Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
File:                     JRIoadDqT5h6tR-5eRgA2EBamjw.mft (raw, json)
Hash identifier:          T7MLy9ILNP9D6j5eJ8+sn+eypIFucXVx0Ta1eenzFh0=
Subject key identifier:   30:EA:CB:FB:D2:06:85:BE:4B:72:53:CB:AF:3C:E7:F2:5B:E1:91:21
Authority key identifier: 25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
Certificate issuer:       /CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Certificate serial:       01A14D2B9DE83B8F264B6D4EBD53F46F257C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
Manifest number:          052F
Signing time:             Sun 18 Oct 2026 04:01:06 +0000
Manifest this update:     Sun 18 Oct 2026 04:01:06 +0000
Manifest next update:     Mon 19 Oct 2026 04:01:06 +0000
Files and hashes:         1: JRIoadDqT5h6tR-5eRgA2EBamjw.crl (hash: 6FaSt3CUY8MbW4er4uV+Zlkd2o+InY1V4daQ5K4sotY=)
                          2: Ll22ifwzod7THu418W7pJrzhQU0.asa (hash: Fg8kDXXbqUug68HMSDO3HXCB5eezWYiqdjtg8T12Ajk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:2b:9d:e8:3b:8f:26:4b:6d:4e:bd:53:f4:6f:25:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
        Validity
            Not Before: Oct 18 04:01:06 2026 GMT
            Not After : Oct 19 04:01:06 2026 GMT
        Subject: CN=30eacbfbd20685be4b7253cbaf3ce7f25be19121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c9:6c:01:e4:5d:10:ae:94:44:1f:8a:64:eb:
                    04:49:35:30:97:c1:15:5e:db:ee:da:cc:34:aa:99:
                    f7:49:ba:58:13:db:1d:c9:c7:57:24:f1:8d:8e:47:
                    e3:a1:f7:69:39:ce:fe:59:f4:c4:6b:1a:97:40:c7:
                    3e:c3:74:28:92:14:02:cb:87:db:08:5f:51:f7:c9:
                    72:78:a5:64:e7:b6:73:34:17:a0:23:90:5e:5d:be:
                    f9:23:41:c1:3f:32:56:fa:63:10:ab:b5:e4:d3:e6:
                    97:f7:ef:66:9e:68:d9:dd:0b:c0:52:a7:a8:85:b4:
                    bf:10:e6:31:c0:6d:bc:93:f4:8c:63:d5:cc:7a:83:
                    2b:db:92:c2:a2:25:32:de:cb:45:d6:ff:27:8a:c7:
                    60:e6:d8:cc:44:43:0b:e8:e3:90:27:81:1e:ba:fd:
                    00:2a:54:be:76:e1:35:03:11:60:02:a2:ff:cb:22:
                    be:73:4c:25:7a:d0:a7:18:66:39:70:49:87:a7:9f:
                    88:4b:76:7c:06:c0:4c:ae:99:60:98:0b:22:db:1b:
                    4b:da:73:54:36:74:e1:66:03:72:86:0b:63:fe:07:
                    91:3b:2e:da:1e:61:9d:64:ee:ec:a9:af:fd:67:d1:
                    b2:f7:b6:28:7e:48:8d:e4:3c:cd:72:be:c4:f9:9a:
                    68:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EA:CB:FB:D2:06:85:BE:4B:72:53:CB:AF:3C:E7:F2:5B:E1:91:21
            X509v3 Authority Key Identifier:
