Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
File:                     0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json)
Hash identifier:          qxTfUn1tfCC3zzQbyre74zc1HcOrJbSkjmgP4Fv/zuc=
Subject key identifier:   AC:E9:40:5E:1F:9D:3C:C0:8C:B2:65:87:36:86:C4:C3:CD:B2:FC:91
Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
Certificate issuer:       /CN=d234798e0712f155292d3211f7c447223ccd49ac
Certificate serial:       01A104A4C219587A0D5218FBCF7033455E83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
Manifest number:          17A7
Signing time:             Sun 04 Oct 2026 02:01:08 +0000
Manifest this update:     Sun 04 Oct 2026 02:01:08 +0000
Manifest next update:     Mon 05 Oct 2026 02:01:08 +0000
Files and hashes:         1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: a2GKfucZSsbF0tJJRrNNicJn3URd2PsAOb84VPA1DXM=)
                          2: RjK8oLQkpJRzAeEdXg6vAbqYOYY.roa (hash: Mnx3rs/opPeBY8JJ1GG9XmHg+1e4VxaebybsYn1/rbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 00:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:a4:c2:19:58:7a:0d:52:18:fb:cf:70:33:45:5e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac
        Validity
            Not Before: Oct  4 02:01:08 2026 GMT
            Not After : Oct  5 02:01:08 2026 GMT
        Subject: CN=ace9405e1f9d3cc08cb265873686c4c3cdb2fc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:da:cd:b2:c2:42:2e:4a:5b:57:60:f3:62:af:
                    17:66:66:c3:48:89:5b:10:7b:b9:29:92:a0:35:e6:
                    bd:26:62:d1:0d:39:72:08:60:99:2b:69:a8:64:d8:
                    22:b3:0b:4b:f2:4e:78:21:50:5f:f1:57:3f:45:30:
                    94:e9:65:18:40:b7:33:e7:d8:c0:51:fb:5e:a3:55:
                    d4:1e:24:80:f2:01:f2:e4:c3:7c:da:78:da:fe:e1:
                    5b:89:e5:d4:ce:37:38:d5:3b:d1:87:4b:3b:29:01:
                    1b:b9:d4:15:d0:3c:d9:49:64:bd:35:0c:42:da:d0:
                    62:e5:61:1d:bb:a2:7c:54:e6:08:aa:bd:67:b5:70:
                    dc:aa:77:3e:03:8b:af:71:98:62:79:b4:12:10:bf:
                    60:8b:3d:ff:ca:55:6a:64:57:23:3c:09:20:02:95:
                    51:1c:58:34:c6:c5:92:a8:5a:84:f6:be:6e:db:92:
                    b4:11:0a:a8:e3:56:6d:5a:f1:b7:af:01:5c:6e:b6:
                    f3:07:3e:d3:0a:07:c4:24:3d:9a:38:a2:2c:53:bb:
                    a1:09:32:6e:c6:fe:82:f3:d0:74:1c:d0:4c:91:ff:
                    58:06:a2:b2:b5:15:0d:a6:19:0d:46:52:a8:1c:85:
                    13:e6:fe:2c:a8:10:22:b8:40:63:72:54:9f:57:24:
                    b0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E9:40:5E:1F:9D:3C:C0:8C:B2:65:87:36:86:C4:C3:CD:B2:FC:91
            X509v3 Authority Key Identifier:
                keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:26:48:00:70:6c:50:8b:21:d0:e5:7d:ec:7e:a2:e9:d9:6a:
         17:5c:bf:47:69:7a:c5:82:69:f1:71:a3:d2:de:a5:9f:78:51:
         12:69:ad:af:72:01:40:21:0b:95:e0:00:10:9f:27:5c:ea:5f:
         89:4f:1b:7f:18:c0:01:5b:8e:56:58:3f:af:64:7d:ea:2a:95:
         c8:27:d3:3e:e5:2e:57:35:57:65:e4:34:1e:81:8b:6e:9d:a0:
         20:c4:8a:13:c7:58:30:d9:89:31:5e:58:07:00:b0:b0:fc:dd:
         64:4e:28:52:36:cf:73:d4:d9:f4:73:3e:e8:0a:db:00:8a:a1:
         d3:2d:2c:e7:02:be:60:bc:8d:74:b6:91:f8:af:83:2b:c1:61:
         bd:1d:c7:cc:16:4e:30:d6:ca:31:0c:5a:61:f6:d1:0f:58:fc:
         b7:4f:9b:76:67:11:5a:9d:cf:1a:da:74:a6:f5:77:70:c0:06:
         65:fa:0d:76:ea:48:96:90:ae:e0:b9:01:62:8d:59:8b:e0:c0:
         52:c3:2a:37:d7:9c:10:71:e5:68:15:25:74:fe:af:d1:db:17:
         c1:fb:98:7a:77:98:e1:27:31:b4:9a:c2:ec:a5:6a:b2:06:36:
         6d:a5:b1:7a:8c:42:04:79:12:41:53:76:2d:24:e8:2b:23:14:
         28:c0:a2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:12:31 2026 by rpki-client