Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File:                     JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier:          zYvrqq0mQ11qBxXVR75z5dDUCf/vlMt3d8rZa6Gg2i4=
Subject key identifier:   40:58:78:FE:73:58:09:70:C4:A7:26:2B:D6:49:60:3B:35:CA:19:0C
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer:       /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial:       01A0024B436552BF9ECF6D07144E89938325
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number:          1A05
Signing time:             Fri 14 Aug 2026 22:01:21 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:21 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:21 +0000
Files and hashes:         1: 5iJn7j9NwT_4zRsEmDpwaHGzgK8.roa (hash: Bq7Db27aznpNLmbu0ahDjZ7PeJYf+EQGmsNOgekFe6w=)
                          2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: ywr1iHr0EpfcTrwTtMjavvNrQmu7tRM19JPwyJk00a4=)
                          3: wCBMxNVW2s2juIQvGN-nvZjm17I.roa (hash: 3w8A09CcQCqIlBuWIFasyBemt1OICie2jVw2nf/HSKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:43:65:52:bf:9e:cf:6d:07:14:4e:89:93:83:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
        Validity
            Not Before: Aug 14 22:01:21 2026 GMT
            Not After : Aug 15 22:01:21 2026 GMT
        Subject: CN=405878fe73580970c4a7262bd649603b35ca190c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7f:e7:26:69:6a:7b:53:15:90:3f:58:7c:ad:
                    5e:ad:43:1a:a9:3a:a8:a8:8b:2e:21:13:1e:81:f8:
                    5a:a5:a4:76:c5:79:1d:d5:b6:ec:7f:b5:0c:1e:a5:
                    f3:a8:5a:d2:d0:a3:9c:2b:2f:a8:b6:d6:06:9e:e0:
                    a1:ab:9e:bf:f3:be:d2:1f:87:44:ce:f5:ec:c5:d0:
                    d9:49:60:8c:91:0f:4e:46:cf:bd:18:48:67:28:ec:
                    46:4a:4e:bd:60:9d:09:17:67:25:d3:27:4b:9a:41:
                    2e:61:00:e4:56:3a:b7:4a:da:56:87:2e:54:66:fc:
                    4c:c9:88:20:04:03:6d:77:92:79:43:01:c1:bf:f6:
                    25:16:57:30:79:72:35:bb:aa:a2:86:8d:38:80:c0:
                    26:a5:d6:78:99:1d:25:ca:b9:79:e2:88:77:dc:b5:
                    bd:96:79:28:f7:00:5b:85:21:a2:ad:cd:a2:ad:ed:
                    c1:d9:19:0d:99:48:a7:0f:5a:ee:72:55:3d:78:37:
                    db:1d:86:c1:42:18:78:9c:f2:28:f9:4e:a9:8b:24:
                    2d:9b:07:45:2c:62:b5:10:cb:9b:58:ae:c9:fd:e1:
                    90:5c:cf:d8:10:7a:67:74:c2:db:a3:b0:32:25:6f:
                    0c:a3:a6:54:d8:6f:b1:74:b5:87:77:6c:e7:aa:2d:
                    f4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:58:78:FE:73:58:09:70:C4:A7:26:2B:D6:49:60:3B:35:CA:19:0C
            X509v3 Authority Key Identifier:
                keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:9d:5f:b6:36:01:19:49:24:79:04:da:c5:bf:06:51:97:0c:
         a0:61:17:de:6d:68:a4:a5:25:cb:ff:65:5a:69:74:0f:10:f2:
         f1:14:31:ae:c8:9b:f8:a2:43:fb:d2:f8:fc:b2:d1:d6:70:d6:
         92:18:d2:ee:8d:ba:3b:63:0b:b5:19:2d:5e:6c:98:2a:4f:34:
         70:81:b0:ad:db:c6:33:e2:fb:78:07:0f:5c:4a:60:e3:bf:a6:
         db:3c:2d:7d:c4:50:8c:72:83:90:be:07:30:d1:04:28:54:07:
         9e:f0:49:48:28:02:ec:c5:53:5c:88:3e:e1:0e:d0:26:2b:8b:
         16:4a:d8:ec:11:1c:cf:7c:b6:9f:29:35:2c:a2:36:f3:cf:b7:
         d0:37:8e:13:64:a9:a4:82:d5:20:d1:c0:a5:d9:c3:4b:26:47:
         a1:76:a7:d4:a9:c2:23:06:69:1f:15:a6:65:c0:25:40:ec:1b:
         6c:b1:3d:67:a9:48:3e:42:d9:63:78:8e:ac:1a:30:18:b4:e8:
         23:6a:84:10:25:2f:d4:ea:01:da:04:3d:f1:ef:e4:64:27:5c:
         c0:2a:e8:11:b3:fd:ac:30:8f:7d:78:d6:a0:f9:02:c1:ea:57:
         f0:7d:c2:03:6d:9c:c9:f5:d3:10:ab:64:4f:cc:14:d3:6a:33:
         b2:7c:8f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:30:21 2026 by rpki-client