Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
File:                     JI9eJvHAj0SGyZEci2Cerotst00.mft (raw, json)
Hash identifier:          K2D6Nfno1LLP+swWA/5a/nQVCpkzLEYTOTvgFUWVxAo=
Subject key identifier:   6C:6E:41:30:E6:19:71:97:CF:6E:98:4D:FC:E1:0C:9F:22:80:AC:5B
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Certificate issuer:       /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial:       01A0890C459FA74AFD57E7F8B7556EA69C15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
Manifest number:          1A4D
Signing time:             Thu 10 Sep 2026 02:01:17 +0000
Manifest this update:     Thu 10 Sep 2026 02:01:17 +0000
Manifest next update:     Fri 11 Sep 2026 02:01:17 +0000
Files and hashes:         1: 9WiLMBOOIFui37XsSkkIFcDbunw.roa (hash: 41f5PwE35LBjKoYTvONiL6ypIZadvUiy3rHjOLDko1A=)
                          2: C0xNgAEq_VkYSa0gjqSo4X9OgDk.roa (hash: rs9H4EjX84lTTLv+iIvf+6h9tBHNg+MMsrqn9SRaoow=)
                          3: JI9eJvHAj0SGyZEci2Cerotst00.crl (hash: FDG+WjH1Jskpa9SJrc17DFM4M0tR8rrInZiB3l8Ah0g=)
                          4: PpAX2uR7dOm-fqI5gBjMqcI_sj0.roa (hash: hBH45ktoJ8q7ItYmiVnvXeZkIWerDTCntuxa+oH08yo=)
                          5: XVbyZDeAu74wqWgE4Lug0IJ0xJ4.roa (hash: G5/qOs1gotpqFOvbgNgnzqAQEWPvAJWudCVSYuYf4PQ=)
                          6: gVsFB1HmrHHx_F0oTpBh0qNylSQ.roa (hash: 0WvPL4gzlPSQJArhjHg92bA8wa85QK1qdsvxPM8R9XY=)
                          7: mcBG1OhhxrtDCLZbnbdmL8YYj1c.roa (hash: VU83ADSXkXkgxpUSiqeNZ14qzvTFwfPzksOEUTczOM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:0c:45:9f:a7:4a:fd:57:e7:f8:b7:55:6e:a6:9c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
        Validity
            Not Before: Sep 10 02:01:17 2026 GMT
            Not After : Sep 11 02:01:17 2026 GMT
        Subject: CN=6c6e4130e6197197cf6e984dfce10c9f2280ac5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ba:30:ba:36:1a:e7:b5:bc:50:28:53:e7:c6:
                    a2:49:3f:22:bd:1e:0d:18:1d:5c:ec:57:e3:d3:20:
                    68:06:ab:59:84:d6:0c:b5:3f:33:c7:ff:d9:5c:59:
                    ee:fb:f9:86:ed:77:ff:a6:96:b8:43:ee:59:ef:a8:
                    9a:64:e7:6d:e1:34:db:ef:9c:bd:a3:c4:16:54:4b:
                    1a:1a:e6:76:7f:e7:c7:7c:d4:5a:87:d1:9e:a2:c5:
                    c6:ec:24:86:73:a3:5e:1e:b9:23:1d:e6:70:e7:54:
                    59:99:09:c3:27:ee:cd:2a:8b:7a:3b:9b:bc:81:85:
                    46:2c:d1:1f:3f:96:29:77:40:f5:d1:fb:d7:46:f8:
                    60:26:15:11:a4:00:c7:b9:84:ad:6b:8a:ed:f9:3c:
                    6c:af:e9:5b:19:6b:64:d9:b0:8b:fb:38:b5:41:35:
                    22:e0:cb:1a:9e:ae:d0:0e:e2:c2:07:3c:89:1f:5c:
                    4a:47:ae:cb:69:8b:ba:90:e2:f8:92:08:9a:1e:3d:
                    39:6f:ff:29:8e:c2:3c:70:73:07:4a:56:a2:db:f0:
                    45:15:0d:bc:13:19:f8:a6:40:7c:c8:97:66:5b:b9:
                    c8:b3:4c:d4:53:f5:49:d5:84:b6:e9:09:cd:65:56:
                    5c:4f:b9:df:bf:c9:83:ce:1f:17:9d:4c:fc:c9:31:
                    3d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6E:41:30:E6:19:71:97:CF:6E:98:4D:FC:E1:0C:9F:22:80:AC:5B
            X509v3 Authority Key Identifier:
                keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:49:4c:96:5d:cd:3d:e6:66:20:ca:c2:81:b3:bb:7e:31:29:
         66:62:4a:44:0b:91:ff:f7:4f:eb:5c:f5:f2:fe:cc:45:34:7d:
         15:5e:00:04:ba:5f:c7:fa:9f:d0:06:19:b0:38:92:10:55:46:
         94:ef:dd:c2:9e:e5:92:56:c9:5a:f3:69:15:48:1f:29:26:3b:
         32:d5:b2:ee:59:23:be:24:43:cd:30:fe:93:d4:b8:e2:6c:ce:
         b1:99:55:d9:71:3f:eb:c4:00:0d:f6:50:cd:aa:71:e9:8d:ba:
         94:98:96:a6:6f:0e:3b:b5:36:a4:07:36:37:5d:5a:d6:72:f8:
         24:83:51:5f:07:37:56:98:0f:8f:6a:87:cb:f5:cc:78:bc:c5:
         5b:55:c4:0d:de:90:34:6c:34:4d:27:ba:ff:21:a9:15:6b:2e:
         a9:cc:10:55:c3:bb:58:1f:8d:4f:5e:ce:18:f5:1c:94:9f:b3:
         85:08:8c:78:33:7d:21:4a:dc:24:26:11:20:7a:27:60:cd:59:
         b3:72:a3:25:53:7b:62:5a:44:b1:cd:6b:76:73:e8:0f:f6:2d:
         9d:3e:d1:4c:29:84:d5:fe:55:dd:9c:73:53:5d:e8:ad:4a:9a:
         6c:7e:e3:e4:5d:e4:96:9e:93:cc:c8:c5:70:a0:55:b9:37:84:
         89:6c:c2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:16:56 2026 by rpki-client