Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File:                     J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier:          77AMoN+pEM/h4AYabEi+BtqqqwYyxxMBXT1o0lM7EDc=
Subject key identifier:   DA:62:C2:6B:4C:88:DA:F3:BD:68:0B:44:22:EE:F3:0C:B6:5E:6A:03
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer:       /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial:       01A1532E21DBDB82B052236B3E31CEA9A128
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number:          1AB8
Signing time:             Mon 19 Oct 2026 08:01:34 +0000
Manifest this update:     Mon 19 Oct 2026 08:01:34 +0000
Manifest next update:     Tue 20 Oct 2026 08:01:34 +0000
Files and hashes:         1: 1-eXk56W1WcQXJBaon4jYvPO5XKk.asa (hash: 4kMcrktNRWgxl6BULeDgtu/gbF/92oPuNyR3Tirvwvs=)
                          2: 1KQsz8EMeMqO7bc9e9NUCyualHA.asa (hash: K+ABwTOia6am6qcpzwES7lTBokcCgw4GgL9iAZqzKrs=)
                          3: EaAMsvwoHBe4yq1jbHkVSMOCcms.roa (hash: tCewwDnNFA4yqzd0eb5IKas5uAfl5Rr1tmwDJ4VUURI=)
                          4: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: +rzHH+PL1cpN0izH7WzvaS2MdCVAFSJor3nIbo4nFwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:53:2e:21:db:db:82:b0:52:23:6b:3e:31:ce:a9:a1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
        Validity
            Not Before: Oct 19 08:01:34 2026 GMT
            Not After : Oct 20 08:01:34 2026 GMT
        Subject: CN=da62c26b4c88daf3bd680b4422eef30cb65e6a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:65:08:5b:a7:c7:d5:a1:41:40:5f:9d:d6:da:
                    09:4a:b3:fe:77:36:da:25:a2:b4:4a:04:60:d2:3e:
                    3f:d0:7b:aa:81:71:67:6f:61:04:b6:1e:60:d6:98:
                    35:22:7e:3e:26:c5:bf:f8:1e:1b:4a:36:2e:3c:11:
                    b1:e3:f5:8f:a1:c0:f9:9e:43:f1:12:dc:b0:f6:4b:
                    28:d6:a0:26:c4:f5:db:44:37:35:4a:ae:1c:c3:94:
                    ce:01:99:bc:ed:5a:54:a8:39:c5:ac:13:09:e8:d4:
                    8b:b7:e8:f9:cd:3b:15:8d:ef:b4:1d:ea:5f:20:e1:
                    19:dc:5f:90:5a:b9:f5:15:1b:c3:83:8a:07:c2:54:
                    e5:24:16:05:76:4a:76:5b:d6:bd:48:d8:0a:76:14:
                    62:fa:3f:04:93:e6:9d:70:e8:b9:1b:0a:83:7a:3b:
                    f9:ea:c7:ff:e2:68:b8:7d:28:9b:c2:d2:b2:8f:05:
                    a6:a4:ea:9b:d2:ae:7a:85:43:19:e0:2d:8d:e4:11:
                    82:d7:e1:88:14:d5:ee:c4:33:b7:da:76:e0:b5:ac:
                    4b:53:78:77:a5:8d:20:8e:1f:14:9b:60:5f:58:1b:
                    bd:4f:0b:d5:44:55:ef:4e:2c:af:d6:cc:9d:32:6a:
                    bb:a9:a2:1d:a3:90:89:8f:d2:35:47:5e:9a:97:af:
                    6d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:62:C2:6B:4C:88:DA:F3:BD:68:0B:44:22:EE:F3:0C:B6:5E:6A:03
            X509v3 Authority Key Identifier:
                keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:a1:08:db:d8:33:14:02:bd:f9:4e:e5:d7:81:09:f5:70:e0:
         55:f5:28:e4:35:0a:1d:ee:6d:66:0c:0f:39:fd:c4:62:2d:fb:
         66:14:59:cb:24:c8:6f:df:3e:3a:92:d1:2d:76:02:36:8c:73:
         71:c1:43:59:89:53:91:4a:60:32:96:03:f9:4d:f6:cf:b3:aa:
         2a:92:f2:78:90:cf:93:67:3e:7f:2a:50:4e:90:f5:9e:58:8b:
         ea:7b:ab:68:12:c3:05:1f:06:28:99:ca:d7:f2:5b:57:3b:16:
         42:11:07:b8:43:27:7a:87:f5:85:1d:e4:51:13:a2:40:62:88:
         99:ea:e9:79:ad:07:3b:94:c0:71:7a:91:29:d9:7b:84:fd:80:
         60:8f:f2:71:14:76:91:fa:47:21:d9:13:14:fe:11:3b:b1:fe:
         d9:22:1f:38:0a:4d:ae:af:aa:f9:ce:e0:ce:52:1e:3c:19:de:
         b0:21:7a:82:16:b9:12:1c:47:ff:1d:d4:1b:13:2f:05:1e:26:
         62:10:62:dc:69:42:f9:a3:1a:38:51:6c:b5:a1:4e:f3:c6:43:
         c3:bc:41:66:6a:e9:dd:e8:22:dc:22:fb:79:0e:6e:8b:b8:72:
         e1:f5:2f:ca:e0:72:91:71:6e:80:f3:f5:b8:77:2f:01:4c:66:
         87:8f:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:33:50 2026 by rpki-client