c:0c:43:34:69:ee:ec:70:ea:c3:12:ca:c1:11:e8:08:2c:
         7f:1a:01:e9:20:d6:4e:e1:14:7a:84:35:73:38:7b:11:b7:4b:
         1c:c5:97:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:00:13 2026 by rpki-client