Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.mft
File:                     JAsyzWtXl7uo3nVxDSJjhYkJ84Y.mft (raw, json)
Hash identifier:          0A2yNgvUKF3zuocMq5JfUmuc07w5+CEBbncURaYXsAc=
Subject key identifier:   51:F6:5D:EE:70:CC:DB:1D:99:EA:8A:15:EA:3E:C9:7B:0E:78:E7:96
Authority key identifier: 24:0B:32:CD:6B:57:97:BB:A8:DE:75:71:0D:22:63:85:89:09:F3:86
Certificate issuer:       /CN=240b32cd6b5797bba8de75710d2263858909f386
Certificate serial:       01A18F0B51D3555DF7992BB11C3EFCB36584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.mft
Manifest number:          016C
Signing time:             Fri 30 Oct 2026 23:00:46 +0000
Manifest this update:     Fri 30 Oct 2026 23:00:46 +0000
Manifest next update:     Sat 31 Oct 2026 23:00:46 +0000
Files and hashes:         1: FROPYkM5ktQTS4wOQF6SJwJLwig.roa (hash: AuHjIMdxNo/GZjrCi+DZLonZ7eKRGgLWjts+JzfgAeI=)
                          2: JAsyzWtXl7uo3nVxDSJjhYkJ84Y.crl (hash: PH8QmK4BTBvsnVOZ/UsTfha9vq095+51mJTvXfHpi50=)
                          3: f80qjYnyCwfdNMKj1DsnAZ5cv9c.roa (hash: zngQrOsaQfFZfvx/BqG2rXEHHOh99MujSkajem83cE4=)
                          4: igCk7oNrHtLfxuau9vPZGAQvZ_M.roa (hash: Ur8FR9IN0yI1c69evJkfyoGd+ghZTySnXPRPUeZRMAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 23:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8f:0b:51:d3:55:5d:f7:99:2b:b1:1c:3e:fc:b3:65:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240b32cd6b5797bba8de75710d2263858909f386
        Validity
            Not Before: Oct 30 23:00:46 2026 GMT
            Not After : Oct 31 23:00:46 2026 GMT
        Subject: CN=51f65dee70ccdb1d99ea8a15ea3ec97b0e78e796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0b:4b:93:fc:a3:cd:4a:de:42:82:cd:b0:79:
                    fd:11:12:d0:97:ff:0b:2b:83:ef:7d:d8:ea:20:aa:
                    d2:a9:8f:d7:cd:44:b8:ad:ce:4b:23:6c:1d:1e:27:
                    63:5c:75:53:40:08:25:14:af:e5:0a:78:49:1c:78:
                    88:d2:78:81:90:be:b4:a1:8e:87:6a:07:02:2f:ec:
                    52:6b:09:36:1a:09:1e:87:ec:5b:82:07:49:bc:9a:
                    1a:4e:95:93:18:27:d0:d2:07:2f:ad:ff:ec:a8:a1:
                    a5:25:58:79:49:3a:44:d3:08:a0:15:8d:d6:d8:3c:
                    a0:5e:db:8b:58:90:28:46:f5:4e:b2:17:cc:d2:5d:
                    10:91:0f:8c:c4:ce:f5:f7:2b:03:c8:da:97:49:73:
                    c6:de:97:c0:5a:08:2d:c5:5a:d7:9c:a7:4f:5f:63:
                    39:ea:74:46:47:df:17:b3:7d:cf:cf:6a:4a:04:b6:
                    47:38:24:0e:b9:66:9d:6c:20:dd:7d:08:4c:fb:dc:
                    a7:b5:35:59:6b:b3:5c:cb:ba:76:2b:17:93:7f:1b:
                    e9:3a:4d:43:ca:23:e8:47:7d:d3:6d:e7:6a:c1:56:
                    91:48:95:a4:0b:70:53:f6:3f:f1:9e:32:88:6d:a0:
                    f9:c6:b8:06:07:e0:fb:07:75:5c:c7:a5:3b:41:e7:
                    6e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F6:5D:EE:70:CC:DB:1D:99:EA:8A:15:EA:3E:C9:7B:0E:78:E7:96
            X509v3 Authority Key Identifier:
                keyid:24:0B:32:CD:6B:57:97:BB:A8:DE:75:71:0D:22:63:85:89:09:F3:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:65:b1:80:ce:99:91:9f:cf:b6:40:88:9a:a8:2f:59:21:ab:
         1a:a4:52:91:6c:df:8c:4d:e3:b8:3d:f7:24:73:11:9b:c5:db:
         c6:f6:91:ad:2c:01:42:16:12:b3:3f:99:f5:29:44:6b:60:54:
         4f:17:c7:3f:ba:e3:8c:2c:4a:a0:e4:2b:df:80:cd:6c:d9:2b:
         8e:c8:57:dd:4e:32:1e:72:ab:f1:2e:c6:e3:23:28:68:a0:35:
         7c:7d:c4:ae:ba:6e:8b:0a:4f:c7:f6:21:1f:80:96:7f:dc:2d:
         b6:e9:ba:48:4e:d5:0d:e8:d3:30:31:f8:2b:06:22:b0:83:e9:
         2b:95:82:27:54:da:ca:05:7e:49:5f:25:68:d6:09:70:11:8d:
         cb:15:5d:8f:a4:75:43:8a:be:d4:5a:88:48:53:80:62:59:72:
         b0:f3:88:f9:9f:54:76:3b:ad:e6:8c:5e:cd:0f:69:94:cd:03:
         98:59:62:aa:6c:61:b5:24:09:9a:93:0b:cc:8f:bb:e3:4b:9a:
         a8:88:71:d7:42:10:d6:d1:29:d1:f8:af:b1:20:4f:6f:fc:79:
         a0:c6:39:68:80:af:9c:b4:40:be:6f:9a:7a:39:bb:ab:a2:e9:
         30:98:7b:7d:4f:61:a6:7e:1b:ee:86:fb:24:1e:f0:99:f2:c5:
         f0:54:df:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 06:06:28 2026 by rpki-client