Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
File:                     jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft (raw, json)
Hash identifier:          PDxZNWCUuKxZnmr06m9Mu9qxXzgpOE+lWzsczkc6JXk=
Subject key identifier:   AD:10:02:B4:49:83:5A:AC:27:BA:87:82:9A:4D:A3:3B:FF:23:38:E3
Authority key identifier: 8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
Certificate issuer:       /CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Certificate serial:       01A12A9FE716A9359110088FCCE09A382A72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
Manifest number:          08DD
Signing time:             Sun 11 Oct 2026 11:01:24 +0000
Manifest this update:     Sun 11 Oct 2026 11:01:24 +0000
Manifest next update:     Mon 12 Oct 2026 11:01:24 +0000
Files and hashes:         1: JwAMG7H5zqvWutaY0tL6qWOVQ84.roa (hash: WHBkccdZypDjFyRaZ97jWOQpOH4yG3/HgeMqK5knvm8=)
                          2: jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl (hash: 0CXQB2I1fg+VdKxI9XgNM9vxl3O20/nkTcYT3TTZRSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2a:9f:e7:16:a9:35:91:10:08:8f:cc:e0:9a:38:2a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
        Validity
            Not Before: Oct 11 11:01:24 2026 GMT
            Not After : Oct 12 11:01:24 2026 GMT
        Subject: CN=ad1002b449835aac27ba87829a4da33bff2338e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:73:45:0b:22:45:1b:b6:d2:22:a1:d8:db:2b:
                    bb:c4:33:17:f1:39:59:6d:17:d9:d5:02:d9:37:c0:
                    45:ab:54:79:16:4d:56:79:b6:e6:15:3b:b6:4e:84:
                    65:6d:a9:57:85:b4:0d:c4:7e:94:0e:cc:37:02:63:
                    87:ba:ac:91:6c:d0:48:81:73:b7:c1:0c:dd:7b:1a:
                    ad:c5:96:4b:95:bb:09:14:d1:59:ce:b0:f0:bf:40:
                    05:86:7b:fd:ab:fd:42:38:f4:75:5d:1e:60:0e:be:
                    76:33:fe:ec:16:63:fd:93:4d:37:48:81:ac:07:cc:
                    3c:3e:7f:54:b9:5d:c6:9b:fa:5e:59:fa:66:2c:50:
                    d8:04:b8:0b:6f:93:e0:16:58:a1:86:b1:29:b0:8f:
                    8e:99:4e:dd:43:a9:8b:e6:15:c6:38:18:92:80:c9:
                    a5:99:c5:25:99:35:51:84:ab:9c:dd:23:cd:fe:1c:
                    dc:ea:d1:b7:bb:b7:83:a9:40:50:e1:e5:67:1b:ee:
                    72:b2:fa:de:02:90:92:57:ec:97:60:29:54:26:30:
                    25:b7:d6:ef:4f:c7:be:2f:fa:c3:fd:8c:fb:4d:00:
                    0c:df:63:d0:00:f4:69:fb:16:c7:10:c5:af:45:b4:
                    ff:01:14:ed:8d:4b:cf:b7:28:3a:44:9a:57:0b:b0:
                    44:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:10:02:B4:49:83:5A:AC:27:BA:87:82:9A:4D:A3:3B:FF:23:38:E3
            X509v3 Authority Key Identifier:
                keyid:8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d6:9a:bb:48:dc:c9:c4:75:2f:32:f3:c4:a0:ae:a2:18:dc:
         8d:11:23:53:5b:f0:ea:1d:38:b3:6d:88:36:9c:8d:e9:4f:49:
         e6:02:68:3f:6e:a3:1f:d0:75:f3:93:ef:47:2c:49:0e:e2:7d:
         5a:0e:7e:e9:5c:26:75:00:ff:54:27:de:80:5c:c2:ca:81:bd:
         72:e4:4c:cf:02:e2:66:28:e6:fc:8a:5b:3f:ed:f5:ba:4e:ee:
         65:a6:1e:47:b4:da:40:6a:07:14:30:8c:0d:0d:90:e3:4b:15:
         ed:a3:5b:27:7e:d8:c8:3d:da:cb:61:0d:e9:15:de:e1:1b:18:
         13:03:68:4d:0d:1e:bc:a9:f6:8e:57:f2:aa:07:09:11:01:c7:
         34:e3:83:0e:0c:85:22:67:ca:7d:d5:cb:a3:20:ac:7f:91:1f:
         56:5a:6c:51:bf:53:7d:51:7c:a9:dc:e8:65:5a:6c:f4:23:80:
         53:a2:a5:8e:d0:4a:ce:d7:6b:39:b0:3c:80:0f:a8:bd:46:15:
         fe:b5:7f:e4:0b:f9:33:88:6d:21:76:c1:2f:f1:24:15:2e:ff:
         99:04:18:ca:76:e4:ca:dc:2e:aa:b8:b6:4e:cb:3e:d0:d6:ee:
         2f:68:e5:1c:97:70:63:f8:fa:b7:bc:da:ab:6f:2c:0c:9a:d7:
         da:f5:2e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:36:04 2026 by rpki-client