Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
File:                     _JgxNwQvyMSSFwfU622l9sSnmls.mft (raw, json)
Hash identifier:          Hmt2eoTDnKwSH89ZRLkhgM8RHm9+9g0i6i9A+bOpFYc=
Subject key identifier:   DC:E1:A5:76:2D:7A:B8:83:71:7C:AA:47:AE:94:DF:AD:69:E7:15:2B
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Certificate issuer:       /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial:       01A104376DA7889EEA58B1B3C67D91655A9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
Manifest number:          1A8C
Signing time:             Sun 04 Oct 2026 00:01:43 +0000
Manifest this update:     Sun 04 Oct 2026 00:01:43 +0000
Manifest next update:     Mon 05 Oct 2026 00:01:43 +0000
Files and hashes:         1: 8cXgfY935pWDnZCWNqHhGp8ZCAc.roa (hash: ZeB2ygzRQctKc3w/Zm8oCcAhRf37Zz/MVNjusDnt2mo=)
                          2: U8t2JW_kjuRPOEEcuD5OXG8vU5s.roa (hash: AonXRXVRx1Opw2zNQQjpzxeB1MfNANDEV8Jlm8F8xC8=)
                          3: _JgxNwQvyMSSFwfU622l9sSnmls.crl (hash: M7W4HnSeALW/1q+0B91AQ21IGNVUNwmEf98JOm0xBxk=)
                          4: oj9oX7VOpSpHPa8jC4mFQUNG32g.roa (hash: Hw7z02cVTJ9+JSdnwOvxaUFM6zH/Yq09kWqzPwdi4Yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:37:6d:a7:88:9e:ea:58:b1:b3:c6:7d:91:65:5a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
        Validity
            Not Before: Oct  4 00:01:43 2026 GMT
            Not After : Oct  5 00:01:43 2026 GMT
        Subject: CN=dce1a5762d7ab883717caa47ae94dfad69e7152b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:ad:0b:25:b3:43:9d:a5:77:d6:1a:a9:e5:
                    d6:78:79:a2:25:9f:70:09:42:fd:bb:8b:87:2d:c8:
                    32:62:78:a2:70:8f:6e:19:c9:f2:27:73:62:89:73:
                    30:40:ca:fb:a3:08:eb:4f:7c:86:b4:f6:f0:61:8b:
                    1d:de:96:7a:05:c2:af:4a:68:cd:77:3f:9c:84:27:
                    87:13:39:49:9e:15:68:b5:9d:b5:23:d9:f6:81:a1:
                    94:80:15:13:07:88:75:e8:0f:9d:83:43:68:fc:7a:
                    c4:62:76:33:29:53:83:92:38:fa:48:d2:e1:66:ea:
                    f4:58:2f:54:5f:74:ea:6a:08:d4:5f:5c:20:3e:b8:
                    8e:29:b4:34:ed:02:72:82:e0:35:4b:c8:11:36:ea:
                    f8:f4:fb:a8:af:0b:cf:83:cc:f1:77:57:73:b2:fe:
                    ca:06:b4:b8:94:bb:76:32:b1:a8:3b:7d:e2:82:9b:
                    3f:c4:94:f4:f7:0c:c5:34:e4:5a:b9:45:2c:62:85:
                    c6:36:e4:1a:09:65:a9:e4:bc:25:38:bf:63:e2:bc:
                    2c:c4:0a:5a:aa:a0:3b:fe:b4:17:c4:06:75:b6:d9:
                    3b:ab:88:99:73:02:1e:ee:26:12:d4:31:c3:94:95:
                    80:ba:ab:c0:37:ea:01:f3:26:ca:b9:fd:31:3c:5b:
                    f5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E1:A5:76:2D:7A:B8:83:71:7C:AA:47:AE:94:DF:AD:69:E7:15:2B
            X509v3 Authority Key Identifier:
                keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:33:60:6d:8c:70:99:27:8a:e2:59:84:5b:5a:a8:0b:af:ec:
         1f:b9:b2:3f:90:1f:3f:87:16:ae:5d:21:f6:b1:55:c2:a1:21:
         7a:70:9c:dd:3a:38:c0:2b:4a:95:8f:ff:04:1d:bd:c2:f1:23:
         d6:d2:09:44:15:61:78:70:a5:1b:1f:95:ed:79:40:42:bb:dc:
         f7:25:ba:17:92:70:2a:6b:8d:ab:c2:41:21:31:fd:f2:5f:71:
         0f:fb:69:54:31:b0:44:92:73:6d:ab:e4:43:13:ae:be:b7:fc:
         1e:d3:38:ef:1f:b8:15:2b:d1:c6:2c:50:9b:88:7e:c8:4c:1f:
         c6:30:ed:67:c2:ad:d7:ac:dd:04:d2:fc:f8:2f:05:64:44:c2:
         f8:86:6c:29:71:76:c0:13:e8:d3:ba:ad:f7:dc:fe:6c:a3:3b:
         f7:39:e7:4c:e4:de:3a:11:fb:fc:51:b5:dd:d3:7f:4f:4d:3c:
         a9:01:76:d3:bf:9c:a1:6f:83:bc:ff:31:da:7a:5a:7a:c2:7a:
         46:42:d0:db:d7:b2:bd:93:93:fa:1a:de:69:ee:31:42:a8:ac:
         1e:e1:3a:cf:4c:dc:f1:26:23:cc:bd:9a:08:c7:94:73:e0:dd:
         24:14:25:10:0b:de:a8:fe:06:0e:9f:58:5b:a4:2b:ba:58:4b:
         04:73:8b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:54:19 2026 by rpki-client