Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
File:                     JygMxTRRbRwdnqAk6q-9Af3GjJc.mft (raw, json)
Hash identifier:          xej565cBgMVhk8ABjBys4Ovz+aEFpQHodGBG0OUj+98=
Subject key identifier:   98:7E:F3:22:F7:AE:D3:99:CE:F0:E2:AF:4F:CE:ED:A6:A0:C0:6B:25
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Certificate issuer:       /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial:       01A089B1158875070DA884008B440D9527EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
Manifest number:          1A4A
Signing time:             Thu 10 Sep 2026 05:01:18 +0000
Manifest this update:     Thu 10 Sep 2026 05:01:18 +0000
Manifest next update:     Fri 11 Sep 2026 05:01:18 +0000
Files and hashes:         1: JygMxTRRbRwdnqAk6q-9Af3GjJc.crl (hash: 6L09JeH+hvFe3bWL58WRvCDXW2ci4cWUN0k1OPiLlRE=)
                          2: Zq2cQmDy7q3A5_xdFvl7YbbhwIc.roa (hash: PgMe36er/jf5wuEzDom6ucc6sQi96pKMuPFdurESUyQ=)
                          3: k8z_313Hx8hvd4ufZZCaGYZBw0Y.roa (hash: k20SFgFV65J9lEt18uaFg+XOBiT1Sd/tRFmAU9F/loo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 05:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:b1:15:88:75:07:0d:a8:84:00:8b:44:0d:95:27:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
        Validity
            Not Before: Sep 10 05:01:18 2026 GMT
            Not After : Sep 11 05:01:18 2026 GMT
        Subject: CN=987ef322f7aed399cef0e2af4fceeda6a0c06b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9a:5f:0e:21:bf:94:13:2c:af:4b:8b:49:89:
                    3f:d8:5c:09:9f:ab:b8:b7:2e:9b:52:19:b2:0f:98:
                    24:91:a1:a4:39:e8:27:00:6d:ce:03:a8:c8:89:5e:
                    57:c6:fa:5c:ef:8a:aa:cb:a7:56:be:e9:16:23:48:
                    8e:2e:18:26:b0:02:9c:7f:50:e6:e1:67:3e:24:9d:
                    91:a9:c3:4a:af:80:b1:8a:c9:3f:be:de:7c:d7:e6:
                    55:81:7c:cf:20:17:a4:ab:3c:47:4e:ae:bb:12:ec:
                    21:d3:37:e7:22:a1:80:59:6c:85:a1:b7:71:49:8e:
                    ac:3c:37:9b:e9:a0:0f:31:59:fb:6e:af:09:4c:b2:
                    c9:ff:81:6b:f1:2f:c7:26:44:77:dc:6f:3f:28:bb:
                    67:29:12:be:41:41:c0:30:72:75:04:c0:41:fe:96:
                    f0:1a:e3:66:a1:f7:ad:c7:1b:27:af:1f:37:7a:cf:
                    a8:e6:51:da:89:b5:7f:d3:3a:d4:2a:39:dc:17:d5:
                    2e:95:7f:ac:76:e8:97:98:6e:a9:ab:87:c4:b4:f9:
                    f0:d6:74:98:7b:c3:ca:cf:f5:52:af:6a:f4:24:13:
                    b5:59:ac:0d:a2:f8:b3:33:e8:b1:3d:76:31:f7:77:
                    83:e0:0e:38:8e:dc:ed:d7:73:0d:be:79:5f:0a:04:
                    55:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7E:F3:22:F7:AE:D3:99:CE:F0:E2:AF:4F:CE:ED:A6:A0:C0:6B:25
            X509v3 Authority Key Identifier:
                keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:07:61:33:11:d8:d0:e3:2d:2e:20:8f:e3:ab:d6:2f:2d:58:
         11:93:ff:50:ab:4e:4f:d4:ca:67:bd:28:f6:a4:d5:68:81:42:
         9f:74:f6:fc:15:79:de:f3:d0:21:ee:a8:1e:de:31:c3:88:f6:
         8d:d9:42:e1:6f:54:8e:ce:34:5f:62:5b:68:13:28:67:23:65:
         c9:be:0a:25:60:92:fd:95:35:46:20:ee:7b:8d:d2:d0:c2:2d:
         30:f4:39:b2:3e:32:12:82:ea:23:48:ed:4c:3a:c8:87:86:66:
         61:19:1e:98:0c:27:69:b8:de:f0:3b:fb:80:f5:a7:ec:77:15:
         33:0f:e6:d3:8b:09:92:11:c2:73:ec:e1:b0:93:43:ba:ce:d1:
         9f:3a:33:3f:fc:f2:17:5b:a6:42:c5:70:41:2f:82:ae:b9:f2:
         0a:13:fc:48:ec:be:74:d2:5a:4f:dc:c0:a0:70:96:91:50:21:
         26:61:f1:d7:e2:5e:9d:95:cf:ca:fe:c4:7f:d2:19:e8:ec:93:
         af:df:13:96:98:08:1e:7e:bd:86:bb:e3:75:bf:3b:d0:73:10:
         da:2d:d9:42:5c:07:63:59:03:a2:fb:e7:80:8b:d3:68:00:07:
         2c:db:25:cb:c5:61:eb:f7:fa:d1:7c:de:09:92:11:83:0f:32:
         23:58:93:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:39:21 2026 by rpki-client