Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
File:                     JYlBoze4yhX8rpFvy0IMWN8uC5w.mft (raw, json)
Hash identifier:          yI57BlD0fuhNuj1SbSrKBQquszEj05+RdoSvip64dMg=
Subject key identifier:   28:64:8C:EC:78:A1:E9:58:EB:6D:27:9C:BD:95:7B:BA:4B:D2:11:29
Authority key identifier: 25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C
Certificate issuer:       /CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
Certificate serial:       01A16EA4E78D2DF1E98E94D360AB8C051F53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
Manifest number:          02B7
Signing time:             Sat 24 Oct 2026 16:01:03 +0000
Manifest this update:     Sat 24 Oct 2026 16:01:03 +0000
Manifest next update:     Sun 25 Oct 2026 16:01:03 +0000
Files and hashes:         1: 1cIJB5t4VNf5k_S4SZQEVA_Gel8.roa (hash: uFnVMc18EiMQKDqx5qFS6Wxo2QGlSjbuLUdYiKMeKAw=)
                          2: JYlBoze4yhX8rpFvy0IMWN8uC5w.crl (hash: jn7Ji+pcIueRlwNTaypAwsDeIINojr8IPhU9Tx9Sqck=)
                          3: UJipqVvqOrmneDNVOQTLWccD8RM.roa (hash: xUofYKFm/cJYmloG7elECsH0T5bTc28YNW12IlPh/zM=)
                          4: j98UV-BgExyb9adi5erOXscKqog.roa (hash: 88mctdTU6yo8PEQaJDy8QcI7oK95L6LpsJR0cE4Epq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6e:a4:e7:8d:2d:f1:e9:8e:94:d3:60:ab:8c:05:1f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
        Validity
            Not Before: Oct 24 16:01:03 2026 GMT
            Not After : Oct 25 16:01:03 2026 GMT
        Subject: CN=28648cec78a1e958eb6d279cbd957bba4bd21129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:95:f2:ab:a9:e5:fc:3c:c6:25:29:94:aa:
                    a6:58:2b:c3:ed:dc:d4:04:a6:42:53:4d:3a:b8:9d:
                    2e:e2:0a:21:08:87:98:aa:40:08:ab:3a:58:63:66:
                    7d:c4:dc:36:6b:d9:90:ff:72:97:2a:93:1c:b0:61:
                    6a:5d:03:7e:30:8e:9d:43:90:9b:4a:8c:23:89:9b:
                    53:e9:bb:eb:09:72:fa:4c:4a:dd:e7:e6:c6:73:43:
                    f2:65:df:a9:2a:d1:06:94:40:d4:b9:11:60:13:71:
                    25:16:4d:7f:b4:b0:ff:c0:6b:88:16:f5:7b:26:1d:
                    a5:7a:ee:9c:0c:21:35:3b:3a:f6:8c:7c:0a:a3:4e:
                    6a:2f:b2:a8:b2:a3:6c:83:4b:30:12:d8:ca:82:1c:
                    60:fb:09:8b:68:1c:64:a1:95:45:2f:4d:4d:a4:1c:
                    89:1d:ec:3d:83:9d:9e:a3:8f:f1:b4:af:c9:7f:fb:
                    9b:6b:89:d7:36:ea:07:26:f3:55:b4:d9:44:5e:ba:
                    28:92:98:dd:0b:c2:83:d1:bf:00:0e:f8:04:c2:9c:
                    9f:27:5c:3b:dd:a4:32:04:5f:9c:69:61:9c:ed:ac:
                    5f:90:d9:3d:f1:4d:ea:03:76:81:b3:43:8b:c5:fd:
                    bb:1a:8c:95:53:7f:51:ed:78:76:f0:21:8e:74:cc:
                    07:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:64:8C:EC:78:A1:E9:58:EB:6D:27:9C:BD:95:7B:BA:4B:D2:11:29
            X509v3 Authority Key Identifier:
                keyid:25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:bc:a5:52:a3:c8:67:58:8c:90:63:57:7e:11:98:e9:5b:c0:
         64:c9:64:ad:62:ff:3c:f8:91:27:e9:99:a0:82:a8:df:f1:f3:
         3f:b8:b1:69:b7:c8:6b:26:7c:87:b9:f5:56:31:5c:c8:26:90:
         8d:ad:39:05:e4:d3:37:63:e4:37:18:cf:97:cd:bb:6d:d1:f9:
         08:6f:05:cb:ba:c3:9e:2c:e6:ae:13:71:5d:56:e9:2a:f8:41:
         71:b9:e3:21:7d:7b:4b:d7:3b:26:08:20:db:bb:39:ab:d1:1c:
         1c:da:9a:0e:02:ca:ee:11:2f:2d:75:f1:21:41:c0:64:de:49:
         ba:a9:f4:a0:85:e8:99:d9:ed:ed:84:94:a0:73:d8:1a:ba:fd:
         3c:cf:f2:99:52:c4:6e:94:db:3e:8a:ce:dc:40:34:fa:62:74:
         69:c2:e6:91:17:f9:e0:d9:e5:77:d9:f1:9d:42:99:70:de:5f:
         13:6c:d1:70:6e:d5:e2:5a:d4:48:fb:18:ef:14:a3:00:9c:52:
         86:c8:86:e0:e9:25:cf:f6:be:dc:7b:56:65:43:85:43:da:05:
         58:94:e6:8e:68:49:b1:0b:0d:ea:11:43:9e:8e:f0:da:30:ce:
         18:e4:8a:d0:c9:72:47:e4:ca:4c:3f:e0:f4:5c:c6:83:ee:ca:
         da:5c:20:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:13:57 2026 by rpki-client