Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
File:                     jmNwTVUB7XWm4glm6_B6NlVbGrY.mft (raw, json)
Hash identifier:          VNfcFGQVDMxVu1OKrxcHCazk7CVuVxqeAvvJCqLCwJw=
Subject key identifier:   B3:10:C9:92:4C:95:6A:4A:36:8B:50:50:9C:B2:7C:D2:12:48:37:D2
Authority key identifier: 8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6
Certificate issuer:       /CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
Certificate serial:       01A0B8406955397ABB67E16735BC6012A006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
Manifest number:          1140
Signing time:             Sat 19 Sep 2026 06:00:23 +0000
Manifest this update:     Sat 19 Sep 2026 06:00:23 +0000
Manifest next update:     Sun 20 Sep 2026 06:00:23 +0000
Files and hashes:         1: 7uFvNrEWLGYD2SP4hsWwx5YGhZc.roa (hash: 2VvPcjNZZjpDQlSJjpl0TNHy3CzxEknpcXQY1dMkcII=)
                          2: jmNwTVUB7XWm4glm6_B6NlVbGrY.crl (hash: FNAW8ifiUtL9Lr7Tak4x89z2N6+X4GH/FYiZs2T3sG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 02:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b8:40:69:55:39:7a:bb:67:e1:67:35:bc:60:12:a0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
        Validity
            Not Before: Sep 19 06:00:23 2026 GMT
            Not After : Sep 20 06:00:23 2026 GMT
        Subject: CN=b310c9924c956a4a368b50509cb27cd2124837d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:d8:2d:d9:9e:6b:e0:1c:fc:d4:3f:f2:88:
                    b8:54:5a:18:40:96:f6:62:3d:48:02:7d:86:a2:0f:
                    d9:fb:9c:4d:70:f0:be:4d:92:e2:c4:3d:9d:d4:0f:
                    09:1f:90:d9:2a:7a:1b:cb:44:f4:ae:4a:25:8a:b7:
                    e6:fb:8f:72:5c:0b:aa:20:96:2d:84:35:3a:5a:4a:
                    b4:63:cf:7b:2d:8d:fa:e8:07:02:31:ec:c5:5e:ca:
                    99:ee:85:f2:7e:6b:b3:fe:e5:b2:59:cf:34:c2:db:
                    77:75:3e:fa:e2:11:13:64:c2:5a:88:db:58:99:01:
                    06:65:12:35:77:d6:9d:cc:99:41:9e:38:9b:ea:01:
                    5a:00:fc:92:5d:82:2a:69:2a:3c:24:96:a1:e1:92:
                    79:11:b1:f7:51:90:b9:72:66:88:6d:da:b5:06:f5:
                    54:67:c1:06:20:7e:68:6a:05:22:7b:f4:34:42:9d:
                    2e:c3:89:0b:58:7b:4e:2c:a4:c6:00:1e:4f:b6:ba:
                    3f:bc:61:82:bb:34:4d:c4:8b:d5:51:87:9d:73:7a:
                    9c:44:d4:20:36:6f:09:2a:15:32:b8:e8:58:27:8c:
                    dc:bf:80:92:45:b8:8e:86:03:a6:79:c1:92:f8:aa:
                    28:37:e4:d4:4f:d4:60:0d:d2:c2:22:22:d0:15:12:
                    ef:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:10:C9:92:4C:95:6A:4A:36:8B:50:50:9C:B2:7C:D2:12:48:37:D2
