Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
File:                     jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft (raw, json)
Hash identifier:          mgic9pHMRhhFYtcVMG1ZRqp1YPebZ6wcA95NsLpUuWo=
Subject key identifier:   F7:74:55:8F:14:16:B9:E7:7F:EB:52:46:BC:08:34:26:6B:71:AE:43
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Certificate issuer:       /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial:       01A1822C0F6A1B36D4007F4EEE864F9CF79A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
Manifest number:          13B0
Signing time:             Wed 28 Oct 2026 11:01:27 +0000
Manifest this update:     Wed 28 Oct 2026 11:01:27 +0000
Manifest next update:     Thu 29 Oct 2026 11:01:27 +0000
Files and hashes:         1: 2dl-f-UK6z-wcsJEmLBo_kTVQA0.roa (hash: E+Lj08rzgs1LC3v6bo+hL91M0+iDXn1Q2UMdAOL8ihg=)
                          2: BcaKc_qpZcw6gUkkrXQbt6m-3Nw.roa (hash: FCBImm07RTNhqFegiiS82dUG+xaTXFVxce08GQ6qTS0=)
                          3: MxVivBucAENp2PAscr5joXqh_oY.roa (hash: qdH6vqEjmsgzasuWWeKuMXOT/SGrMj1v+Oi8w3/Eecw=)
                          4: PPTpKN0G94Qk3SCfG74G6E4gLdw.roa (hash: IpDfPDw0GzTAcezF6u+iyqtASEo3jItEu1XZDEJz9Yk=)
                          5: jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl (hash: GLLZkpxw9eE82AuF0ddH3q9iasiDGK8IACHWVnbMt0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 11:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:82:2c:0f:6a:1b:36:d4:00:7f:4e:ee:86:4f:9c:f7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
        Validity
            Not Before: Oct 28 11:01:27 2026 GMT
            Not After : Oct 29 11:01:27 2026 GMT
        Subject: CN=f774558f1416b9e77feb5246bc0834266b71ae43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ad:de:ac:68:39:b5:f6:43:b3:20:66:80:5b:
                    4a:1e:68:8a:1f:01:ae:3a:a2:ef:db:72:ef:fb:67:
                    0c:b1:8e:f6:73:73:50:3d:84:6e:7e:2d:76:ac:fb:
                    0b:4a:a1:08:a9:bf:a3:b1:1e:31:9c:b7:42:db:d4:
                    74:61:f3:a0:37:81:9d:1c:89:47:f0:91:df:e7:cc:
                    61:1b:e2:90:7a:47:a4:6c:7b:4c:f5:db:d6:12:79:
                    ed:0b:00:f3:84:1e:e1:cc:3c:18:ab:a4:56:da:7a:
                    82:91:93:e4:77:c8:7b:11:b2:45:95:92:6a:3b:36:
                    0b:75:85:01:ad:e3:48:4a:40:2c:d1:e3:64:5f:d9:
                    a3:5f:a4:c1:1e:ca:52:05:2b:b0:52:c9:13:9e:ae:
                    19:62:47:b6:f6:77:9e:0a:61:5c:d4:28:22:7e:dd:
                    03:d9:fc:92:82:94:a0:f0:6c:85:ae:84:e6:e0:9b:
                    56:62:c6:7b:f3:35:04:96:fb:9a:e5:9e:85:ed:fc:
                    93:bd:42:9a:e3:a8:60:ec:df:d1:94:62:30:d8:7e:
                    c4:a0:57:79:b2:5d:31:53:32:e3:c5:a4:bc:b5:f2:
                    38:dd:28:29:47:1d:dc:ad:66:93:d8:33:d2:8e:4a:
                    e2:73:4e:c6:49:19:49:a9:de:ec:b6:16:49:ec:3c:
                    d2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:74:55:8F:14:16:B9:E7:7F:EB:52:46:BC:08:34:26:6B:71:AE:43
            X509v3 Authority Key Identifier:
                keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:eb:f7:66:e3:0d:f6:a4:33:2a:63:3c:d7:ac:17:39:d0:e0:
         24:87:24:2d:d7:ae:ae:15:fd:0b:97:24:85:82:83:9f:28:8f:
         61:88:6b:d2:12:bf:ed:fd:87:2e:f8:b7:9f:02:cb:48:8d:07:
         3c:29:99:0e:4e:ae:0c:ae:0a:eb:dd:a7:b4:54:a6:fa:bf:b3:
         8e:4e:eb:10:e1:ed:ba:26:95:88:b3:3e:4a:b9:ec:72:f3:7d:
         5f:44:0f:07:4a:dd:63:43:fd:54:70:c5:50:d7:18:4f:39:3e:
         83:62:a0:9d:5d:08:86:9a:b0:0c:e8:80:61:f4:53:38:30:f3:
         31:85:d9:24:40:13:79:a2:b6:34:67:bb:cd:39:57:c7:d1:51:
         33:ca:3f:4e:60:e5:a9:1e:6b:65:e9:72:63:c7:0c:f5:4d:a3:
         66:89:10:53:49:e8:8c:e4:31:b4:da:96:40:98:d1:2f:bf:d5:
         2f:d0:19:39:33:5d:f2:7e:01:09:6d:f0:04:eb:07:42:87:4c:
         63:1d:de:d3:84:4a:b5:5c:e2:14:45:05:ba:71:4b:35:76:03:
         79:20:32:92:04:b9:83:2a:10:62:a1:69:ea:2e:5c:66:b3:d4:
         d1:00:62:4a:a3:bd:13:29:dd:27:b3:49:6d:85:e2:22:c1:0d:
         41:7f:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:13 2026 by rpki-client