Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File:                     J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier:          yBry7uE/Vqv+fWdWyZ97XA2T4m2H+fauRuHygyWIzQA=
Subject key identifier:   0D:CC:CA:F2:39:0A:7E:BC:AA:D4:F1:88:F3:1A:4A:46:FE:57:A5:87
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer:       /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial:       019FFA241F961EAAA16CBF9DCE682BCCEAB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number:          101E
Signing time:             Thu 13 Aug 2026 08:01:39 +0000
Manifest this update:     Thu 13 Aug 2026 08:01:39 +0000
Manifest next update:     Fri 14 Aug 2026 08:01:39 +0000
Files and hashes:         1: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: dMmxSDe/2N9CEtFy/MgCBaXQAgZHYNutqSilr3YmwzI=)
                          2: iE4PQgRjpLQVuICAA3DM5HMD4dA.asa (hash: 7+oS6U+AgY0TPyB7aEzZVmVleVk45DEZaf8PoCW8nYU=)
                          3: vemKapMmkStR7tolVhfdLCFIHqo.roa (hash: dA21yuRu1C5aB1w0/kkdpqei9cBkSg/W6yABWc5Hwig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fa:24:1f:96:1e:aa:a1:6c:bf:9d:ce:68:2b:cc:ea:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
        Validity
            Not Before: Aug 13 08:01:39 2026 GMT
            Not After : Aug 14 08:01:39 2026 GMT
        Subject: CN=0dcccaf2390a7ebcaad4f188f31a4a46fe57a587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:dc:bb:87:34:2d:ca:e3:3d:dd:19:cf:c1:
                    1f:3e:cd:7e:ba:47:e1:cd:42:c4:b0:68:7e:55:b7:
                    f1:e6:eb:78:e3:fb:cd:ab:a7:37:86:f9:e8:9e:32:
                    f8:7e:73:6c:bd:5c:6d:65:ea:2c:f2:7d:46:56:50:
                    30:b1:ab:79:79:73:5f:ca:2a:17:e9:8c:c1:bd:4b:
                    cc:ae:88:63:c9:0f:2d:bb:50:89:95:f4:6e:1c:c7:
                    fd:ce:42:0b:ec:d8:d1:cb:60:66:f8:25:af:e0:01:
                    e9:f4:d4:76:c3:ed:03:07:46:f8:a7:ce:93:59:62:
                    29:0a:5a:e6:ee:90:64:76:cd:c0:dc:85:e0:b1:db:
                    c3:e5:f0:3f:0a:7e:ba:d7:a1:fe:28:34:1c:89:52:
                    02:b9:1c:53:4b:53:0c:62:6b:46:66:c6:38:2b:ea:
                    59:a3:d9:b5:8a:43:d9:69:a1:82:a7:ba:2f:48:74:
                    77:03:8b:5c:e6:5a:49:6c:14:1b:de:66:de:a8:95:
                    50:cd:bc:ac:2d:a9:89:b9:15:87:df:a3:51:64:2c:
                    3c:6a:71:f1:0d:8f:bc:b0:5e:a4:6a:44:c9:cc:eb:
                    6b:aa:4e:95:93:c7:0b:e4:1c:59:8c:ad:42:e8:da:
                    ce:c3:35:72:64:df:28:e0:70:46:3f:9c:df:75:c0:
                    ec:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CC:CA:F2:39:0A:7E:BC:AA:D4:F1:88:F3:1A:4A:46:FE:57:A5:87
            X509v3 Authority Key Identifier:
                keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d4:60:17:ef:3f:35:09:06:db:f2:cf:48:3a:8c:2d:eb:c0:
         3b:5f:f8:f1:f4:40:ff:ad:df:f2:a8:ba:72:f4:7f:cc:72:15:
         24:8c:71:1e:33:42:25:c1:c7:a4:58:d5:17:b5:de:da:01:3a:
         6f:48:93:9c:9c:0a:b3:e9:ea:57:8c:91:b5:dd:81:34:74:1e:
         23:e0:15:3d:9e:a5:6d:f9:aa:1f:c7:e3:4f:9e:55:f5:e2:63:
         3a:7a:31:0a:59:fc:69:8d:00:74:76:80:07:ef:c0:3d:94:f9:
         75:eb:88:59:01:e1:32:1c:ae:9d:a0:0b:0e:a6:ea:1e:43:db:
         73:49:87:ff:17:a9:a2:33:fe:cd:7a:b1:e3:7e:9d:57:14:da:
         5b:2e:6d:ff:37:55:40:c1:0b:e4:b9:9e:d4:72:9d:88:6f:ab:
         c8:51:b0:03:83:8b:80:25:44:7b:0c:fb:fd:bc:c7:5a:5f:c1:
         38:a8:d3:6b:8c:d2:71:c6:b6:00:20:05:74:3e:8c:dc:04:a3:
         05:d0:95:43:85:d2:d5:28:68:ba:1e:68:44:c6:8e:f6:66:b5:
         f5:d5:2d:73:50:a3:d0:a8:24:6b:89:45:09:2c:94:82:19:d8:
         29:0a:93:c8:b0:16:7d:67:f4:53:10:02:43:23:d0:b5:e1:b2:
         35:00:3d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:01:29 2026 by rpki-client