Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
File:                     jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json)
Hash identifier:          W5FGtj0btWcIr6hQuFTlLSLmOs240mP1EOY43ImsU/w=
Subject key identifier:   E2:CF:61:4E:14:E6:36:EB:61:79:AD:00:AF:C2:1B:4F:EF:6B:FD:EE
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Certificate issuer:       /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial:       01A181BD7ECE0D750CF0CBEE65C6D0C0AF76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
Manifest number:          18E6
Signing time:             Wed 28 Oct 2026 09:00:41 +0000
Manifest this update:     Wed 28 Oct 2026 09:00:41 +0000
Manifest next update:     Thu 29 Oct 2026 09:00:41 +0000
Files and hashes:         1: JJBuxiH7N8lbcBXgw5KQrt5-EvU.roa (hash: yuGCrAPUyjxlYSHRZDhM2aJs4WM249W9d+i/Vuix/5Q=)
                          2: KUSYPuHV0BPhErEp3TcpVUt1EQA.roa (hash: sBg+JjnzDUbRmXsbrD21Od6LO8lyYKiFXNtgEPlf+T0=)
                          3: irgcza7ueUyMGnD413LhS2bOjJI.roa (hash: daWp79CmAXWz32HU7ki6gyN205KgB+0e3s53G3yOlXg=)
                          4: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: YIXvsExZsyekSXJBYn7G7HndPxKKvaQc4cxZo/cnV48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:bd:7e:ce:0d:75:0c:f0:cb:ee:65:c6:d0:c0:af:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
        Validity
            Not Before: Oct 28 09:00:41 2026 GMT
            Not After : Oct 29 09:00:41 2026 GMT
        Subject: CN=e2cf614e14e636eb6179ad00afc21b4fef6bfdee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2e:df:a3:20:64:0c:50:db:17:4f:55:e4:50:
                    1f:ef:a4:56:ce:3e:a4:20:7c:55:53:be:34:74:9d:
                    b7:ec:12:6f:4d:a2:72:db:9e:77:41:92:63:30:0f:
                    fb:8c:21:e5:f5:9d:14:09:48:fe:df:0b:6e:22:88:
                    5d:7b:8a:2f:97:52:65:74:5a:15:3a:8b:b4:17:8d:
                    4f:7e:25:b3:dc:49:6d:de:74:ff:97:7f:0c:b6:30:
                    fe:bf:7c:93:21:d4:1f:6f:e8:9f:ff:cb:8f:f1:a8:
                    bd:b6:dc:87:bc:74:f7:c2:52:36:6e:ef:8a:6b:fa:
                    f2:12:83:f3:28:4c:cf:75:b1:22:3d:bc:cb:3f:2a:
                    08:d4:a9:40:c6:2f:c5:cc:5f:cc:83:ad:72:e4:12:
                    f3:00:1f:49:a7:0d:70:95:d8:f7:1e:49:1a:16:75:
                    d2:11:f5:0c:07:45:12:89:e6:66:ff:21:bb:4d:16:
                    d1:47:86:01:be:1c:f2:c2:f9:ac:c7:8c:76:ae:73:
                    93:3d:a5:e3:51:d4:37:33:d3:dd:60:fa:e5:40:e1:
                    38:59:a5:10:d3:a4:b7:e5:90:28:b6:4a:27:04:3d:
                    3e:c9:ae:b2:12:2c:21:e9:c7:65:64:82:3e:8a:27:
                    aa:81:5f:e7:19:f4:39:f5:0c:e7:b8:8d:c7:99:44:
                    8b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CF:61:4E:14:E6:36:EB:61:79:AD:00:AF:C2:1B:4F:EF:6B:FD:EE
            X509v3 Authority Key Identifier:
                keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ce:fb:a5:6d:af:05:13:7c:6c:e0:a1:59:b8:a4:42:bd:6f:
         99:88:90:0f:e0:6d:ec:13:33:65:1c:67:73:55:4d:cd:ac:b0:
         4c:bc:28:7d:08:4e:80:da:54:38:a9:3b:96:42:28:93:60:c3:
         36:31:fc:69:66:d6:cd:63:38:b0:d5:48:b4:45:be:2a:cd:83:
         af:f9:f7:4a:de:bc:2c:d5:d7:17:ad:32:9f:a4:c5:09:8f:04:
         dd:02:42:f7:b7:40:35:04:3a:ac:c5:89:92:0e:a5:63:5e:2a:
         1f:52:d2:12:89:4e:d0:4a:06:be:77:48:5c:2c:13:0f:82:d0:
         56:50:20:ba:24:34:5f:c2:f9:0b:2c:a6:1c:5c:7f:b7:73:2d:
         e3:63:d7:fa:95:8c:72:3f:aa:98:14:99:56:4f:77:76:f8:21:
         8c:f4:5f:fa:17:e4:11:a1:6f:8e:28:a2:92:b6:8c:4a:1e:da:
         28:ce:4d:43:7b:5a:83:21:6f:c4:e1:36:d7:84:b8:30:15:0a:
         41:16:e3:c6:12:31:fe:ed:c8:7b:68:d7:ab:a6:6b:ea:6f:23:
         04:0e:85:ef:1e:e8:7b:77:67:9a:39:d3:dd:f9:cc:40:48:89:
         87:dc:8d:01:61:eb:8d:90:f9:01:86:71:4e:6e:df:00:a0:ea:
         04:e2:21:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:39:18 2026 by rpki-client