Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
File:                     jntpkn3SG7nhRV-ojtiO0kfHGNo.mft (raw, json)
Hash identifier:          7/ZOOQDJ1OqKdgIUl+R6TV+qv1WFKfjROymYqS6kuQg=
Subject key identifier:   2D:6D:F5:6B:10:87:84:09:9B:6A:47:56:A9:C6:12:D7:EE:95:ED:41
Authority key identifier: 8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
Certificate issuer:       /CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Certificate serial:       01A17FCF98BFFF7D926C37E2ACA87A3736C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
Manifest number:          1835
Signing time:             Wed 28 Oct 2026 00:01:13 +0000
Manifest this update:     Wed 28 Oct 2026 00:01:13 +0000
Manifest next update:     Thu 29 Oct 2026 00:01:13 +0000
Files and hashes:         1: O01TpHeHqBiUeJused6g5bROXeI.roa (hash: lprGNMtGbZUy/qu3fbQs2Y1Q7vEBDCNvAujKwUnYorA=)
                          2: jntpkn3SG7nhRV-ojtiO0kfHGNo.crl (hash: Shd3wgtLpZFNCTh45IEGA8m2kjh1ndDnDEsZ4zk4B3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:cf:98:bf:ff:7d:92:6c:37:e2:ac:a8:7a:37:36:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
        Validity
            Not Before: Oct 28 00:01:13 2026 GMT
            Not After : Oct 29 00:01:13 2026 GMT
        Subject: CN=2d6df56b108784099b6a4756a9c612d7ee95ed41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:36:75:45:e0:6b:fd:bd:8f:39:81:79:d2:4c:
                    cc:26:44:20:b9:3b:78:92:a4:d8:fa:cc:02:0d:21:
                    34:bf:c8:d2:35:33:42:bb:34:6b:5b:c9:7c:ef:f9:
                    ed:0e:35:27:59:ef:81:f9:8e:e5:f6:70:b7:a3:e5:
                    0d:f5:67:1b:89:d5:5d:1b:c9:84:93:7b:7c:19:1a:
                    6d:32:f5:05:63:f9:4f:0c:58:fe:5c:59:5f:11:18:
                    33:19:4a:79:70:ad:95:71:66:22:72:db:d2:e7:a4:
                    f3:3a:ed:03:ed:cb:77:f9:9d:9d:e7:4f:5f:6e:33:
                    d3:4c:a9:60:de:df:52:72:0a:c8:6d:d5:06:0c:a4:
                    6a:5a:81:f8:ee:2c:c2:e4:8c:8b:04:b7:18:8c:65:
                    49:79:49:86:ee:92:b8:49:b4:4f:c2:19:5d:da:29:
                    a7:f3:54:ea:b5:e2:3b:0e:c1:94:0f:32:26:b6:85:
                    11:2f:e6:a0:1a:36:b2:cb:a0:4c:74:bf:9d:c3:59:
                    d1:b8:7a:eb:ef:92:a7:bf:23:c3:03:41:7f:a1:e1:
                    2f:7d:da:3f:4a:1f:1d:cc:30:75:4e:c5:9e:3d:f4:
                    6b:e4:3f:e8:e2:3e:be:e0:e2:fd:d2:54:5f:13:5a:
                    42:d2:1d:d1:f4:db:44:6f:62:c8:10:5c:4a:6c:52:
                    ec:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6D:F5:6B:10:87:84:09:9B:6A:47:56:A9:C6:12:D7:EE:95:ED:41
            X509v3 Authority Key Identifier:
                keyid:8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d7:59:ab:b3:6f:80:a2:a5:fd:92:2b:40:2b:b2:cf:da:ee:
         00:63:59:9a:b6:3d:51:81:22:ea:cd:a6:fa:e6:e5:fa:fa:a4:
         d2:9c:08:3f:59:cd:9a:a7:b7:b0:6a:5c:25:16:12:e4:95:ef:
         95:c8:47:aa:6c:09:5d:9a:86:fa:8a:7b:00:9e:f9:84:d6:e5:
         1b:b7:60:5a:4e:98:e6:1c:e9:03:87:f6:f1:94:e4:bd:aa:db:
         4e:6b:04:75:60:55:89:62:5f:87:35:83:80:ef:a6:3d:7a:98:
         4e:43:d0:b6:0d:f2:47:25:8d:0b:55:ef:ab:06:65:9f:b7:78:
         ec:1a:70:ec:e7:fd:b5:40:8f:e6:a5:0a:cc:85:c0:82:15:d4:
         d0:be:03:45:eb:a8:52:89:13:9c:5c:dc:1a:88:f7:31:ea:69:
         05:40:ba:b2:74:57:43:4b:9e:3c:81:16:c0:ed:0b:2a:38:ce:
         df:28:43:71:d0:a2:f3:0a:6e:cd:bd:f9:f5:bd:61:27:e8:0e:
         b6:45:32:f1:98:78:7a:ae:25:4b:cf:b6:9e:f7:89:57:e0:a9:
         93:8f:a2:37:64:d5:76:d8:02:a9:e2:3a:93:fe:cd:76:c9:a5:
         e4:e0:5d:e7:6d:83:63:24:53:08:37:9e:3d:c6:c5:ca:21:fa:
         3c:d4:e5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:25:06 2026 by rpki-client