Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File:                     JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier:          Z65SySfxMsh8Uj5g0z9xGmGZMXbFZ1rZSN3eWlod8+U=
Subject key identifier:   F4:6F:12:5E:A4:A4:98:CA:A4:D8:7C:C6:17:29:4A:03:F4:85:5F:09
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer:       /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial:       01A0705EE9FA4725FCE94E13614C98330193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number:          1A3D
Signing time:             Sat 05 Sep 2026 07:01:03 +0000
Manifest this update:     Sat 05 Sep 2026 07:01:03 +0000
Manifest next update:     Sun 06 Sep 2026 07:01:03 +0000
Files and hashes:         1: 30ysbftw_D4n6jWsjQTM0UTzylo.asa (hash: 6Se9XkdxHIZE7HtdPW3EYh1bEmfcbzom2szFR4ZRIdU=)
                          2: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: j8GgSz/Mc0zzKXgqQp50rvKeblwCVNcp+y97wyUv7QQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:70:5e:e9:fa:47:25:fc:e9:4e:13:61:4c:98:33:01:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
        Validity
            Not Before: Sep  5 07:01:03 2026 GMT
            Not After : Sep  6 07:01:03 2026 GMT
        Subject: CN=f46f125ea4a498caa4d87cc617294a03f4855f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9a:77:85:e2:02:66:37:58:af:6b:c9:b6:8b:
                    ad:e1:b1:a3:e3:7f:19:28:d0:2c:d7:b2:c9:1f:1e:
                    80:ad:c1:48:d6:ff:7b:f3:11:18:4b:61:0b:c9:1f:
                    97:6a:dd:1c:11:8c:4f:2d:e8:42:9e:8b:fc:a6:2a:
                    0c:59:ce:7b:e3:86:05:15:6a:38:08:a4:89:5c:c0:
                    8b:bb:7a:24:41:02:ac:9b:55:56:67:89:68:31:74:
                    0d:a5:27:08:2a:6e:1c:40:37:ba:88:c5:59:0c:55:
                    b1:b0:c9:02:bd:63:ca:34:49:27:d3:7f:9a:f0:e1:
                    cd:c8:f6:11:58:68:75:15:e3:6b:a4:90:b6:6a:c1:
                    d8:ff:c2:21:e4:91:22:5a:09:d6:87:be:7d:43:0d:
                    16:a0:1f:2b:c6:75:18:dc:e7:6d:f6:58:bb:2f:0e:
                    5f:a5:ad:db:4b:32:be:26:05:7a:48:96:62:c5:35:
                    6e:5f:83:ba:0f:1a:17:a7:d1:0b:ed:ba:94:2f:cd:
                    83:63:7e:d5:91:ea:4f:92:2b:ae:de:77:a7:97:7d:
                    2f:02:89:68:09:2c:94:dd:75:86:fa:92:5d:6f:c6:
                    cd:ad:fc:07:27:e8:87:8c:49:cf:3f:98:1f:51:da:
                    b2:70:04:98:5c:51:05:3d:9d:0e:53:31:9e:b2:cf:
                    36:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6F:12:5E:A4:A4:98:CA:A4:D8:7C:C6:17:29:4A:03:F4:85:5F:09
            X509v3 Authority Key Identifier:
                keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:fb:f1:59:d2:69:40:12:a9:95:88:6a:72:57:fd:a1:96:47:
         b2:5a:60:7f:2a:0c:50:92:59:14:33:4a:bb:24:29:1f:46:cb:
         f3:50:81:b7:bf:4b:01:13:3a:a3:57:06:73:80:20:31:ff:e6:
         35:64:9f:c8:83:0f:71:dd:f7:4e:1e:2a:82:b6:61:d6:79:91:
         15:88:88:a7:df:8b:ba:f0:ba:91:3d:1a:36:8f:9d:2b:5c:c3:
         59:3b:f7:bc:69:62:ec:29:ed:07:7d:b1:0c:48:18:45:b1:75:
         ce:1e:d4:0d:ca:30:c2:9b:dc:66:98:15:83:e0:b9:29:35:b8:
         58:e5:eb:6e:2c:40:bd:05:ad:13:df:38:f6:d5:82:10:85:9c:
         4b:71:e7:fb:96:c9:1c:ad:a7:32:87:39:7d:f8:ff:b4:a3:be:
         3b:f0:7e:98:27:63:77:c3:e5:c5:c9:43:40:2d:6e:10:ec:ee:
         b9:36:d9:d5:88:01:e3:66:91:63:ca:d5:b0:db:e5:66:ff:b3:
         ee:58:88:1e:62:58:b3:4e:dc:9a:e8:e4:fd:59:5c:d9:28:60:
         ac:2b:a7:5a:bd:6a:e6:ad:46:14:01:d6:84:6b:81:6f:e0:97:
         fc:bf:e4:f2:a9:ee:29:ee:a5:57:5f:f3:39:19:75:b6:23:d5:
         d4:13:41:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:29:05 2026 by rpki-client