Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.mft
File:                     J1-trhEuaASZSOIwhiFbfxVbCcE.mft (raw, json)
Hash identifier:          /j1J9y/mtdKI2ZETqdKD5KQyWxnCCHAxsW5reBaiF+Q=
Subject key identifier:   05:05:8A:B4:AB:DB:96:7A:A9:FE:8F:BE:46:D5:50:1C:4B:71:30:72
Authority key identifier: 27:5F:AD:AE:11:2E:68:04:99:48:E2:30:86:21:5B:7F:15:5B:09:C1
Certificate issuer:       /CN=275fadae112e68049948e23086215b7f155b09c1
Certificate serial:       01A0F6B2F1C42D79C6C54D8E441ECE4D41ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J1-trhEuaASZSOIwhiFbfxVbCcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.mft
Manifest number:          F9
Signing time:             Thu 01 Oct 2026 09:01:57 +0000
Manifest this update:     Thu 01 Oct 2026 09:01:57 +0000
Manifest next update:     Fri 02 Oct 2026 09:01:57 +0000
Files and hashes:         1: 0shQJP_olUAaquYrEXYkfoOk2xE.roa (hash: 4+ThIr9odjX0ODg2LR7+zUmLjBlN+O98mTnzdPuwUjY=)
                          2: J1-trhEuaASZSOIwhiFbfxVbCcE.crl (hash: RmUatffmuIeVtvFJW5XdtOYJ5ZqimJ8oI1wqVq0VK/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J1-trhEuaASZSOIwhiFbfxVbCcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 09:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f6:b2:f1:c4:2d:79:c6:c5:4d:8e:44:1e:ce:4d:41:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275fadae112e68049948e23086215b7f155b09c1
        Validity
            Not Before: Oct  1 09:01:57 2026 GMT
            Not After : Oct  2 09:01:57 2026 GMT
        Subject: CN=05058ab4abdb967aa9fe8fbe46d5501c4b713072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:04:f9:c6:b6:4f:dd:23:3e:20:1a:35:ed:
                    bc:73:75:0c:18:00:bb:f4:05:b8:19:33:69:7f:a5:
                    16:cc:f6:cb:a1:73:67:e5:20:ab:aa:b4:b2:a1:d9:
                    bb:b6:e9:cb:7b:63:c1:c1:95:02:bb:69:a5:21:ec:
                    b5:b6:62:61:24:2d:39:80:70:11:b2:b2:b9:ee:9e:
                    a4:8f:aa:47:59:52:bc:91:ed:b7:4d:7d:02:fd:b7:
                    fe:72:da:a4:03:24:a0:ab:f8:14:87:c5:57:c2:0f:
                    a7:ed:9d:50:1d:2a:30:0c:fb:8b:8e:f5:12:3f:fa:
                    a1:ed:23:7d:62:17:56:22:ad:d0:a8:87:f7:33:50:
                    51:22:12:26:49:89:40:e4:84:14:4d:71:35:4d:66:
                    2e:d9:d4:5b:18:5b:c5:01:68:12:0e:8b:dd:ce:44:
                    8b:ec:19:26:1d:d8:66:26:db:97:92:b5:35:c4:f8:
                    c4:c6:83:5e:58:0d:46:22:d0:38:26:31:dc:28:8f:
                    3f:4e:42:f9:ed:e7:19:00:a2:a2:41:f4:f4:49:aa:
                    19:56:e4:43:70:4a:f4:50:a4:fe:56:c8:a1:5d:2e:
                    b1:66:87:c9:da:5e:c6:e9:03:fa:b5:67:3a:7f:65:
                    e8:5c:ac:cd:9d:cc:c2:40:f9:62:8a:a7:43:6f:41:
                    3f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:05:8A:B4:AB:DB:96:7A:A9:FE:8F:BE:46:D5:50:1C:4B:71:30:72
            X509v3 Authority Key Identifier:
                keyid:27:5F:AD:AE:11:2E:68:04:99:48:E2:30:86:21:5B:7F:15:5B:09:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1-trhEuaASZSOIwhiFbfxVbCcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:b0:30:22:40:95:20:2a:0d:24:70:8c:00:41:6b:f5:3d:64:
         5e:c0:d0:b9:ad:cb:94:90:50:42:a3:70:14:d3:80:c6:b3:cd:
         51:f0:2f:44:7e:7f:26:c6:22:fa:af:3c:b6:fa:6e:f0:85:9a:
         69:ec:d9:7d:c1:24:1f:a6:88:9a:47:69:f7:12:c7:aa:ea:5c:
         42:94:33:9d:ec:eb:6b:2c:fc:38:3b:6f:1b:80:f4:9a:5a:4a:
         7e:3b:e1:2e:8d:52:7f:09:a5:ea:0e:ff:4d:c6:ee:77:ab:a3:
         21:2f:48:b2:76:e5:fd:ba:54:ef:3c:62:cb:3d:68:42:15:fe:
         20:a7:b1:48:31:f6:70:91:59:67:bc:80:d2:77:18:1a:cd:53:
         e5:db:fa:10:71:27:34:3c:59:c5:b6:fb:2e:fa:6e:ac:f9:34:
         66:9f:93:95:87:94:e3:36:81:31:f7:43:c7:4f:15:d0:fc:cc:
         61:7c:2b:00:2b:ed:bc:62:9a:07:c2:52:ca:83:d8:66:e2:9c:
         60:aa:b0:67:f0:03:c1:42:34:2e:31:b4:42:9c:bb:92:0c:8c:
         86:95:95:b1:79:ff:c9:7a:7d:45:62:b7:7b:c9:bd:8d:b6:a0:
         b4:c1:23:8e:66:b6:4e:94:b7:81:b3:23:eb:e7:65:78:7a:7c:
         af:96:0a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 23:23:21 2026 by rpki-client