            X509v3 Authority Key Identifier:
                keyid:8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:7d:bb:05:bd:28:64:ef:40:e5:fe:7c:0c:89:a6:5b:dd:14:
         55:85:1f:39:d9:0c:b4:0b:3b:49:46:8b:f2:65:c8:a8:a7:be:
         3e:40:d4:02:51:12:e6:8e:01:c7:38:38:53:0d:5a:cf:02:c7:
         d9:a0:89:0a:b3:17:28:34:a8:8f:14:18:7d:85:d4:b4:82:15:
         98:1f:18:7e:f7:33:26:01:2e:5d:d4:80:94:27:13:19:2a:22:
         cd:a7:7a:54:ec:57:82:0a:97:bb:99:c5:59:82:71:27:f9:94:
         5f:56:d3:6f:62:13:19:90:1f:1b:1c:2f:98:c0:eb:01:6f:c8:
         d5:27:11:3e:10:c5:79:ed:c6:82:f4:d2:5c:e6:1e:e5:cc:97:
         40:81:75:34:6a:a9:eb:ff:23:3e:ce:3c:d2:9b:57:cf:b3:6c:
         be:7f:b8:ee:ae:13:ce:47:0d:3e:4f:4f:f5:78:bb:40:0c:fb:
         ea:8e:57:d7:c0:d8:a5:9e:4e:e7:f8:95:5a:f1:9c:cb:66:ab:
         85:f3:91:66:25:1b:3e:0f:0e:7a:46:d6:42:d8:00:67:13:06:
         e5:f1:be:27:13:19:3e:52:cc:85:6e:d0:66:79:fd:b8:69:74:
         b3:08:21:3b:7f:62:df:3f:c6:d7:c7:80:31:00:fd:44:7e:0f:
         96:4d:0c:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC4QGlVOXq7Z+FnNbxgEqAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjM3MDRkNTUwMWVkNzVhNmUyMDk2NmViZjA3YTM2NTU1
YjFhYjYwHhcNMjYwOTE5MDYwMDIzWhcNMjYwOTIwMDYwMDIzWjAzMTEwLwYDVQQD
EyhiMzEwYzk5MjRjOTU2YTRhMzY4YjUwNTA5Y2IyN2NkMjEyNDgzN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N7YLdmea+Ac/NQ/8oi4VFoYQJb2
Yj1IAn2Gog/Z+5xNcPC+TZLixD2d1A8JH5DZKnoby0T0rkolirfm+49yXAuqIJYt
hDU6Wkq0Y897LY366AcCMezFXsqZ7oXyfmuz/uWyWc80wtt3dT764hETZMJaiNtY
mQEGZRI1d9adzJlBnjib6gFaAPySXYIqaSo8JJah4ZJ5EbH3UZC5cmaIbdq1BvVU
Z8EGIH5oagUie/Q0Qp0uw4kLWHtOLKTGAB5Ptro/vGGCuzRNxIvVUYedc3qcRNQg
Nm8JKhUyuOhYJ4zcv4CSRbiOhgOmecGS+KooN+TUT9RgDdLCIiLQFRLvxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMQyZJMlWpKNotQUJyyfNISSDfSMB8GA1UdIwQY
MBaAFI5jcE1VAe11puIJZuvwejZVWxq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1Od1RWVUI3WFdtNGdsbTZfQjZObFZiR3JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83OTcyMWYtZjQwYi00MWQyLWFjMGUt
Yzk0N2UxNmMyYzYxLzEvam1Od1RWVUI3WFdtNGdsbTZfQjZObFZiR3JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC83OTcyMWYtZjQwYi00MWQyLWFjMGUtYzk0N2UxNmMyYzYx
LzEvam1Od1RWVUI3WFdtNGdsbTZfQjZObFZiR3JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI327Bb0o
ZO9A5f58DImmW90UVYUfOdkMtAs7SUaL8mXIqKe+PkDUAlES5o4Bxzg4Uw1azwLH
2aCJCrMXKDSojxQYfYXUtIIVmB8YfvczJgEuXdSAlCcTGSoizad6VOxXggqXu5nF
WYJxJ/mUX1bTb2ITGZAfGxwvmMDrAW/I1ScRPhDFee3GgvTSXOYe5cyXQIF1NGqp
6/8jPs480ptXz7Nsvn+47q4TzkcNPk9P9Xi7QAz76o5X18DYpZ5O5/iVWvGcy2ar
hfORZiUbPg8OekbWQtgAZxMG5fG+JxMZPlLMhW7QZnn9uGl0swghO39i3z/G18eA
MQD9RH4Plk0Mog==
-----END CERTIFICATE-----
Generated at Sat Sep 19 09:44:18 2026 by rpki-client