Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
File:                     JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json)
Hash identifier:          SG20Fv93nOz4hw3v1vP+Nd0+wrogWgXoBFbQmgFUBH4=
Subject key identifier:   6D:2C:AF:B3:E0:49:21:2C:05:FA:76:F1:DD:D5:50:F3:AC:24:82:C5
Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
Certificate issuer:       /CN=266547208206ad54474c69fccbedc24aa56a62c2
Certificate serial:       01A08C7A9AC3995AFC784C5B79546BFA22BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
Manifest number:          0F40
Signing time:             Thu 10 Sep 2026 18:00:40 +0000
Manifest this update:     Thu 10 Sep 2026 18:00:40 +0000
Manifest next update:     Fri 11 Sep 2026 18:00:40 +0000
Files and hashes:         1: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: tdTRRmwG+uguJn0s6nYv30z0GEWmDtrfJPVO+hpGb8c=)
                          2: ZOxgWvCSe4fh3G-hS8UAvVzCxPQ.roa (hash: lLIc6IlVo/BfK1oQIkM/V9OuWrsKXh4yLdug5PFaT64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7a:9a:c3:99:5a:fc:78:4c:5b:79:54:6b:fa:22:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2
        Validity
            Not Before: Sep 10 18:00:40 2026 GMT
            Not After : Sep 11 18:00:40 2026 GMT
        Subject: CN=6d2cafb3e049212c05fa76f1ddd550f3ac2482c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:15:41:e1:79:61:01:73:f5:b9:37:05:35:02:
                    55:e7:e0:fd:18:ef:9c:c8:82:57:08:a8:8a:14:94:
                    dd:b3:e1:56:9a:1b:8a:73:0d:45:b2:05:0b:3a:b4:
                    70:df:99:67:07:5c:f1:c2:a0:fc:69:49:e5:a4:e7:
                    14:9d:d5:4d:8b:ea:71:b6:d2:5a:52:82:a1:b5:eb:
                    92:4f:7a:db:6b:b3:7f:7f:36:12:f3:a0:32:de:01:
                    ea:b8:29:f5:d7:2d:36:4b:0f:a1:03:5b:d6:db:66:
                    50:f7:f0:f8:42:31:63:27:69:b8:a0:7a:cc:bd:bb:
                    ae:3e:fa:64:f8:ce:9d:53:e8:9b:98:fa:a5:03:4e:
                    fe:40:9f:7c:c9:5b:61:9f:75:a7:ca:12:68:85:16:
                    f8:8e:f8:70:2f:78:c9:70:ef:6e:c5:b1:02:1a:a1:
                    cd:97:5d:a2:eb:9f:01:5a:9b:e3:75:bf:b8:4d:e4:
                    7b:53:be:92:f7:2e:03:ef:74:98:f5:91:16:cb:44:
                    ff:fc:71:d0:42:c1:42:d6:f1:45:df:3d:3d:d5:98:
                    7c:f1:79:88:38:15:5c:19:28:f3:f6:9e:43:65:ea:
                    53:55:48:67:9d:7b:cc:9e:cc:ba:cd:fb:5b:37:72:
                    01:2b:c6:e8:f8:84:84:a0:89:55:f3:9a:df:a1:94:
                    1f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2C:AF:B3:E0:49:21:2C:05:FA:76:F1:DD:D5:50:F3:AC:24:82:C5
            X509v3 Authority Key Identifier:
                keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:63:da:5b:78:8b:e9:74:76:72:0f:de:1d:48:81:59:8b:64:
         e5:a4:09:c8:b2:aa:54:9e:ea:14:2b:28:d9:ea:9f:61:d1:ac:
         00:27:3b:a4:5b:bd:7a:c9:43:33:9c:3b:0d:01:c7:d6:f9:a2:
         29:09:9c:db:d2:1a:40:b2:a8:b6:1b:99:da:4a:0c:42:ff:57:
         d9:2a:b8:0c:d6:32:62:44:ed:45:0f:17:7c:75:33:1e:20:2d:
         7d:c2:23:a9:4e:0f:6f:35:26:0a:73:20:8b:b6:58:37:e9:61:
         cf:85:ab:61:77:6f:f2:c2:18:26:79:bb:fd:98:6a:96:ee:32:
         bd:0a:2c:9d:14:0e:f8:a9:11:9d:b6:38:e0:4a:08:b5:e2:8a:
         19:2c:72:a0:77:49:40:cc:ba:2a:2a:72:80:45:0c:d2:1d:12:
         30:e5:62:d9:da:85:42:a6:38:26:bd:4c:4a:31:c3:6f:4f:d0:
         69:90:3d:b3:48:ab:e6:e9:21:c7:fa:24:db:eb:69:57:0d:88:
         56:39:fa:9a:13:0b:f2:8e:d7:76:d8:44:5b:3b:17:ad:d6:34:
         7d:1a:d4:72:c2:85:6f:37:7b:f9:87:aa:55:7e:36:74:dd:d7:
         62:8d:7c:11:c8:a9:bf:dd:9f:0a:9c:4b:8a:3f:58:9a:ab:dc:
         14:e7:f2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:43 2026 by rpki-client