Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
File:                     jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft (raw, json)
Hash identifier:          MlfE9oxgArUF/nR1p0ni5SAAltmtILV1BCwtvHw2SUw=
Subject key identifier:   35:09:33:D4:C2:F3:93:17:86:06:C5:E2:02:76:64:FB:AE:03:7F:9F
Authority key identifier: 8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C
Certificate issuer:       /CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
Certificate serial:       01A0D538F7A1F31D4B718ED1196903FDB320
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
Manifest number:          0D40
Signing time:             Thu 24 Sep 2026 21:01:15 +0000
Manifest this update:     Thu 24 Sep 2026 21:01:15 +0000
Manifest next update:     Fri 25 Sep 2026 21:01:15 +0000
Files and hashes:         1: 1iAUZQnAjPJmM3fx6VheKbjSaC0.roa (hash: ayQpZh8PFS4/2h7rrWfeqNzGcx6D/Lzgpi5g3p8RHQo=)
                          2: NvGwv0tgbOiZD5vQjxJqJJXPvRA.roa (hash: 3uFlLidOa4e1nDZau75bOj3y4T1goZPB2N6R1JL8d7c=)
                          3: UNicrp7c5qmqfUMaaE2imeZSfJ4.roa (hash: HvQvHtfV7Kicbdq+rxiWhbGQFfs4xQ7iH7hCA9P9w+o=)
                          4: XYRMpXTmrwZ9ysuk8CmU8-sXMDE.roa (hash: HTGn1k4c6oETgpfUTnE83wF8MXn0cJBcwbbcColhYVo=)
                          5: jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl (hash: Pdevfz3RhODUU6YWX100HIH10+0xVSxIsM9hvMtzObc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:38:f7:a1:f3:1d:4b:71:8e:d1:19:69:03:fd:b3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
        Validity
            Not Before: Sep 24 21:01:15 2026 GMT
            Not After : Sep 25 21:01:15 2026 GMT
        Subject: CN=350933d4c2f393178606c5e2027664fbae037f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:84:30:fa:80:f4:63:9b:9e:79:a3:8d:28:cf:
                    7e:80:6f:9b:a0:c0:f5:06:eb:c2:ea:34:36:4a:ff:
                    ac:14:b3:30:1c:dc:71:0f:09:65:e0:7f:53:f3:99:
                    21:d1:81:4e:02:6d:c5:11:e1:fc:d4:0f:62:27:f1:
                    dc:da:94:a2:90:64:6f:ec:44:b8:4e:27:d0:5e:31:
                    44:4d:b3:2e:01:1b:51:d8:cf:a6:46:46:99:58:2b:
                    75:b7:35:b8:96:7a:28:2b:0c:42:8c:a2:58:93:c0:
                    9e:58:4a:8d:14:6c:b2:9c:3c:ea:b7:87:8f:9e:87:
                    72:9c:0f:7b:db:df:08:79:13:ca:50:2d:1a:05:90:
                    3a:f3:bf:52:82:1a:58:52:8f:81:6d:0d:a1:15:6c:
                    fc:c4:34:5e:6d:10:19:89:50:43:c0:ac:50:29:db:
                    91:67:34:99:af:85:55:44:c6:80:a6:16:0c:6b:fb:
                    cc:43:58:5d:25:28:23:2f:7e:82:58:a9:61:de:47:
                    80:26:f6:84:c7:0d:b3:ea:ac:bf:a3:02:a9:fd:84:
                    73:a3:e0:0d:b5:fa:d8:e1:50:22:5a:db:11:52:6f:
                    bb:71:1d:45:0a:63:ea:59:6a:2e:60:e1:4e:82:dd:
                    a7:e4:b9:87:b4:f3:8b:e8:00:f6:4e:cd:e1:ec:20:
                    49:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:09:33:D4:C2:F3:93:17:86:06:C5:E2:02:76:64:FB:AE:03:7F:9F
            X509v3 Authority Key Identifier:
                keyid:8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:4a:2c:8c:4b:12:0a:3b:dc:7b:87:6d:80:d2:b2:a0:67:79:
         5f:ed:0b:31:64:04:af:02:15:06:71:1e:a9:38:2b:62:fe:cb:
         fe:4a:5d:a0:45:10:7e:86:db:9a:36:07:7b:bd:04:94:73:c9:
         f8:92:94:5c:31:86:16:3a:dc:2b:fe:c8:28:19:f2:a8:67:5c:
         21:8b:29:b9:f4:66:a2:6b:d6:0e:ec:e7:ad:82:99:39:ef:07:
         7c:c5:76:44:0b:4b:1a:2e:59:2c:02:83:79:58:de:94:27:a0:
         b8:26:f7:80:be:85:6e:37:6c:94:37:44:bb:e5:dc:f1:88:eb:
         43:1c:1c:6b:85:e8:75:5c:b7:e8:9f:35:df:47:aa:6a:a8:a1:
         b8:c5:6c:d2:c5:aa:71:ae:31:12:d9:8d:fc:40:3b:4c:07:e2:
         34:7d:5f:3d:fd:2e:93:84:0b:0c:80:3f:e6:01:5a:01:c2:66:
         d5:6b:79:a6:f9:be:65:fe:61:e0:6a:ef:39:94:cb:8b:e7:67:
         db:e2:84:2c:03:53:c6:15:9a:71:69:f0:c2:8d:c9:25:80:5f:
         e7:20:c1:dc:fd:2b:13:c4:23:f6:7e:f5:6c:d9:be:ff:20:34:
         5f:1e:30:dd:6e:0d:95:34:ae:16:91:8b:15:22:8c:40:6d:09:
         c5:56:23:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:28:05 2026 by rpki-client