Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
File:                     jygQkMQApWFm_Ii083pcuu0hhfA.mft (raw, json)
Hash identifier:          ZDRBxlOkS8Jc85+/DTw97T23YDH8INCwvbnJSyqTtYg=
Subject key identifier:   0E:7E:51:F4:DA:68:57:A1:69:23:D4:58:17:B3:4D:8A:FA:5D:ED:66
Authority key identifier: 8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0
Certificate issuer:       /CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
Certificate serial:       01A18DF8C43830C0A85E626F887A8369AEC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
Manifest number:          1ACD
Signing time:             Fri 30 Oct 2026 18:00:52 +0000
Manifest this update:     Fri 30 Oct 2026 18:00:52 +0000
Manifest next update:     Sat 31 Oct 2026 18:00:52 +0000
Files and hashes:         1: jygQkMQApWFm_Ii083pcuu0hhfA.crl (hash: 8ek0S+3UO53U1EyucLq6rvdDIdi3Ov7YMxEG+9yr69Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8d:f8:c4:38:30:c0:a8:5e:62:6f:88:7a:83:69:ae:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
        Validity
            Not Before: Oct 30 18:00:52 2026 GMT
            Not After : Oct 31 18:00:52 2026 GMT
        Subject: CN=0e7e51f4da6857a16923d45817b34d8afa5ded66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:65:56:c5:a0:85:c6:5f:e1:9d:d9:c7:60:e8:
                    79:6a:36:0d:07:75:83:55:69:a2:00:9c:8c:97:a9:
                    bf:6e:3e:e7:a2:c5:73:42:76:b8:dc:bc:1b:62:d2:
                    96:d1:19:29:ac:aa:cf:e4:7e:dc:d9:e2:bb:b8:78:
                    54:31:43:c8:08:f2:fe:c2:74:29:ef:6e:b1:e6:58:
                    0c:b0:66:25:81:4f:04:65:87:8d:e9:5d:4a:ef:06:
                    5e:14:c7:cb:f5:cd:3a:2b:98:21:fd:39:e4:5d:20:
                    30:10:8b:da:0c:87:08:27:b9:76:18:03:24:7f:b6:
                    c0:ec:d8:b0:60:b9:4b:ef:51:a2:b6:a0:e9:c7:be:
                    c1:fd:f4:bc:85:1a:e9:4d:0c:0b:10:78:48:58:21:
                    ac:5d:fb:1f:b8:5d:98:6d:55:a8:0e:08:04:fc:fc:
                    f3:44:e3:d5:f0:4f:ed:c8:99:e2:32:25:42:de:5f:
                    4c:c1:9d:0e:a7:8f:4c:8c:78:60:4c:5e:94:71:dc:
                    84:ea:18:86:7f:3b:e2:48:8e:0a:53:6b:6a:e8:86:
                    56:20:1d:dd:9c:9a:13:2a:39:ea:61:4d:57:88:27:
                    27:ed:a2:2e:ab:e8:39:3d:a2:7c:db:16:6b:69:20:
                    31:06:43:6b:d9:da:02:c1:bd:54:a4:d0:ce:af:9c:
                    4f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7E:51:F4:DA:68:57:A1:69:23:D4:58:17:B3:4D:8A:FA:5D:ED:66
            X509v3 Authority Key Identifier:
                keyid:8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:6f:3e:0c:36:a0:6d:17:41:e9:7f:bb:ec:02:b5:c0:62:ba:
         c8:08:0a:29:ad:7d:89:a6:b3:01:b8:79:2f:e4:e4:19:09:3f:
         9e:2b:d9:16:4b:2e:a9:80:cd:33:42:7b:96:06:44:02:b5:78:
         da:95:bf:3b:e9:71:20:02:df:89:a8:d7:72:1e:2b:5b:eb:24:
         46:70:04:d6:a6:af:8d:03:a0:1f:ea:b6:09:de:51:30:43:0a:
         67:2c:4e:e9:49:fc:fc:f0:04:38:7e:75:27:72:6b:d9:ea:d7:
         dc:ff:0b:1c:0f:63:fc:67:da:a5:b9:f1:9b:46:25:0d:6e:5b:
         35:84:2e:f2:95:62:50:48:1d:f4:a1:1a:7d:ca:b3:51:03:ca:
         29:1e:66:75:48:71:ab:67:78:43:60:a3:92:ff:4b:8b:20:e2:
         5b:a2:36:28:dc:f9:fc:67:ff:5e:d3:a1:c3:70:e0:81:b2:50:
         d8:ef:97:85:c4:95:92:35:66:8d:de:ec:22:22:29:94:02:84:
         7c:a8:a8:27:a1:b9:f9:a4:84:10:ef:09:77:5f:d2:18:85:ae:
         1e:74:be:32:22:dd:99:24:4c:ed:0d:04:af:88:8d:04:d4:5c:
         87:d9:47:f3:60:38:10:19:fb:53:58:02:2b:24:23:ed:e5:f3:
         3f:a5:63:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:18:41 2026 by rpki-client