Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File:                     J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier:          GT+JfGAhhQiRxpnOvkUau+YoEhwWIax8MVOjGH9lJc0=
Subject key identifier:   6E:78:0A:E0:06:D0:D3:58:F5:AB:D1:B4:EE:92:66:57:93:69:1C:2A
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer:       /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial:       01A14D628E223F718832193464EDDA9804F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number:          1AB5
Signing time:             Sun 18 Oct 2026 05:01:06 +0000
Manifest this update:     Sun 18 Oct 2026 05:01:06 +0000
Manifest next update:     Mon 19 Oct 2026 05:01:06 +0000
Files and hashes:         1: 1-eXk56W1WcQXJBaon4jYvPO5XKk.asa (hash: 4kMcrktNRWgxl6BULeDgtu/gbF/92oPuNyR3Tirvwvs=)
                          2: 1KQsz8EMeMqO7bc9e9NUCyualHA.asa (hash: K+ABwTOia6am6qcpzwES7lTBokcCgw4GgL9iAZqzKrs=)
                          3: EaAMsvwoHBe4yq1jbHkVSMOCcms.roa (hash: tCewwDnNFA4yqzd0eb5IKas5uAfl5Rr1tmwDJ4VUURI=)
                          4: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: KD0N9kKNGq/4DieByWE/lMv15BmK2Tk7UZaWIOA+vDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:62:8e:22:3f:71:88:32:19:34:64:ed:da:98:04:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
        Validity
            Not Before: Oct 18 05:01:06 2026 GMT
            Not After : Oct 19 05:01:06 2026 GMT
        Subject: CN=6e780ae006d0d358f5abd1b4ee92665793691c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b7:34:36:6b:d2:b7:67:33:0e:75:0c:24:44:
                    2b:58:7b:68:08:1f:ee:b6:84:ac:d8:12:21:20:b3:
                    41:42:55:ac:df:69:e4:ad:22:21:da:a1:4b:5f:84:
                    f7:7c:10:dc:b9:30:3a:5f:be:ad:c6:dc:e3:08:2a:
                    b8:fe:82:e3:69:80:e0:f5:68:82:0e:7e:e8:ef:5e:
                    51:b1:e7:ad:22:0f:2b:67:03:b0:4f:eb:b9:82:2b:
                    32:9b:b9:af:36:fe:88:4b:14:de:1d:b2:01:c0:a6:
                    c3:1b:37:30:66:39:44:b0:41:f9:f5:83:ff:d5:38:
                    5d:28:d9:23:b7:3e:f9:8a:07:40:4c:c2:dc:e1:b6:
                    b1:94:9a:13:e4:91:e1:6f:0d:f4:e6:cf:26:62:30:
                    25:dc:f4:77:35:82:f0:29:c4:c7:6c:2e:ca:7e:ba:
                    2c:f1:1d:e4:64:1c:10:87:12:4c:c5:d2:54:8f:b8:
                    fa:1f:3c:8c:39:7c:2d:72:68:8d:e3:c4:11:9f:95:
                    6f:9c:ef:de:7f:fa:f7:1e:50:b6:2b:ef:be:17:9c:
                    cc:6c:74:d1:1a:a3:78:dc:4f:01:de:69:14:7a:d2:
                    6e:32:d8:58:cf:c3:c4:46:75:1a:df:62:3b:7c:1f:
                    fc:c6:1b:d9:27:84:00:e7:19:fe:15:d9:65:ef:87:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:78:0A:E0:06:D0:D3:58:F5:AB:D1:B4:EE:92:66:57:93:69:1C:2A
            X509v3 Authority Key Identifier:
                keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:8e:b5:fa:fb:ed:43:3f:75:51:f5:eb:2d:eb:be:6d:cb:70:
         ae:9d:c0:5d:89:1e:e2:7b:87:4c:fd:33:cd:94:d6:cc:ec:48:
         13:ec:f8:c4:c5:cc:05:b4:1d:41:5d:fb:ec:20:d3:86:1c:26:
         cc:20:d9:1e:4c:74:94:bd:ca:6b:3a:3f:8f:d8:72:9b:d2:74:
         47:e9:0e:c1:60:48:2c:3b:1a:3b:b8:86:8f:84:5a:17:cd:3a:
         7d:61:55:5a:e6:fe:b9:de:61:a2:4c:1b:50:40:e3:52:8b:44:
         e2:1c:08:8b:51:ce:23:d8:b4:23:64:e7:27:a0:59:24:54:9f:
         97:fc:86:25:33:9a:cf:f1:fc:11:cf:84:a9:47:e2:6f:e2:27:
         27:f5:ce:e4:e9:f8:8e:db:d7:33:ff:5b:9f:53:d2:91:ad:33:
         69:3c:f6:8a:76:cd:e8:24:2a:55:22:42:e9:b6:c6:e3:00:33:
         10:8e:f7:22:86:b9:28:09:ae:a6:ae:88:b4:6a:ca:23:63:44:
         60:44:c7:3c:f3:b2:31:d3:4e:01:c5:4e:80:c8:a1:8d:5c:14:
         b0:dd:5e:1d:f8:d3:b4:ac:3f:c9:81:fb:03:42:89:18:11:07:
         25:1b:94:2e:fb:be:76:af:dc:95:30:83:4c:af:97:75:01:e6:
         35:08:51:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:10 2026 by rpki-client