Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
File:                     jcayOVFjzkewNvrgKnH5SIBL9V8.mft (raw, json)
Hash identifier:          TGw7K48xTEJ9kOoToP2kUUKzgcQcXrdrbk4dDyCHnzI=
Subject key identifier:   68:9F:0B:AD:49:F2:B7:4E:D0:DD:51:7D:EA:D9:9F:31:E6:73:47:7B
Authority key identifier: 8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F
Certificate issuer:       /CN=8dc6b2395163ce47b036fae02a71f948804bf55f
Certificate serial:       01A089B0C8DD1AB0D1B4311CEBBF7782EC0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
Manifest number:          01B2
Signing time:             Thu 10 Sep 2026 05:00:59 +0000
Manifest this update:     Thu 10 Sep 2026 05:00:59 +0000
Manifest next update:     Fri 11 Sep 2026 05:00:59 +0000
Files and hashes:         1: UqSLybQPqtyf12w058GGJrCrwlE.roa (hash: ay496TJzckN/WV79yGM4pv+K/GRv47GhhBgHEduwC9o=)
                          2: jcayOVFjzkewNvrgKnH5SIBL9V8.crl (hash: sWEwhyHBCiKmtR92+1xbk/H5flzva9WC4eR05QLhvAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:b0:c8:dd:1a:b0:d1:b4:31:1c:eb:bf:77:82:ec:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc6b2395163ce47b036fae02a71f948804bf55f
        Validity
            Not Before: Sep 10 05:00:59 2026 GMT
            Not After : Sep 11 05:00:59 2026 GMT
        Subject: CN=689f0bad49f2b74ed0dd517dead99f31e673477b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:7a:78:9e:c5:10:e3:96:46:cc:5d:a8:79:
                    25:3c:af:eb:fd:8b:72:85:81:c3:c3:e9:b0:bf:6b:
                    ad:be:8b:e1:3f:b8:77:b5:ac:bf:e4:fd:20:bc:a9:
                    c8:11:29:7a:01:8d:ea:44:a1:1d:bb:5e:11:12:0a:
                    43:1a:cf:e9:6a:d0:64:47:10:e3:a1:3f:74:3d:41:
                    03:9c:6c:a5:71:d3:49:10:63:69:08:a3:18:90:d9:
                    ee:1a:5d:7c:9e:4d:a8:6a:e8:ad:a4:4e:60:cf:8a:
                    3a:6e:47:ea:c7:a9:44:c5:2f:32:5c:d6:cd:75:4e:
                    69:5f:c2:51:22:78:69:d8:15:cd:03:c7:02:95:99:
                    df:65:06:9d:5e:35:4d:11:7e:52:fd:d6:84:97:12:
                    40:ca:e9:6b:aa:b5:de:26:ee:d1:e4:e7:3a:3e:31:
                    f7:3a:e0:c0:28:2f:f1:af:16:27:3a:60:6b:47:b6:
                    0c:23:c5:e4:a0:71:f8:0c:b5:41:a3:ea:11:21:41:
                    56:42:f0:83:e7:37:bb:5e:23:c0:e1:04:3d:e7:80:
                    7d:89:ec:5e:e8:c6:8f:98:dd:b2:40:5a:49:86:e4:
                    bc:7d:08:08:55:43:6d:8c:eb:08:46:b4:04:db:a1:
                    ec:d6:41:7f:00:98:97:a8:35:ce:13:39:94:32:ce:
                    b8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9F:0B:AD:49:F2:B7:4E:D0:DD:51:7D:EA:D9:9F:31:E6:73:47:7B
            X509v3 Authority Key Identifier:
                keyid:8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7c:20:f9:ec:3f:9e:18:70:28:b4:84:a7:83:40:58:84:ac:
         6e:e1:3b:f5:a6:d2:46:4f:9b:0d:43:8c:92:f8:7c:9a:dd:11:
         84:5e:ee:df:7b:f7:d2:77:4a:6a:6d:27:ae:94:5c:d0:e1:9a:
         78:38:d3:14:bc:86:51:81:1c:bf:49:c0:ed:f6:f4:0c:da:24:
         a3:d6:c8:7f:3b:23:e3:07:04:a8:c7:21:39:d8:4c:03:03:6f:
         ca:23:c1:00:5a:8a:9c:28:c6:4e:a9:cd:5c:3a:9c:1d:f3:33:
         a0:14:7c:1b:01:ef:aa:12:4b:bc:cb:10:1e:60:21:a8:6b:b3:
         19:4a:d6:90:cd:5b:a3:e6:1f:d1:ab:7e:70:15:ec:c8:8c:43:
         42:b3:36:b8:b7:69:f8:3b:95:be:62:6f:2f:be:0a:53:34:3a:
         de:b6:52:7d:af:c3:c6:7a:3f:5f:b4:eb:ad:71:fe:33:49:4c:
         3f:3a:0e:94:03:dc:70:67:1e:29:b4:ed:76:1f:d5:8f:b1:52:
         fa:07:ae:bf:a4:86:b9:fc:ff:fe:51:11:8d:6d:5a:31:c0:7b:
         01:0d:a8:4a:2b:8c:b0:a8:f5:be:ae:37:49:dc:90:d2:63:24:
         3c:c9:06:cd:ef:f2:9d:f8:b1:9a:0f:05:e4:f6:64:07:95:91:
         14:23:8f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:45:50 2026 by rpki-client