Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
File:                     jlo2o46eViR2rnC5FQKOMBhxKRk.mft (raw, json)
Hash identifier:          VqG8jq+ekg8m5+Z8lx7jcIu4wsWRKv2fUtPZ17B1Jf8=
Subject key identifier:   09:C7:DC:63:7D:40:7D:9A:D7:81:07:84:F6:21:00:1A:FF:3F:F0:09
Authority key identifier: 8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
Certificate issuer:       /CN=8e5a36a38e9e562476ae70b915028e3018712919
Certificate serial:       01A19431874E0A562BD3460EB694089D5A91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
Manifest number:          0E73
Signing time:             Sat 31 Oct 2026 23:00:36 +0000
Manifest this update:     Sat 31 Oct 2026 23:00:36 +0000
Manifest next update:     Sun 01 Nov 2026 23:00:36 +0000
Files and hashes:         1: KCCXTiyEdgg9X9UWZ--_fhYVO_Q.roa (hash: 0RPtm2bqma6nOnpNbHsYWDjHVvYXOYQDlwmuFFsHb6M=)
                          2: jlo2o46eViR2rnC5FQKOMBhxKRk.crl (hash: I8lkKl1B5XtS77XSxbgXrbKPVc9FSBAzgIsVa94WthU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:94:31:87:4e:0a:56:2b:d3:46:0e:b6:94:08:9d:5a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e5a36a38e9e562476ae70b915028e3018712919
        Validity
            Not Before: Oct 31 23:00:36 2026 GMT
            Not After : Nov  1 23:00:36 2026 GMT
        Subject: CN=09c7dc637d407d9ad7810784f621001aff3ff009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:40:32:19:7a:7b:f4:72:88:3d:48:4c:9a:ec:
                    dc:28:4a:d5:af:57:4d:08:41:56:9d:49:c8:65:56:
                    74:1c:5c:ef:63:8f:54:90:49:70:dc:5c:69:64:a8:
                    84:f0:23:e1:1b:45:4c:da:90:16:18:a4:82:14:89:
                    ee:47:41:04:e4:58:df:96:d1:b6:72:b8:15:2d:a4:
                    51:25:07:b8:72:7c:2f:5b:b0:0c:28:4b:88:70:dc:
                    8f:24:db:cc:7a:70:aa:7a:b5:6d:71:da:15:87:8f:
                    38:6e:7d:b5:42:d3:6d:d3:4e:a1:e5:cd:fe:54:9a:
                    88:e2:08:59:4e:d4:0e:29:46:b0:31:d6:54:f6:aa:
                    7f:6e:d9:66:0f:9a:d3:63:c7:d4:44:d9:8e:06:74:
                    b6:53:aa:9a:23:1d:6c:a0:c1:79:54:bd:cf:a2:4f:
                    ad:64:f0:6e:dc:6d:f7:98:98:92:9f:74:bd:d2:67:
                    66:c2:5a:1c:a6:8d:be:27:2f:3e:12:6c:09:87:80:
                    fb:01:f4:ca:1a:e6:ce:93:e5:1f:b6:1a:14:0c:cb:
                    3b:06:0d:15:2e:8a:0c:72:7b:9d:51:0b:4f:7d:be:
                    8a:e5:5c:ee:cd:61:c9:f0:82:85:77:df:a0:d3:0d:
                    b8:c7:7e:15:99:fb:a9:39:08:4c:05:f3:04:3f:73:
                    44:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C7:DC:63:7D:40:7D:9A:D7:81:07:84:F6:21:00:1A:FF:3F:F0:09
            X509v3 Authority Key Identifier:
                keyid:8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:74:af:e1:e8:ac:8c:71:fe:41:b4:d6:f2:09:d8:df:94:a7:
         80:c8:23:d5:49:d3:54:77:8d:1b:1b:c2:29:54:47:9c:73:94:
         c1:1e:ef:4c:a0:ed:fa:31:92:14:1b:96:16:01:73:69:b9:e5:
         06:9b:a8:06:24:05:01:4c:3a:42:85:eb:b5:6e:95:3c:e6:ad:
         99:22:48:e9:7e:92:17:93:fe:16:a3:6d:0e:ef:26:69:d4:ad:
         8b:92:7c:43:74:ca:8d:1d:d5:c8:3d:dd:9e:6e:a4:94:0a:fe:
         0e:b9:dc:a3:5f:77:09:57:34:95:e8:10:d9:84:ed:a0:4f:37:
         67:8b:0b:1a:f4:de:8b:e1:48:b2:50:6a:bb:33:bd:1c:9b:f3:
         44:1c:9f:f2:49:d8:26:01:8a:86:be:49:b8:e9:54:a7:b0:13:
         c5:51:80:f4:ca:3d:79:cf:41:f9:80:4a:87:6b:2a:fb:b8:72:
         d0:cd:72:fc:80:c1:d1:b6:8a:aa:52:1e:c6:49:5e:e6:1f:23:
         ff:79:3f:57:ac:24:a8:29:ed:3a:66:ae:1f:18:4a:61:fa:69:
         ab:e7:d3:b4:f5:08:e7:00:4b:50:6f:26:15:d1:23:bc:7e:9a:
         38:c1:13:ac:b7:2e:b6:ae:2d:88:cb:8e:57:e2:e6:d1:45:11:
         a7:49:4b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:35:26 2026 by rpki-client