Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
File:                     jMyCpb7jqTYzA8M83N0278aPi0Q.mft (raw, json)
Hash identifier:          L/9BokXR62FuHZ1uMkmieN48idEO4sbD4FhsBJqGI0o=
Subject key identifier:   C2:AB:09:F2:83:5A:61:B3:3F:1D:A3:BD:11:A3:41:34:25:21:04:F6
Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
Certificate issuer:       /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Certificate serial:       01A06E39AC6505F342947809DC5494DE3F0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
Manifest number:          062E
Signing time:             Fri 04 Sep 2026 21:01:08 +0000
Manifest this update:     Fri 04 Sep 2026 21:01:08 +0000
Manifest next update:     Sat 05 Sep 2026 21:01:08 +0000
Files and hashes:         1: Qu7i1hfHBSzNKAEQCFhBjLBdX88.roa (hash: txu1MfU2gFXJdRpf1GKWelwI6kKmpvlKQLQat4JHcus=)
                          2: jMyCpb7jqTYzA8M83N0278aPi0Q.crl (hash: yzwA3vqOo1gHNPO8UQWL1tzNWenz3aljG09ohrCIgQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:ac:65:05:f3:42:94:78:09:dc:54:94:de:3f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
        Validity
            Not Before: Sep  4 21:01:08 2026 GMT
            Not After : Sep  5 21:01:08 2026 GMT
        Subject: CN=c2ab09f2835a61b33f1da3bd11a34134252104f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:91:d1:93:71:fc:48:4a:1b:a9:7b:4e:77:
                    e2:29:15:5c:81:d1:0a:da:32:84:9c:5d:bf:5a:2e:
                    5e:46:0b:47:ba:68:8c:4e:7e:20:05:ad:a9:fa:5b:
                    66:dd:97:0b:4e:cc:70:3d:47:83:2a:ed:ee:24:21:
                    7d:89:4f:26:68:bc:15:46:98:04:5e:16:58:97:a1:
                    e3:7e:cc:a9:52:28:77:97:5f:0f:33:50:e5:fc:2c:
                    fa:80:ac:ed:a1:12:06:b3:f0:c3:7d:4c:bf:4e:0e:
                    f8:d3:61:34:1a:1a:d4:7e:16:34:d0:9d:73:2f:8d:
                    01:08:6c:7b:be:dd:bc:d8:1f:5a:42:ed:b8:67:88:
                    30:c9:f9:17:fc:55:da:91:fd:14:08:82:d4:38:00:
                    b0:90:cb:8c:b8:88:a7:66:1d:f0:ce:fb:b5:3a:4a:
                    1b:d8:0d:e3:c6:19:0d:bb:81:c7:7c:2f:33:9f:5a:
                    c9:25:21:05:ab:87:64:e4:d5:39:b0:11:50:b7:2a:
                    09:18:a6:86:bf:1c:8f:f6:76:76:cf:0e:16:75:81:
                    f0:a9:72:17:d3:f4:76:79:47:de:89:f2:cc:2b:bf:
                    49:72:a6:7c:69:a3:15:02:ec:b7:7f:0d:10:a9:84:
                    ae:5d:35:1d:60:3b:7f:ec:f3:da:e0:ea:ba:e0:e4:
                    0b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AB:09:F2:83:5A:61:B3:3F:1D:A3:BD:11:A3:41:34:25:21:04:F6
            X509v3 Authority Key Identifier:
                keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:68:2b:a2:c1:06:a5:85:ad:5d:c7:9e:4c:71:d2:a3:89:59:
         67:29:5c:df:5e:b7:f6:30:f4:ac:37:af:5b:07:b0:e6:f8:18:
         d8:e3:18:15:45:ba:3c:2e:18:d0:79:b5:af:b5:ae:fe:99:a6:
         94:0d:d9:50:f2:90:bd:44:88:cf:ba:17:fc:6d:1b:26:63:32:
         59:13:e2:fc:e9:7d:74:60:37:4e:03:f5:ee:9f:15:f3:84:9e:
         bf:3d:99:e6:c6:01:1f:82:6c:5e:b2:b5:d1:e7:37:a3:61:d7:
         4a:02:62:cf:ed:13:bd:0a:ba:fd:87:24:31:27:e3:47:3b:57:
         00:40:e7:3b:ae:bb:2a:ca:6b:ef:57:25:cc:c1:49:f8:22:d2:
         59:6a:80:75:ef:a7:57:4f:6e:13:84:f9:30:77:95:e4:5c:0f:
         2e:38:39:c7:87:ec:80:15:0b:2b:38:e7:de:b5:30:a5:14:dc:
         b4:3b:98:bb:ae:6a:e4:a9:9c:47:c0:c2:0d:20:fe:1a:f1:59:
         50:81:20:f0:6b:8f:a2:19:e0:79:df:e5:a0:bf:ba:d3:2c:a6:
         94:b8:a9:0d:b5:d4:96:73:b0:c0:e8:f2:2b:1d:77:74:50:db:
         0f:8c:91:e4:3e:0f:53:4d:3d:11:9d:9c:0a:af:5e:43:bb:68:
         d9:36:39:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:53:59 2026 by rpki-client