Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
File:                     JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json)
Hash identifier:          U2pz0biLWkj6sNjIuSK5HARjN0CynRfTtYcBizF994g=
Subject key identifier:   04:EE:F3:F7:F5:23:92:F2:EA:56:E4:D6:1D:A8:02:31:2F:9E:46:3D
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Certificate issuer:       /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial:       01A1513F03F7430DE1261CD41A0187AD3100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
Manifest number:          0B8F
Signing time:             Sun 18 Oct 2026 23:00:46 +0000
Manifest this update:     Sun 18 Oct 2026 23:00:46 +0000
Manifest next update:     Mon 19 Oct 2026 23:00:46 +0000
Files and hashes:         1: 1pjPcIc-TbBpzHBksxHHS9pR-WI.roa (hash: pwCZ2fRhs0nJ31upDzz2pN2CJgfwb4g1H8mQoqHdQdQ=)
                          2: A5wtuBfY6dxUh5eS44FlMqwcmog.roa (hash: tZbTVJ0vSZUIP4JV/ZEsCDLjrfqC4a0hum2qjGz/VQE=)
                          3: C6kXQbmf9ed-Rd3RlEcWQXFNlRk.roa (hash: DW0PJcH29KhjZVwZo0qWO+ll1hc593uNe8QjdzH0uYc=)
                          4: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: wQgOImbm7klJok/vMfFr9/HgPYaVXKUoVF5GQVNffzo=)
                          5: ROVyIAsBNfwBer4Npp8bVnXZW2U.roa (hash: Z2rohR1T9JeCw9lXsHTXnEJbzYMGmnxfv3f6fLAZwjY=)
                          6: SN7iUL1ZTDZriT9WldHFs3bgME4.roa (hash: KkH9Un51EAXewil4Qmtkkj2B60LR6wL89EVPG96bBUw=)
                          7: q8SJpLXKAHXaFMNj32h3gHAkuhI.roa (hash: pnGsg6QVulEcKBptf5RFCwNqFUz6hr2u8dhV7GIOEe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:51:3f:03:f7:43:0d:e1:26:1c:d4:1a:01:87:ad:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
        Validity
            Not Before: Oct 18 23:00:46 2026 GMT
            Not After : Oct 19 23:00:46 2026 GMT
        Subject: CN=04eef3f7f52392f2ea56e4d61da802312f9e463d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:06:d5:8b:27:54:26:bb:f5:d0:dc:ae:27:
                    3c:86:b5:83:5d:a5:a8:59:08:df:d5:55:ef:fe:d5:
                    46:f5:cd:f2:d8:ad:c7:73:d2:7b:ab:c5:df:e6:ae:
                    93:bc:38:25:c6:c7:4d:cb:6c:83:44:53:a9:f6:54:
                    5a:df:8b:62:ca:4d:2b:6f:de:b4:bf:c5:88:1e:24:
                    85:9c:0c:1e:36:9e:b2:dd:4d:61:7a:b1:a6:c5:1f:
                    17:0d:9d:9b:61:1f:59:bf:76:27:79:0e:5e:b1:ba:
                    94:fb:67:f0:47:50:69:3d:05:c1:7d:4b:b4:5d:8a:
                    7b:8b:f7:e8:b1:60:31:ed:e6:a2:bd:f9:ae:ca:e3:
                    60:e2:74:73:8d:7a:b7:1e:40:08:36:02:f3:03:c8:
                    17:a5:f2:97:7e:59:35:df:4a:01:de:79:b2:88:44:
                    d4:8d:d3:9f:6d:54:8b:1f:cc:4b:36:e0:9b:e4:12:
                    16:13:e8:09:d2:0c:c1:db:cc:b6:14:2d:24:99:d6:
                    68:d1:39:7b:d7:c4:40:ef:5b:db:48:60:01:83:fd:
                    f5:99:47:85:73:12:d8:3e:6e:6a:70:f6:cc:73:07:
                    1a:77:59:35:77:30:21:84:84:ff:78:e3:8d:b2:4c:
                    f5:fb:ad:73:4a:91:04:e3:eb:84:03:8c:b1:a6:71:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EE:F3:F7:F5:23:92:F2:EA:56:E4:D6:1D:A8:02:31:2F:9E:46:3D
            X509v3 Authority Key Identifier:
                keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:58:65:5c:44:98:d9:ad:e9:f4:6c:55:da:8b:44:1e:da:18:
         dc:31:d1:b9:5f:7e:a8:e7:94:41:84:03:14:9e:57:f9:32:f1:
         b7:53:47:b5:be:f4:f4:dd:d5:5a:65:eb:3d:38:09:d5:a8:68:
         ef:71:e9:49:48:14:9e:69:d8:a0:0f:80:4d:b6:00:b5:66:f0:
         be:63:01:65:50:8f:f7:83:e5:d9:a5:f7:df:38:88:33:da:3d:
         77:2a:bd:a2:b8:c9:2d:a1:d2:ce:97:cc:3a:cd:8c:84:4b:ac:
         91:6c:2d:00:2f:cf:bb:b9:05:c3:75:d0:1a:c6:cd:09:41:8f:
         ce:3b:90:11:e1:12:90:52:94:14:eb:80:c2:35:8f:eb:88:5d:
         64:f4:47:cf:6a:91:20:df:19:db:21:72:3d:47:33:9c:f9:b0:
         73:0d:ab:bf:36:5e:17:1e:ac:e9:d6:8a:84:7b:cc:2e:ea:fb:
         ed:38:45:3b:c1:df:43:18:b6:ea:cc:2b:73:19:7c:7d:39:0f:
         e4:a9:87:33:b8:51:b7:36:6c:50:ee:89:19:af:8c:ba:a8:b0:
         dc:83:77:25:9e:f0:2e:83:90:26:5f:30:00:d7:4c:4b:17:00:
         b2:6f:b1:02:a1:df:01:58:4e:db:5b:0b:40:7c:b0:5a:d5:22:
         ed:c7:3b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:01:31 2026 by rpki-client