Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft
File:                     JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft (raw, json)
Hash identifier:          FvIVSZgB9LbXyhT44czQClwply3yf3Qv12QgVWdP0gk=
Subject key identifier:   34:EE:A4:FD:97:98:6F:54:34:B5:EA:8E:48:28:BD:C2:D2:53:59:A4
Authority key identifier: 25:46:7F:2D:5B:B2:35:5A:F7:5F:B4:7F:11:60:6D:81:58:9F:76:38
Certificate issuer:       /CN=25467f2d5bb2355af75fb47f11606d81589f7638
Certificate serial:       01A17B4D37DB0DBFEE9DA618EAAF8AA60B98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUZ_LVuyNVr3X7R_EWBtgVifdjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft
Manifest number:          024E
Signing time:             Tue 27 Oct 2026 03:00:20 +0000
Manifest this update:     Tue 27 Oct 2026 03:00:20 +0000
Manifest next update:     Wed 28 Oct 2026 03:00:20 +0000
Files and hashes:         1: A-DXg-M5jvEoV7mt-5nVIAB_Z0g.roa (hash: SrntviZ4+NLJCPuFucg/3YO9L4f5luqtxUvspbJaNHI=)
                          2: JUZ_LVuyNVr3X7R_EWBtgVifdjg.crl (hash: VWupTFIFgp9EpPwguoeJMPxDcd6722dyxy3ZwEH3bBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JUZ_LVuyNVr3X7R_EWBtgVifdjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 03:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:4d:37:db:0d:bf:ee:9d:a6:18:ea:af:8a:a6:0b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25467f2d5bb2355af75fb47f11606d81589f7638
        Validity
            Not Before: Oct 27 03:00:20 2026 GMT
            Not After : Oct 28 03:00:20 2026 GMT
        Subject: CN=34eea4fd97986f5434b5ea8e4828bdc2d25359a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:c8:42:d9:94:39:2b:39:ff:64:64:87:6b:
                    fd:3d:51:be:7f:5d:f3:6b:5b:fb:01:9a:b4:46:a2:
                    83:25:77:d3:74:06:bb:ca:e6:5f:a6:6d:e9:dd:99:
                    3b:b3:17:c6:f5:9f:1d:f6:79:5d:90:29:25:f0:7b:
                    e4:85:14:8c:82:21:f7:7d:d1:06:f3:ee:db:81:c7:
                    5a:82:d4:e0:91:2d:0e:c8:6a:f9:cd:8f:9f:22:83:
                    71:44:10:2c:35:73:9a:9a:1a:85:93:29:c0:8c:a7:
                    50:ef:96:94:9a:10:7d:81:30:fc:6f:00:b7:f8:53:
                    6a:51:cf:52:d6:b2:21:cd:c0:41:ed:2e:e5:04:22:
                    36:22:4f:a3:fb:3c:db:4b:c2:96:4b:aa:4f:f2:01:
                    ef:bc:ab:81:c4:bc:1e:0e:81:5a:a6:7b:3b:9a:0b:
                    bd:cf:f6:e5:b8:ae:98:ae:5e:7a:43:d5:fb:6a:ce:
                    16:a9:a8:a4:19:3a:2b:79:18:02:f0:8b:7e:bc:0f:
                    91:4f:d6:a1:ca:01:e8:e6:93:7d:cc:21:b7:6a:4c:
                    21:8f:99:f6:e6:d1:a6:a3:1a:ab:b1:2d:63:52:e8:
                    11:0e:df:2d:f4:42:73:2c:1e:07:f6:83:c4:1d:c7:
                    2e:19:51:b8:db:c1:d2:c5:be:e8:8c:28:e3:76:33:
                    27:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EE:A4:FD:97:98:6F:54:34:B5:EA:8E:48:28:BD:C2:D2:53:59:A4
            X509v3 Authority Key Identifier:
                keyid:25:46:7F:2D:5B:B2:35:5A:F7:5F:B4:7F:11:60:6D:81:58:9F:76:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUZ_LVuyNVr3X7R_EWBtgVifdjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:09:eb:43:3d:0a:81:a3:e5:77:5f:70:67:24:ed:5d:4a:25:
         d0:ca:bc:c4:a3:56:b9:fb:e3:8b:2d:84:e6:67:26:49:4f:e4:
         5a:e9:f9:00:c5:cc:e9:5b:63:9c:f0:c2:28:e2:b0:04:a4:73:
         e9:64:d5:91:17:71:a0:9f:69:1a:7e:fc:b2:22:5f:04:a0:9f:
         8b:c4:27:2d:dc:79:d3:a3:52:5b:bd:08:cb:22:4e:61:51:ba:
         e7:7a:cb:cd:83:43:f2:df:83:29:23:8d:ee:68:48:e4:a0:75:
         ba:0c:f1:bc:cb:3e:80:e6:50:4c:6a:d2:a8:7a:c5:4f:77:ea:
         0e:aa:e6:34:b6:54:09:9d:a0:36:05:16:ed:a7:5c:48:32:2d:
         9b:12:bb:de:a2:de:cf:81:9c:29:d3:b7:26:e2:c7:84:10:dc:
         23:25:29:a0:e8:09:63:c2:05:2b:d3:62:d3:3d:0e:6c:d9:79:
         2c:c3:97:b5:77:6c:ec:e7:d2:55:b1:2b:7c:cb:22:53:43:95:
         36:0d:21:72:36:00:9c:e0:86:8f:3d:44:a8:9d:e3:e1:92:8f:
         e5:c1:5b:0b:20:ca:87:d9:2f:9d:49:f5:6b:38:31:0d:08:37:
         74:3a:66:df:50:ef:80:35:06:93:b4:a9:ab:12:e4:aa:00:00:
         a9:7a:cd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:21:24 2026 by rpki-client