Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
File:                     JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json)
Hash identifier:          9bmuRiCXPPJ8jnHPpCQ1D2KGU5x40QKJlWANLSDMv7Y=
Subject key identifier:   42:B6:F5:0F:00:63:AB:34:25:BE:31:84:9E:B1:31:61:BD:6A:50:30
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Certificate issuer:       /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial:       01A1905504D582E43243E54CD28D87F35F39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
Manifest number:          0907
Signing time:             Sat 31 Oct 2026 05:00:53 +0000
Manifest this update:     Sat 31 Oct 2026 05:00:53 +0000
Manifest next update:     Sun 01 Nov 2026 05:00:53 +0000
Files and hashes:         1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: Kp0hcAmvpHBXW8U3y2XCGvsIij60CQyFuWKs1L6PB+w=)
                          2: qkkBRbbgk03fhxQbqtIxu6rxUSs.roa (hash: O2DGXBeKtsG4B29jCyT2BVcPBMzu25RKDg9by8oTkos=)
                          3: r65CtO4n3q3SRRjk6bylneiNA8c.roa (hash: M+UXBrWeUxzGrr1Lp3fpORybLRapxULqqPZ/kLQKoss=)
                          4: tHXazgBXsceuUAJhoJGckJWKiyM.roa (hash: 6b1NPFovjCL0B3snTScPHML/dlS9QVd+EflwMNuX4WE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:90:55:04:d5:82:e4:32:43:e5:4c:d2:8d:87:f3:5f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
        Validity
            Not Before: Oct 31 05:00:53 2026 GMT
            Not After : Nov  1 05:00:53 2026 GMT
        Subject: CN=42b6f50f0063ab3425be31849eb13161bd6a5030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ad:ca:66:fa:80:62:53:59:5b:00:7d:b8:9d:
                    d3:27:4a:21:03:c5:7a:22:9a:3a:12:9b:67:8e:d9:
                    6f:e8:0f:3a:b0:35:4d:e9:e8:90:ff:3a:1f:7e:57:
                    86:8e:aa:47:99:50:6e:19:00:d8:43:69:61:dc:5c:
                    95:0a:63:50:b7:e6:51:ec:cf:10:4a:6a:3b:20:d4:
                    28:a3:b7:63:17:81:0c:e3:b2:d3:fa:81:5b:f1:63:
                    8b:74:7d:76:e1:74:f4:5d:3e:d2:3b:07:df:7c:7f:
                    69:23:c6:48:c2:ec:d3:0e:35:8e:a7:f7:ba:61:7d:
                    59:71:4b:92:e5:32:6e:69:d1:59:a9:56:1c:e5:e3:
                    5b:01:9c:df:30:64:98:bd:4c:de:98:60:84:d0:4b:
                    95:be:e6:e3:59:55:3a:68:e4:d5:27:9b:dc:1c:14:
                    be:e3:56:2c:59:bf:03:72:3d:76:35:f3:08:cd:47:
                    1f:9e:40:90:4d:62:f7:6e:be:61:22:8f:b4:1c:81:
                    64:a3:dc:05:bb:96:e9:1b:ce:86:29:a9:45:4a:4a:
                    31:5c:f0:02:f5:ad:8a:69:2c:71:2b:eb:9e:74:95:
                    71:3d:40:91:b0:f1:5a:af:ac:96:16:77:10:4b:86:
                    d9:44:08:6b:42:04:5b:4d:58:6a:97:4e:82:da:43:
                    93:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B6:F5:0F:00:63:AB:34:25:BE:31:84:9E:B1:31:61:BD:6A:50:30
            X509v3 Authority Key Identifier:
                keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6e:78:4a:8c:d8:f9:d6:3a:0a:20:69:97:b7:7e:86:3b:98:
         ad:31:07:be:1e:cc:28:0a:a6:01:53:95:ce:d9:d2:6b:85:5f:
         90:56:32:30:ee:17:57:63:0d:ef:da:03:62:0a:e4:8a:e6:4d:
         20:99:f4:37:5c:8b:10:1d:a6:ae:9f:03:b1:b9:10:f5:6f:98:
         3e:7a:d3:ba:b3:ac:77:60:ec:01:51:58:43:05:d2:d9:60:24:
         17:1a:bc:ec:c7:26:fb:44:2d:ef:bb:0d:d2:58:ad:57:53:09:
         3f:74:04:97:77:0b:98:f4:32:c3:c5:45:77:37:86:8e:53:af:
         cf:6f:d0:42:f1:f4:c0:1b:cd:f4:9c:70:be:92:e6:3f:60:6a:
         ae:d2:84:8d:1d:cc:c4:88:e2:7f:0d:93:4f:be:72:a6:1f:fe:
         af:ea:ed:8f:e2:ca:02:1c:e4:3d:ca:64:ad:d6:9e:87:de:8b:
         b2:91:a0:d8:11:b2:19:86:56:2c:0a:6a:36:37:3e:b3:81:42:
         a7:0a:02:50:ea:fd:41:2d:d2:80:0b:c7:f2:a0:a9:2d:60:f7:
         25:dd:ca:22:26:cb:df:30:d0:19:f9:f5:4a:d3:9d:a2:0f:25:
         de:3b:bc:e2:9a:03:65:f6:2d:34:1e:f5:08:6f:45:e5:a3:06:
         07:5a:6d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:15:39 2026 by rpki-client