Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
File:                     JYlBoze4yhX8rpFvy0IMWN8uC5w.mft (raw, json)
Hash identifier:          vkkq+SbEHIDI9ORphVIp2L2lsNyy0SWDBLrwcJU6rEE=
Subject key identifier:   C7:7D:E5:AE:DD:0C:CA:43:FE:0F:1A:4F:F9:1B:6A:35:AE:78:C7:6F
Authority key identifier: 25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C
Certificate issuer:       /CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
Certificate serial:       01A06DCBB31F6A40A4D03B77969C5F899EEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
Manifest number:          0232
Signing time:             Fri 04 Sep 2026 19:01:01 +0000
Manifest this update:     Fri 04 Sep 2026 19:01:01 +0000
Manifest next update:     Sat 05 Sep 2026 19:01:01 +0000
Files and hashes:         1: 1cIJB5t4VNf5k_S4SZQEVA_Gel8.roa (hash: uFnVMc18EiMQKDqx5qFS6Wxo2QGlSjbuLUdYiKMeKAw=)
                          2: JYlBoze4yhX8rpFvy0IMWN8uC5w.crl (hash: LO1RZYX30RwWALLk4hznVfjOB4Q8T19fAsLw8fhb2ZE=)
                          3: UJipqVvqOrmneDNVOQTLWccD8RM.roa (hash: xUofYKFm/cJYmloG7elECsH0T5bTc28YNW12IlPh/zM=)
                          4: j98UV-BgExyb9adi5erOXscKqog.roa (hash: 88mctdTU6yo8PEQaJDy8QcI7oK95L6LpsJR0cE4Epq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:cb:b3:1f:6a:40:a4:d0:3b:77:96:9c:5f:89:9e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
        Validity
            Not Before: Sep  4 19:01:01 2026 GMT
            Not After : Sep  5 19:01:01 2026 GMT
        Subject: CN=c77de5aedd0cca43fe0f1a4ff91b6a35ae78c76f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a9:6e:c9:66:00:89:0f:8b:c1:6c:23:ef:18:
                    78:1c:7f:f7:5e:45:97:06:ad:d4:be:24:e4:db:d3:
                    c4:fb:c2:b4:9c:d4:5e:57:1d:ae:06:a6:d5:a2:06:
                    37:90:67:50:ff:76:03:51:96:d1:91:1b:2d:e3:37:
                    e2:62:32:22:b7:dc:ec:7a:4c:c3:64:aa:56:50:e8:
                    99:7e:17:52:28:53:da:e5:46:f2:8b:88:3c:30:f4:
                    15:bd:9f:23:2c:86:9e:2c:bb:e2:e5:69:65:32:05:
                    45:f3:f3:e1:e8:20:09:d2:73:0d:ff:63:a4:31:67:
                    03:b2:7d:09:a2:cd:f1:e6:6a:4d:fe:7b:f8:59:8e:
                    5a:d1:c5:46:89:19:2d:13:0f:a3:8e:fc:4f:67:8b:
                    0d:d5:ae:66:59:64:65:d6:25:bb:c6:ab:90:a9:81:
                    9c:36:0f:80:65:54:fc:24:5d:1d:0d:a6:93:c6:b8:
                    05:92:ef:cd:8b:e1:7a:22:da:72:13:60:5b:05:a8:
                    d8:bc:cf:b6:49:88:a5:54:4d:c2:64:4c:c8:ab:cd:
                    69:b4:a0:a6:fc:69:0f:bf:0b:f1:22:16:71:92:ed:
                    ab:84:81:b3:31:36:69:c2:8b:39:16:95:2f:7e:15:
                    7e:fc:a0:98:e7:5a:3d:5f:c6:d2:73:48:02:0d:de:
                    89:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7D:E5:AE:DD:0C:CA:43:FE:0F:1A:4F:F9:1B:6A:35:AE:78:C7:6F
            X509v3 Authority Key Identifier:
                keyid:25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:fc:f4:bd:4f:4f:5e:1d:8e:58:af:fd:82:f8:cd:0c:3c:b3:
         e6:0c:d9:d4:3c:be:78:60:f2:51:a0:6f:33:7e:07:d3:40:1b:
         48:32:a0:7c:b4:ec:d5:25:13:57:ff:75:69:73:c9:76:36:fe:
         03:bb:a1:42:c1:64:c0:55:d0:7f:ad:7c:8b:d6:78:3f:de:35:
         56:8e:ba:5b:50:84:3a:86:7b:02:dd:af:45:36:9f:00:23:8e:
         fa:c5:de:be:25:01:67:6c:10:b0:42:4e:a7:df:e4:bb:32:09:
         a0:79:24:48:54:e3:8a:a1:12:f1:77:10:97:8f:25:41:29:f3:
         38:74:1a:5d:b7:72:63:73:6c:40:35:42:2e:f9:3c:84:6a:75:
         dc:f4:e3:ea:59:61:ab:0a:0d:f1:e2:19:f9:3c:4f:09:9f:26:
         32:10:20:1d:72:a1:c5:6a:ea:27:77:86:51:24:b9:f4:8d:f5:
         5f:50:43:15:f4:8b:67:97:d1:6f:d9:f7:ef:f2:f4:d6:96:b8:
         28:36:29:e2:ad:48:d9:66:37:bf:d7:84:e4:a2:67:fe:a2:7a:
         7b:62:cb:b3:e7:b0:b4:05:1f:da:f8:06:9b:8d:27:69:c9:bb:
         22:8b:e4:f2:3b:95:6a:d5:44:00:71:51:cc:d0:cc:30:99:ba:
         d3:6c:42:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:42:14 2026 by rpki-client