Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
File:                     j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft (raw, json)
Hash identifier:          8tLC69N9yyYyfR3WeJ+X7q7DavaxTKia9nbsqShNkpU=
Subject key identifier:   F6:81:94:34:E6:5E:3D:F5:69:87:25:FB:71:31:5A:D4:59:2F:CB:6F
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Certificate issuer:       /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial:       01A0EA76FE5463A6431A631266C02033851B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
Manifest number:          1A90
Signing time:             Tue 29 Sep 2026 00:01:01 +0000
Manifest this update:     Tue 29 Sep 2026 00:01:01 +0000
Manifest next update:     Wed 30 Sep 2026 00:01:01 +0000
Files and hashes:         1: 41oXR0Dcl8hEJOhB0K8Qrklv49c.roa (hash: TTWK0RRIlbuhKut+ATLmSdEPI+QN808VYnN7Vid5qyQ=)
                          2: Dv951AUIUaLuX0MPAgSurBs_Q4o.roa (hash: 3zxZnskXEXOtDhz+ouG2z/QdauveqbNwr6CiV/4QdDc=)
                          3: K9WiUPnzKMk0kTn3YOAAeGsJ3EI.roa (hash: dUaZk3IlcqCI85S/6UCtSKIbamHpI107QQx2h8oykGA=)
                          4: LxOq1v5UAj3ExgdR-fIgrMVK-BY.roa (hash: /x4igD0ebKYVQZig1vtn+O0OtoMkLAFpYnPG8GiLvWI=)
                          5: U-2sblCAHu3qIKD-Lrud2Vu1jU0.roa (hash: QBCXbXwqQu101TJcQB50Hnn/s+aowNHvXExjcnPeLEI=)
                          6: j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl (hash: BIZFpjW1QsgAWkY47tzfKIWErbx+27o4ah7Ja1k2h9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:76:fe:54:63:a6:43:1a:63:12:66:c0:20:33:85:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
        Validity
            Not Before: Sep 29 00:01:01 2026 GMT
            Not After : Sep 30 00:01:01 2026 GMT
        Subject: CN=f6819434e65e3df5698725fb71315ad4592fcb6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d1:02:dc:7f:b8:b7:56:7d:18:4e:a6:c8:26:
                    66:76:a5:4e:89:29:80:ee:59:77:34:72:2d:58:ad:
                    8b:35:a3:a4:6e:33:f3:7e:59:c2:8b:cc:44:12:e0:
                    12:48:49:b9:20:5f:f2:7d:72:d1:f7:0d:db:4b:e5:
                    79:5b:e3:8e:fb:ad:6b:f8:e0:74:6a:3f:ce:f6:5e:
                    3e:ab:4f:77:da:df:a2:33:24:8f:be:b8:92:34:6f:
                    5a:33:44:88:82:f2:f7:dd:66:36:92:d3:9c:69:45:
                    23:ef:f7:7a:9a:28:82:9a:e6:71:6d:a7:63:77:7c:
                    6d:22:aa:bb:8a:00:c3:e1:13:c4:df:c6:06:07:68:
                    8a:2a:dc:15:26:e2:94:b2:5c:aa:73:bc:1a:7d:6f:
                    1d:92:1c:d7:9f:22:b2:de:16:34:a9:da:1c:4d:8c:
                    bb:72:e5:e8:fd:f8:2f:bb:25:cf:9c:b0:95:e9:82:
                    ad:9e:67:37:a1:e3:68:4b:e3:33:1a:51:42:cc:c9:
                    66:65:ad:51:79:b8:f9:ff:cb:54:89:f3:23:c4:c5:
                    b1:3d:df:b7:16:9e:4d:3f:fe:62:33:64:1c:60:31:
                    4a:61:a0:0c:ae:f3:af:66:a8:8d:b5:d3:a0:34:d3:
                    d1:2e:99:8d:2b:66:74:2d:45:6c:48:df:e9:e1:da:
                    84:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:81:94:34:E6:5E:3D:F5:69:87:25:FB:71:31:5A:D4:59:2F:CB:6F
            X509v3 Authority Key Identifier:
                keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:86:81:e1:dd:b1:48:38:b5:b0:4e:1b:45:f8:56:21:60:81:
         56:6c:02:2f:01:97:a4:41:e8:7d:e3:19:a9:b6:2f:e0:4e:1a:
         1c:3b:97:dc:5e:ec:b4:ae:35:0f:10:ca:79:7c:6f:59:37:59:
         88:b5:57:00:76:af:5d:30:e7:20:66:e8:7c:16:87:86:32:67:
         42:d3:6b:5d:eb:7b:ed:8b:52:21:ba:48:ce:84:61:3f:60:a8:
         48:83:01:64:98:50:a6:90:c6:be:00:e4:21:92:0c:a9:b6:c6:
         5c:8b:48:c1:20:64:f4:f5:67:c4:75:d6:e4:9a:f0:d2:c4:1a:
         02:58:7c:a4:0c:08:dd:d9:3b:94:5a:14:6d:5c:87:51:a7:da:
         69:9c:fc:d4:47:8a:39:71:8f:34:b7:01:04:a8:98:26:b1:ee:
         ee:a4:9a:40:9c:42:91:03:fa:a3:dc:96:1a:90:39:69:62:5b:
         fb:95:ef:8e:72:5d:fc:1a:2d:e4:f2:69:d7:fe:ef:95:c7:ae:
         41:54:e9:24:20:b0:1a:ee:3f:3e:25:94:73:c5:3d:ea:2d:d2:
         ad:10:74:ad:9b:c2:97:8b:d6:ef:96:15:8e:88:c5:02:65:c9:
         18:2b:b4:62:19:26:af:6f:9b:d8:44:3e:60:45:4b:f7:08:10:
         26:fd:99:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:32:53 2026 by rpki-client