Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
File:                     JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json)
Hash identifier:          f1kG/y5D3wabs5mnr6iVfv8XAXfbrBflExTVjwceeBQ=
Subject key identifier:   A5:9F:25:DF:81:10:52:A3:FC:6E:87:58:0A:3B:81:03:55:38:3B:57
Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
Certificate issuer:       /CN=266547208206ad54474c69fccbedc24aa56a62c2
Certificate serial:       01A17DE232664516CC3608406ED892CF4E6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
Manifest number:          0FBD
Signing time:             Tue 27 Oct 2026 15:02:18 +0000
Manifest this update:     Tue 27 Oct 2026 15:02:18 +0000
Manifest next update:     Wed 28 Oct 2026 15:02:18 +0000
Files and hashes:         1: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: wBoMIKO21J7NkZWi+s6+93l4bdCHGEe4t4/Pz3g2c90=)
                          2: ZOxgWvCSe4fh3G-hS8UAvVzCxPQ.roa (hash: lLIc6IlVo/BfK1oQIkM/V9OuWrsKXh4yLdug5PFaT64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 15:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:e2:32:66:45:16:cc:36:08:40:6e:d8:92:cf:4e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2
        Validity
            Not Before: Oct 27 15:02:18 2026 GMT
            Not After : Oct 28 15:02:18 2026 GMT
        Subject: CN=a59f25df811052a3fc6e87580a3b810355383b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:9c:a5:3f:83:12:5c:b6:61:1b:d8:cd:9b:
                    c1:c9:52:0b:b6:b1:c2:c0:bb:02:9b:30:88:ff:67:
                    69:4a:ae:7d:94:df:34:e7:a1:71:c3:49:24:b9:b4:
                    14:a2:c0:a5:4e:d7:e9:6e:97:fd:8f:58:50:79:b8:
                    29:9c:1b:56:8f:b0:64:d1:a3:1d:03:a3:9b:18:5f:
                    07:88:1c:c7:ee:0d:3e:d7:3a:ad:0b:31:e3:16:26:
                    5b:e7:4e:fa:f1:22:17:42:c1:20:96:14:9d:b3:44:
                    99:0b:3d:e5:2a:15:14:f6:e3:57:ad:b5:54:f4:7a:
                    e7:02:52:87:dd:ff:fa:32:4e:db:7f:ba:75:3c:0d:
                    b9:e5:9a:8d:da:32:14:7f:e4:ea:4b:4a:98:27:c4:
                    ce:86:79:58:5e:8a:ec:89:26:a0:64:1b:97:99:62:
                    4b:23:6b:c9:4c:5b:90:cf:5a:f8:59:7a:69:6c:7c:
                    db:6f:b4:c2:7f:a9:94:df:c1:27:58:5d:78:d3:08:
                    cd:c8:ae:62:b8:41:d2:2a:1e:95:f0:21:0e:95:64:
                    3e:79:6f:92:16:b0:18:79:ef:f2:4b:9d:6c:fe:82:
                    1d:60:c7:4a:51:67:2e:25:c8:14:f8:03:69:d6:44:
                    31:9f:a7:7b:31:ad:89:79:bf:32:9e:e7:6a:6e:52:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9F:25:DF:81:10:52:A3:FC:6E:87:58:0A:3B:81:03:55:38:3B:57
            X509v3 Authority Key Identifier:
                keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:52:c2:2c:b8:20:29:32:75:ad:5a:32:ec:8c:fe:ac:d5:9a:
         44:61:ac:db:18:aa:f4:b1:d8:3a:57:db:fe:d4:c8:8b:ae:05:
         4e:52:7a:c0:d4:61:37:f7:b9:ae:91:d0:ce:fe:2d:11:0a:6e:
         74:86:c2:6c:92:f6:8f:a6:ac:e2:d1:e6:3b:49:5d:7a:1a:60:
         8b:c1:b4:02:1d:d4:18:d6:00:bd:e3:76:7d:05:e4:91:e2:c7:
         03:b8:11:94:1f:a1:15:ef:92:96:1b:7b:95:2d:c2:e2:87:b7:
         e9:6c:38:7e:e8:99:cc:d9:31:50:4b:3b:b6:da:b3:2d:6f:95:
         81:da:8a:a3:2a:07:4e:4d:4a:4f:bc:54:1e:d9:37:e3:28:50:
         59:ff:8c:81:5d:b4:11:d7:9c:89:d5:cd:43:0d:57:29:8d:06:
         fc:67:2a:e1:04:90:83:90:1a:11:7d:91:22:34:0a:9a:2a:0d:
         5f:b8:3a:49:b1:48:2c:06:43:cc:89:38:0e:ea:e6:09:95:f3:
         b2:37:bd:9b:1c:f4:4b:30:44:3e:f6:7e:83:49:fa:89:54:03:
         f6:3e:f2:55:de:dc:9f:99:8d:47:94:31:e0:2d:21:e0:3b:4f:
         f4:ee:93:86:5d:b9:d2:30:b1:5d:ac:a9:de:bc:37:1c:94:67:
         5b:11:f4:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF94jJmRRbMNghAbtiSz05qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjU0NzIwODIwNmFkNTQ0NzRjNjlmY2NiZWRjMjRhYTU2
YTYyYzIwHhcNMjYxMDI3MTUwMjE4WhcNMjYxMDI4MTUwMjE4WjAzMTEwLwYDVQQD
EyhhNTlmMjVkZjgxMTA1MmEzZmM2ZTg3NTgwYTNiODEwMzU1MzgzYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEicpT+DEly2YRvYzZvByVILtrHC
wLsCmzCI/2dpSq59lN8056Fxw0kkubQUosClTtfpbpf9j1hQebgpnBtWj7Bk0aMd
A6ObGF8HiBzH7g0+1zqtCzHjFiZb50768SIXQsEglhSds0SZCz3lKhUU9uNXrbVU
9HrnAlKH3f/6Mk7bf7p1PA255ZqN2jIUf+TqS0qYJ8TOhnlYXorsiSagZBuXmWJL
I2vJTFuQz1r4WXppbHzbb7TCf6mU38EnWF140wjNyK5iuEHSKh6V8CEOlWQ+eW+S
FrAYee/yS51s/oIdYMdKUWcuJcgU+ANp1kQxn6d7Ma2Jeb8ynudqblLLbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWfJd+BEFKj/G6HWAo7gQNVODtXMB8GA1UdIwQY
MBaAFCZlRyCCBq1UR0xp/MvtwkqlamLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hOGY1NTMtZjUyYy00OTQ5LTk3ZTIt
ODIyZDE1OWE5N2FmLzEvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hOGY1NTMtZjUyYy00OTQ5LTk3ZTItODIyZDE1OWE5N2Fm
LzEvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1LCLLgg
KTJ1rVoy7Iz+rNWaRGGs2xiq9LHYOlfb/tTIi64FTlJ6wNRhN/e5rpHQzv4tEQpu
dIbCbJL2j6as4tHmO0ldehpgi8G0Ah3UGNYAveN2fQXkkeLHA7gRlB+hFe+Slht7
lS3C4oe36Ww4fuiZzNkxUEs7ttqzLW+VgdqKoyoHTk1KT7xUHtk34yhQWf+MgV20
EdecidXNQw1XKY0G/Gcq4QSQg5AaEX2RIjQKmioNX7g6SbFILAZDzIk4DurmCZXz
sje9mxz0SzBEPvZ+g0n6iVQD9j7yVd7cn5mNR5Qx4C0h4DtP9O6Thl250jCxXayp
3rw3HJRnWxH0rw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:50:39 2026 by rpki-client