                keyid:25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:8c:9c:73:30:6a:8e:49:f5:5a:b2:55:91:6e:5f:c2:5e:d7:
         c7:96:98:53:75:d4:65:d3:79:e8:18:c8:3e:91:89:72:d8:73:
         b7:cd:ed:99:dc:f4:bf:2b:28:44:c6:23:c8:16:39:e5:5c:12:
         83:47:75:1d:e1:1d:5a:e1:dc:1f:be:a4:b7:be:f3:8a:94:be:
         12:a1:8d:f5:7a:8b:e3:11:7f:f3:a6:64:fc:fc:d2:81:a8:3e:
         01:cc:d4:2c:6e:4f:de:ad:83:6a:5e:78:b6:ee:9a:80:b3:96:
         3b:e0:36:42:9f:4f:9c:c9:72:de:94:7f:a8:0c:c4:65:f1:c2:
         61:2b:8c:77:b6:bb:9f:71:a0:99:72:33:f8:78:b0:22:4f:ec:
         65:66:87:e6:b6:76:2d:6d:40:23:eb:81:5a:86:56:7a:c1:a0:
         29:cc:24:a1:96:9b:1b:5a:7d:6e:7c:e7:66:f4:33:d7:cc:a0:
         83:e8:99:17:9f:27:f9:95:b0:a4:29:0a:ae:a9:ce:d4:4f:d8:
         c0:ce:df:ca:5a:d2:cd:25:18:52:f8:ad:00:57:cb:b3:2b:de:
         06:d6:21:84:78:28:69:11:b5:c9:83:9d:ed:78:5d:26:c8:4d:
         d5:eb:e4:38:63:ca:a3:40:17:99:d2:91:f9:b7:9f:28:c7:19:
         81:a7:8c:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFNK53oO48mS21OvVP0byV8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MTIyODY5ZDBlYTRmOTg3YWI1MWZiOTc5MTgwMGQ4NDA1
YTlhM2MwHhcNMjYxMDE4MDQwMTA2WhcNMjYxMDE5MDQwMTA2WjAzMTEwLwYDVQQD
EygzMGVhY2JmYmQyMDY4NWJlNGI3MjUzY2JhZjNjZTdmMjViZTE5MTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzclsAeRdEK6URB+KZOsESTUwl8EV
Xtvu2sw0qpn3SbpYE9sdycdXJPGNjkfjofdpOc7+WfTEaxqXQMc+w3QokhQCy4fb
CF9R98lyeKVk57ZzNBegI5BeXb75I0HBPzJW+mMQq7Xk0+aX9+9mnmjZ3QvAUqeo
hbS/EOYxwG28k/SMY9XMeoMr25LCoiUy3stF1v8nisdg5tjMREML6OOQJ4Eeuv0A
KlS+duE1AxFgAqL/yyK+c0wletCnGGY5cEmHp5+IS3Z8BsBMrplgmAsi2xtL2nNU
NnThZgNyhgtj/geROy7aHmGdZO7sqa/9Z9Gy97YofkiN5DzNcr7E+ZpofwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDqy/vSBoW+S3JTy6885/Jb4ZEhMB8GA1UdIwQY
MBaAFCUSKGnQ6k+YerUfuXkYANhAWpo8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlJJb2FkRHFUNWg2dFItNWVSZ0EyRUJhbWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wZTVkNGItNjI1Yy00NTcxLWJiNDUt
ODY5MjIwNjc3YmM2LzEvSlJJb2FkRHFUNWg2dFItNWVSZ0EyRUJhbWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wZTVkNGItNjI1Yy00NTcxLWJiNDUtODY5MjIwNjc3YmM2
LzEvSlJJb2FkRHFUNWg2dFItNWVSZ0EyRUJhbWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoycczBq
jkn1WrJVkW5fwl7Xx5aYU3XUZdN56BjIPpGJcthzt83tmdz0vysoRMYjyBY55VwS
g0d1HeEdWuHcH76kt77zipS+EqGN9XqL4xF/86Zk/PzSgag+AczULG5P3q2Dal54
tu6agLOWO+A2Qp9PnMly3pR/qAzEZfHCYSuMd7a7n3GgmXIz+HiwIk/sZWaH5rZ2
LW1AI+uBWoZWesGgKcwkoZabG1p9bnznZvQz18ygg+iZF58n+ZWwpCkKrqnO1E/Y
wM7fylrSzSUYUvitAFfLsyveBtYhhHgoaRG1yYOd7XhdJshN1evkOGPKo0AXmdKR
+befKMcZgaeMoA==
-----END CERTIFICATE-----
Generated at Sun Oct 18 09:39:11 2026 by rpki-client