Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
File:                     jBPrj9nY20toqWnI_91IRoAqsKs.mft (raw, json)
Hash identifier:          2MMTGncDl4GsvwCiNZTbFeIV+jFq9RVB1Nb4AfNuRA4=
Subject key identifier:   BE:CC:54:8B:A9:B0:DA:99:98:CE:4E:50:41:A5:08:3D:50:FC:EE:AE
Authority key identifier: 8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
Certificate issuer:       /CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Certificate serial:       01A0B5AD128ADF28FABC21DEB8DC34118452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
Manifest number:          0DE1
Signing time:             Fri 18 Sep 2026 18:00:13 +0000
Manifest this update:     Fri 18 Sep 2026 18:00:13 +0000
Manifest next update:     Sat 19 Sep 2026 18:00:13 +0000
Files and hashes:         1: e29x5KQ9lUTXsNTy9Js9YJvWUiY.roa (hash: CkkrAFaQANiawRM+t6VTBnKH0rFPseRbQYjCYVGniKU=)
                          2: jBPrj9nY20toqWnI_91IRoAqsKs.crl (hash: EEVkBgkijc4ovz4xce3nUYi/hWrjGb/6BFn5vB5pTac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:ad:12:8a:df:28:fa:bc:21:de:b8:dc:34:11:84:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
        Validity
            Not Before: Sep 18 18:00:13 2026 GMT
            Not After : Sep 19 18:00:13 2026 GMT
        Subject: CN=becc548ba9b0da9998ce4e5041a5083d50fceeae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d6:fe:7f:9e:1d:8a:c1:df:1a:02:34:f1:ec:
                    22:62:17:f1:a9:3a:7f:c1:85:cc:48:b4:59:47:72:
                    0a:a3:bf:20:d6:ee:58:aa:d4:42:48:62:35:75:55:
                    6b:f3:a2:e4:33:aa:87:40:63:7a:3d:4f:9e:6f:69:
                    60:8b:9a:12:b0:94:03:ac:2b:99:84:44:74:51:85:
                    31:b3:61:b9:45:c1:5d:f5:7a:26:32:29:e9:bb:ff:
                    59:b3:28:18:06:0b:ae:5e:ea:78:d1:16:a1:01:35:
                    99:f8:9d:c7:d3:e7:dc:ed:be:74:38:9b:85:d0:21:
                    4f:00:f4:67:c1:ad:b7:68:ff:e2:36:1c:5e:fc:71:
                    96:2a:37:2f:2e:72:33:77:82:5b:60:94:21:0e:f7:
                    cd:83:2a:ef:ce:80:da:d9:32:46:f6:64:ad:f1:d5:
                    c7:9e:a8:8a:3f:8c:47:86:90:d7:56:cc:05:0e:7b:
                    f1:9e:06:9e:fc:ac:47:05:14:fe:73:69:0b:bc:b8:
                    9e:b8:ef:9b:23:94:09:51:31:4f:32:40:c7:c0:85:
                    a5:28:16:b2:19:ef:0d:87:a6:ca:12:57:31:72:d8:
                    12:00:fb:4e:c5:0f:d7:d1:5f:fe:a9:48:d9:ac:2c:
                    f5:6b:2a:aa:62:5a:ca:27:ed:95:03:46:ac:ad:a1:
                    68:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CC:54:8B:A9:B0:DA:99:98:CE:4E:50:41:A5:08:3D:50:FC:EE:AE
            X509v3 Authority Key Identifier:
                keyid:8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8d:ff:ce:15:b1:5d:e1:9b:74:7d:2f:c3:ff:9d:0b:c6:44:
         7a:a8:11:5e:43:28:cd:81:c5:e0:94:cb:a5:bc:28:6c:47:3b:
         f1:58:ca:ae:84:b1:94:59:e1:59:0c:6a:67:15:40:10:d7:3e:
         b1:1c:87:81:06:55:a2:9b:1e:0a:c7:2f:02:29:df:c9:ce:8a:
         99:d3:9e:fc:cd:55:92:1d:20:ae:05:67:b3:1c:ee:dc:29:f0:
         32:e7:65:c6:d2:11:02:9a:50:59:c9:b5:ff:13:b9:be:b0:3f:
         86:cf:79:d0:49:93:54:8f:1a:59:1d:0b:2a:c1:79:f1:32:89:
         a4:8d:d0:b6:8d:41:5e:0c:7d:a0:3d:79:08:97:b1:a8:a9:bb:
         79:a4:5a:e2:30:fe:8b:0f:7a:ba:f8:d2:17:b8:99:d0:72:56:
         94:76:cb:71:a4:f6:e5:f8:81:66:0d:ac:42:a1:3e:51:ba:74:
         6e:c6:dc:ca:69:2a:01:46:3f:07:b6:b4:0a:a2:b1:2b:64:31:
         09:8e:25:e2:83:30:89:1b:15:4e:10:3e:7b:03:30:fd:bb:9b:
         b3:20:29:91:5e:b6:72:f9:f0:4e:4d:87:35:6a:28:5a:3b:99:
         f9:a7:f6:25:47:16:cb:a3:b3:b2:90:68:84:9e:40:33:ef:e0:
         45:51:2b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 03:20:32 2026 by rpki-client