Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.mft
File:                     jxBcT_tdVLwidfIN4wBzTiTupKY.mft (raw, json)
Hash identifier:          lfPIZx2YVm+j9utW3XbL7xmCJsHgW0tRF/bUkMqDXkQ=
Subject key identifier:   58:5E:DE:68:ED:CA:AD:E3:63:51:21:11:FC:36:BE:37:7A:1E:30:2B
Authority key identifier: 8F:10:5C:4F:FB:5D:54:BC:22:75:F2:0D:E3:00:73:4E:24:EE:A4:A6
Certificate issuer:       /CN=8f105c4ffb5d54bc2275f20de300734e24eea4a6
Certificate serial:       01A0E7E433C2A23C311768F545A2E0A4C437
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxBcT_tdVLwidfIN4wBzTiTupKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.mft
Manifest number:          019A
Signing time:             Mon 28 Sep 2026 12:01:27 +0000
Manifest this update:     Mon 28 Sep 2026 12:01:27 +0000
Manifest next update:     Tue 29 Sep 2026 12:01:27 +0000
Files and hashes:         1: CaHSmdkysiaumo43vhf9KnbJsHs.asa (hash: 08F9c2p2ZWXv2pzjeA1I++KB7kXuVe5VH24pFsI3lJY=)
                          2: jxBcT_tdVLwidfIN4wBzTiTupKY.crl (hash: mTPvmKWYdF/4Rbz/lyeIpTpfQIb4m31AUUGB0wWXVTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxBcT_tdVLwidfIN4wBzTiTupKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 12:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:e4:33:c2:a2:3c:31:17:68:f5:45:a2:e0:a4:c4:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f105c4ffb5d54bc2275f20de300734e24eea4a6
        Validity
            Not Before: Sep 28 12:01:27 2026 GMT
            Not After : Sep 29 12:01:27 2026 GMT
        Subject: CN=585ede68edcaade363512111fc36be377a1e302b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7b:8e:b5:e0:84:80:bb:51:9b:2e:4e:1f:b3:
                    37:b6:05:c3:4d:01:88:2d:9e:c4:57:c4:1c:3f:aa:
                    c4:9b:c1:da:39:3e:bf:d7:c7:83:ff:6b:c5:d6:24:
                    ab:be:25:4b:f3:b0:91:82:ee:ef:94:0b:41:5a:d6:
                    25:b8:d6:57:d9:07:bf:95:c7:bd:e4:2d:68:29:20:
                    dc:59:fb:fd:58:1e:46:33:a9:2c:0c:37:a8:88:b3:
                    4e:6f:0a:60:70:42:23:5a:fe:10:b7:59:78:ee:0f:
                    60:4f:a6:aa:e8:25:91:fc:1b:aa:e6:73:9f:eb:47:
                    ed:f7:78:52:90:c3:60:20:11:b7:59:b7:98:a4:25:
                    8a:f6:1f:3a:f9:83:c3:0c:73:cd:0d:5a:88:2c:70:
                    8e:a8:40:12:29:ea:8c:d9:c7:50:9a:13:12:34:ac:
                    7e:c3:b1:62:02:4b:10:01:6d:ef:ad:98:20:b3:06:
                    06:48:cd:55:c7:32:58:4d:84:ed:65:41:7c:b3:ce:
                    0b:55:32:03:84:8e:2e:81:2e:51:db:22:87:c6:21:
                    5f:99:29:27:9d:04:f9:47:11:58:75:ee:6c:eb:3c:
                    4f:d1:7c:85:15:72:7b:fb:4c:92:40:3c:81:ac:b8:
                    b2:c2:c0:41:c5:f0:70:e5:15:2f:04:21:ea:db:5a:
                    a3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5E:DE:68:ED:CA:AD:E3:63:51:21:11:FC:36:BE:37:7A:1E:30:2B
            X509v3 Authority Key Identifier:
                keyid:8F:10:5C:4F:FB:5D:54:BC:22:75:F2:0D:E3:00:73:4E:24:EE:A4:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxBcT_tdVLwidfIN4wBzTiTupKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:82:04:64:79:e5:65:48:41:a7:96:7a:67:4b:fc:84:9f:a5:
         66:62:c7:61:c2:5d:12:b1:b9:7c:90:53:e6:1b:7e:a5:fa:3b:
         35:93:d5:61:0e:bc:c9:34:2e:90:12:7f:49:be:c2:8a:8e:f8:
         f2:e5:dd:0e:33:e3:0d:5f:6d:3f:6b:81:9b:94:cb:5c:4c:d4:
         dc:9c:36:1b:a4:b0:22:5d:5d:30:54:ba:91:6d:5a:01:6a:03:
         ca:d1:f2:87:4f:f6:18:f1:51:73:86:9c:6d:b8:51:03:af:03:
         bc:47:da:3a:62:49:03:5a:97:5f:eb:94:dc:48:cb:ee:b2:fb:
         3a:12:1a:8b:79:06:c3:41:04:4b:e6:0f:04:55:73:2b:f3:c9:
         46:23:d9:75:d1:ec:ad:b9:0e:15:35:c9:67:e3:f9:d8:2c:6c:
         47:47:ee:4b:a6:10:77:39:4e:3c:4a:1e:50:85:5c:e0:dc:a6:
         ca:47:7a:ea:b6:43:d3:50:1b:7c:5f:13:d8:75:ae:ec:08:53:
         5d:31:29:ab:9e:00:6e:be:f2:82:48:c4:f6:a1:99:d4:93:4c:
         17:cb:6e:b7:3c:09:66:99:eb:94:1d:68:f1:d5:33:a5:85:dd:
         23:fb:c9:29:6f:6e:6b:cc:fc:ba:0b:5b:15:68:cd:47:ec:f0:
         48:34:43:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:29:56 2026 by rpki-client