Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
File:                     j06-YGSqsD8mniKBWs1JSab7cmU.mft (raw, json)
Hash identifier:          9fCSd8N56MTdHWW+D2VU3HmmRYfGgTFKxdj/TbnDjJg=
Subject key identifier:   17:14:F5:CF:A6:A6:A7:FD:DA:36:02:14:F0:36:67:19:49:44:19:9D
Authority key identifier: 8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
Certificate issuer:       /CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Certificate serial:       01A08C7B82F1C4459FB441D61CBF4F6A740C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
Manifest number:          1A45
Signing time:             Thu 10 Sep 2026 18:01:39 +0000
Manifest this update:     Thu 10 Sep 2026 18:01:39 +0000
Manifest next update:     Fri 11 Sep 2026 18:01:39 +0000
Files and hashes:         1: W3uvblkeLxKiQmHFvyNEpAVu6aA.roa (hash: 0luJ58suj1wqyqBjH68N/sdcZED51ZMRtFlcISkt8r8=)
                          2: j06-YGSqsD8mniKBWs1JSab7cmU.crl (hash: d11RDZZhqSe2a75MFIGuNxiFpdXR4/pKwzk02zs4k5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7b:82:f1:c4:45:9f:b4:41:d6:1c:bf:4f:6a:74:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
        Validity
            Not Before: Sep 10 18:01:39 2026 GMT
            Not After : Sep 11 18:01:39 2026 GMT
        Subject: CN=1714f5cfa6a6a7fdda360214f03667194944199d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:56:9e:3d:05:0f:7b:24:af:13:69:49:74:23:
                    f8:3a:b4:9f:0b:34:76:05:c6:e4:fb:96:c2:0f:ca:
                    86:c5:0e:75:17:df:6c:36:f0:80:32:ff:92:c3:6a:
                    10:70:b2:c8:c8:6c:16:97:e6:44:cb:af:a5:77:17:
                    ee:b2:f6:ca:14:78:4e:31:f0:9c:e5:c1:be:71:61:
                    a4:51:bd:f1:ca:98:b8:63:21:d5:2b:6b:dc:96:b9:
                    e4:35:54:39:c4:1b:a9:0e:dc:d8:d8:a0:7e:84:48:
                    16:eb:94:c6:d8:56:2e:c7:33:05:5a:7f:1e:8e:c0:
                    36:be:54:7b:79:ff:92:a0:87:74:fa:23:3a:db:b3:
                    ab:74:78:e1:0b:29:67:69:34:97:cc:14:5a:45:9d:
                    56:93:27:25:b3:cc:75:6a:c3:87:8a:74:e5:97:81:
                    6d:dd:ef:ec:42:d3:3a:97:4b:52:54:df:95:12:1f:
                    a0:44:be:cc:2a:b2:46:f7:72:00:1a:2e:51:b7:cb:
                    86:10:58:7b:54:44:d3:1a:2d:1a:24:68:30:c8:34:
                    3d:81:2b:31:fb:c4:c9:27:2c:24:43:d4:07:43:14:
                    85:a5:03:d3:81:e3:23:7c:a6:f5:21:20:47:9a:4c:
                    71:60:f9:bc:cd:d1:c2:9d:ed:23:b7:30:27:b8:fb:
                    ec:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:14:F5:CF:A6:A6:A7:FD:DA:36:02:14:F0:36:67:19:49:44:19:9D
            X509v3 Authority Key Identifier:
                keyid:8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:68:0b:89:4a:bb:04:bf:11:60:8f:ae:1d:b8:00:48:bd:bb:
         d3:a1:48:c2:9e:72:0d:b4:8a:3e:90:9b:b5:30:1f:79:1b:9a:
         62:34:d8:d1:0e:d9:60:06:3a:c5:71:4d:fa:de:a0:fe:18:94:
         21:ce:f3:16:6d:9d:15:2e:e2:b1:35:0f:0a:05:d2:57:bd:96:
         8a:a8:ed:19:70:8b:3a:86:e6:3e:f7:f4:53:bb:14:35:07:4c:
         0f:7b:e1:03:1e:45:ab:da:df:be:cd:03:e2:fe:68:b0:9b:b0:
         8c:66:a4:ee:e4:f5:b3:7b:dc:75:b3:44:74:48:16:03:ec:ba:
         23:e3:f5:d4:d1:7d:13:0f:2d:c1:85:a9:4b:9c:8b:9f:87:b8:
         03:64:d5:fe:18:4f:70:78:5d:e1:97:ec:0a:3e:d5:5f:32:a7:
         b0:ec:77:03:43:9c:f5:22:da:e9:30:79:69:5a:cb:8d:8e:2c:
         5e:99:13:4f:86:0a:4e:65:8e:ca:55:f0:82:be:07:0e:2c:9f:
         99:ee:c0:de:2c:90:bf:bf:16:70:4c:82:13:de:e0:cc:71:96:
         c1:97:a4:95:41:1f:ce:75:07:c8:ad:5d:24:e2:ed:97:a4:e3:
         8f:8a:0c:40:a0:c1:92:c9:bc:21:2b:d6:6a:86:bc:8b:c6:af:
         42:7e:eb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:49:31 2026 by rpki-client