Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File:                     jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier:          n2TtxaCY4BOV67+cj2GCx/z7gJwB1MxvUAPYHQvrzt4=
Subject key identifier:   34:F7:8B:72:F0:68:55:89:DF:F2:9C:3B:A9:7A:54:C2:9F:04:66:E2
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer:       /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial:       01A14B3D260521054DBEBFEE240B19EF2598
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number:          1AAB
Signing time:             Sat 17 Oct 2026 19:01:00 +0000
Manifest this update:     Sat 17 Oct 2026 19:01:00 +0000
Manifest next update:     Sun 18 Oct 2026 19:01:00 +0000
Files and hashes:         1: DW0L4TMX0k7NIxwBqURjmrgnl7k.roa (hash: 9bpHxyEG2FowJ+5wF/MX0mk7jznSAQlzUuYCWXpTFQM=)
                          2: MrTeH3244GhrsmktdFmsilQf7DQ.asa (hash: GC9kidXivmf55i4xsJViQsWGsdVImec2c8gAa1Wm8VM=)
                          3: fdMO8uKSbPAwkZWz81kW00ikw90.roa (hash: bDzUzfVEg3uUN6Y1DlBJvXf2YCZXufjYUiQMDPh+1vc=)
                          4: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: al3+wAQvERIsKLIRvQhpH4RcLD8xB0i74KHSHYboYKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4b:3d:26:05:21:05:4d:be:bf:ee:24:0b:19:ef:25:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
        Validity
            Not Before: Oct 17 19:01:00 2026 GMT
            Not After : Oct 18 19:01:00 2026 GMT
        Subject: CN=34f78b72f0685589dff29c3ba97a54c29f0466e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:53:e7:21:12:32:7b:d7:17:05:6c:57:89:69:
                    4f:84:81:d9:9e:be:58:0f:d8:9b:74:f5:f6:ff:d1:
                    2d:2a:f1:a9:7f:a2:53:90:ba:57:43:d0:97:2f:b4:
                    2a:da:a5:a0:ca:50:96:60:3f:2f:cd:6d:2d:d4:7c:
                    05:25:5e:15:55:44:de:2b:b2:ac:32:c6:c1:36:f8:
                    e3:70:17:a8:ed:0b:2c:9a:a3:e2:c9:92:68:57:fd:
                    5a:7c:28:88:47:74:a5:15:d2:6b:98:2e:93:f4:22:
                    6f:36:d6:da:30:cb:0a:a6:c3:c6:f5:db:82:08:5d:
                    59:4b:5a:39:ed:42:e7:05:ed:c0:03:e4:58:ce:ec:
                    82:ab:d5:8e:2e:33:3c:46:fa:11:da:6a:f7:c1:04:
                    56:66:c7:c8:a2:27:2a:2c:f8:8f:ed:42:f6:99:69:
                    fc:47:47:e7:2b:6a:84:ab:17:cb:7a:5a:8e:7f:68:
                    05:6a:6e:c6:06:38:10:e3:0c:73:d1:b1:04:0c:65:
                    66:79:c9:6c:e7:47:e9:6f:24:f1:cf:50:0f:ef:8e:
                    ed:0f:38:36:45:d8:d3:cc:71:b7:68:66:72:b6:70:
                    e6:8f:8d:52:f1:a7:61:58:c7:68:6e:0d:97:9c:0c:
                    fb:7b:9b:7b:e2:7f:c8:42:ea:74:89:0e:d7:c3:f9:
                    c7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F7:8B:72:F0:68:55:89:DF:F2:9C:3B:A9:7A:54:C2:9F:04:66:E2
            X509v3 Authority Key Identifier:
                keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:15:ad:1f:e8:ab:70:ce:06:b4:d2:93:5c:1b:39:41:f6:e5:
         ec:f2:1e:7b:df:6b:bb:15:f5:6f:3c:bc:e7:68:42:fb:59:c1:
         47:7a:ef:ad:1d:f4:76:76:0d:03:23:3b:bb:85:63:ef:33:47:
         55:a9:01:bd:07:92:64:77:56:a7:44:d6:61:41:76:07:9a:14:
         a1:1f:f4:68:b9:c4:13:48:60:bc:ff:a6:2c:07:73:c4:17:34:
         45:5d:67:68:6e:28:d7:87:7a:36:63:ef:f3:4c:5b:33:df:7e:
         21:46:eb:fb:5b:2a:cf:25:1a:94:bd:51:e6:4a:4c:86:49:4f:
         7d:cc:b0:3f:1e:dc:3c:32:ec:3e:54:92:81:70:68:27:11:11:
         55:f5:7e:f6:c5:95:0d:73:1d:68:4b:ae:70:96:e3:09:2f:21:
         69:ce:bf:7b:50:19:4f:a5:a2:e2:00:19:92:a0:90:96:4f:42:
         a0:f0:89:db:6f:1c:bd:d7:ca:2e:02:dc:7f:dd:9e:84:f4:fc:
         a6:f7:80:f6:ec:a3:5c:72:85:08:34:c1:fd:cc:7e:49:78:d4:
         84:a5:c9:93:ce:db:f6:bb:1f:53:ed:90:88:a7:48:e5:55:2a:
         38:22:58:42:ed:36:6e:78:f0:37:55:74:3e:5c:e3:42:5d:38:
         be:c2:01:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 01:42:37 2026 by rpki-client