Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
File:                     jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft (raw, json)
Hash identifier:          JDAZCBvWrcTBuWMAujFy69VagkBCusQsErv8+C0Br+8=
Subject key identifier:   56:AA:5B:30:97:C5:9B:3F:D1:05:E2:02:4B:F5:67:82:2D:B7:7D:88
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Certificate issuer:       /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial:       01A1C2548212113A95CDDB5125FBB52FB664
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
Manifest number:          16D6
Signing time:             Mon 09 Nov 2026 22:01:20 +0000
Manifest this update:     Mon 09 Nov 2026 22:01:20 +0000
Manifest next update:     Tue 10 Nov 2026 22:01:20 +0000
Files and hashes:         1: 0Q-Zfa5EM9tNo04k8RE6e6TtkfU.roa (hash: RGjdNXoSFFGrfTu/Ti51Lk+K5F2xhb4depOlZwB8FXE=)
                          2: 1-VHrB2ftFgG1R7rW9e965VrbOgs.roa (hash: e22B3XhTvj7ENfOUB059RvQemhyhAgeNVsH6G1GtXTY=)
                          3: 7YQDZucpbsxyTF1dG-WSopyYoD4.roa (hash: AZ+p2vdqGYxqTemz9H7WmkXG8urZ++JrwB5Ra4yemqo=)
                          4: Pnj_vmQa0ZunkGDFw9_ItsuwDa0.roa (hash: 0Ghl85pIQUjr9ungl4JN/VBPTNlFSKD8oMqKbzB0zRU=)
                          5: ZpiZYChv03XcXjWFsXMCV1QM0HU.roa (hash: wmoSAUcGUPypcaj5YjtRFn3oVWGJ3KsONwwVdodfB08=)
                          6: iVJ08SxG4feimgPWve7FHmKvN14.roa (hash: zFhC/XqvQ6mooyGtsx8PFTYFm28tXJQuLsuuvmNHdsY=)
                          7: jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl (hash: 2FL2Orv/LHIAsYKk8U+Sk9uWE7HVgAgf3d0lEXs8KJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c2:54:82:12:11:3a:95:cd:db:51:25:fb:b5:2f:b6:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
        Validity
            Not Before: Nov  9 22:01:20 2026 GMT
            Not After : Nov 10 22:01:20 2026 GMT
        Subject: CN=56aa5b3097c59b3fd105e2024bf567822db77d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:77:99:5b:58:a8:4f:68:9c:06:dd:d3:78:
                    36:82:4b:d3:47:51:1d:e6:4f:ab:90:ee:ee:43:33:
                    1c:64:c4:d2:0a:e5:05:de:7b:af:58:b2:9b:e0:86:
                    37:f7:91:64:29:cd:d1:aa:f1:cf:15:b2:44:99:8d:
                    b2:49:db:e6:d1:5e:e8:0d:59:5e:97:b1:96:b9:15:
                    49:c9:e8:e2:3b:bc:08:99:6a:ea:a7:a4:d7:ba:9f:
                    73:a5:cc:e7:a7:10:bc:50:b9:52:a0:ee:60:f2:f6:
                    f6:19:7c:8d:b9:d8:83:d1:38:68:d7:94:29:1d:cb:
                    24:ce:94:5e:b6:01:f1:e4:7b:e2:d0:a8:12:5f:96:
                    45:28:cb:d6:9b:27:93:4a:d3:98:13:8e:6e:82:d9:
                    0d:09:15:53:f1:27:f9:18:e6:71:f6:bc:e9:d7:94:
                    c0:b6:d9:b0:d2:a2:1f:74:b7:71:86:33:30:21:a8:
                    22:09:df:ca:4c:50:8a:6a:52:2f:0b:c5:37:26:25:
                    e3:33:80:6e:0d:ad:1d:5f:6f:14:b6:a4:43:2a:ed:
                    17:00:85:32:a9:24:fb:ac:9d:cd:f6:65:24:b7:a7:
                    1d:0b:42:76:00:52:00:ae:2e:c1:2a:b3:95:d1:0c:
                    78:c1:2a:1f:4b:5f:71:fc:7f:4c:78:5f:92:a6:e2:
                    b5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AA:5B:30:97:C5:9B:3F:D1:05:E2:02:4B:F5:67:82:2D:B7:7D:88
            X509v3 Authority Key Identifier:
                keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c0:2f:cb:76:b7:b0:30:47:73:29:e7:2a:1a:ff:5a:00:05:
         44:0c:c1:73:3f:27:c4:60:1d:5a:89:b3:90:46:4c:2c:28:32:
         34:96:ab:1f:e2:14:78:6e:54:13:f4:f7:2e:90:65:56:ef:e9:
         4f:e4:59:e3:dc:0e:87:e3:92:27:86:ae:71:07:56:97:b6:cc:
         79:bc:8c:74:cf:b5:9b:03:c0:ad:b2:98:fe:c6:ee:ba:62:cd:
         5f:ee:c6:4f:a3:71:26:97:95:9a:10:ca:fa:32:1e:94:63:6b:
         f1:67:bf:a4:eb:9e:9b:8a:79:d4:15:94:71:21:aa:31:83:a6:
         a7:2e:a6:6e:69:ab:98:d4:95:d4:90:89:76:fb:58:84:00:66:
         a0:39:9e:0b:82:65:88:6a:76:25:d1:21:04:a4:59:42:d4:60:
         90:b8:cb:a2:25:27:e6:55:95:f5:e7:1d:f8:4e:41:b7:84:28:
         1f:65:4d:44:91:0d:a4:8d:29:39:00:cc:48:b9:ea:86:0c:3c:
         57:e0:c3:bd:46:5c:23:55:46:f1:e9:2f:7a:94:94:04:a1:12:
         12:e4:b6:dc:e8:27:f8:5f:1c:d3:1d:3c:8b:fe:ba:93:4b:10:
         4f:a7:58:58:0e:9e:d5:d6:18:1c:2e:4b:b0:d4:72:ed:af:62:
         cd:73:b3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 07:01:25 2026 by rpki-client