Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
File:                     raJar-Ophw6VJK-gJlmH7VpaTaM.mft (raw, json)
Hash identifier:          KeAdD5mh94EKOihFlvcq0pylOfkJl/+5nCT4egqzTYI=
Subject key identifier:   BB:9B:1A:F4:90:1D:77:B1:03:44:0E:FE:36:9E:50:FA:BE:20:CC:F6
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Certificate issuer:       /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial:       01A12B0D1402B8DDDA71FE2C45CDCEE4159C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
Manifest number:          1ADF
Signing time:             Sun 11 Oct 2026 13:00:39 +0000
Manifest this update:     Sun 11 Oct 2026 13:00:39 +0000
Manifest next update:     Mon 12 Oct 2026 13:00:39 +0000
Files and hashes:         1: 026sZ3BE6bcDtWjexrpGViYYmn4.roa (hash: 8jjGMUOjUwdyrPafoVal8W6B+wC2kikoQs9YW0zoJJs=)
                          2: fMF9qnlP4WB5LHh5V8LwNwc9f4Q.roa (hash: fmzVayjcNIPJoq0/A+Ybi5cj066xRm3fDk6Fawjmxcg=)
                          3: hMCrIUKHXGHOtkHZ8Y6eI3UIeCw.roa (hash: rMGJFYfVplpRpoCAdt4v/1BCKdLOOcSLzsmFWHhqGnQ=)
                          4: lPiHeORLKEKfujHMYKmMKgjplak.roa (hash: jBAhlOJ7x1dzG58s1VItmsDLFO+pFQTxwtJmgsn2S2o=)
                          5: mS8tnbA8YK7l-MbOUY5q-8ZOThg.roa (hash: eZEcq7z1/SIiSQ1+v1fAeWHe9SlknoEdloBfTp8Rfac=)
                          6: q0e2mOxIUzAfYPRIbushYUqYPEk.roa (hash: mjQc3SMPF6rvuC90lgX5o3Yun+cCb8geikGE6fcJ2cw=)
                          7: qlCniZKRSW19hMt5vi2uYj3QmZc.roa (hash: sEr/46aBEQr8R7V1CQ3g6SAcCDYBi1Em54PpDngn9z4=)
                          8: raJar-Ophw6VJK-gJlmH7VpaTaM.crl (hash: Ix1A5TCOpUzCyGKKqSDXznXWHPzg1rjCTcy/GX0DnrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:0d:14:02:b8:dd:da:71:fe:2c:45:cd:ce:e4:15:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
        Validity
            Not Before: Oct 11 13:00:39 2026 GMT
            Not After : Oct 12 13:00:39 2026 GMT
        Subject: CN=bb9b1af4901d77b103440efe369e50fabe20ccf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e4:27:92:7d:39:d8:92:5d:eb:08:d4:2a:3f:
                    94:a7:bb:57:9e:42:c5:b3:83:14:d4:38:13:14:f2:
                    65:82:0d:ff:7a:2b:42:24:2f:dd:5a:98:25:cc:e2:
                    82:a3:02:af:4b:6a:5d:c3:61:be:9c:9c:51:30:b0:
                    ca:64:bb:2f:83:50:f6:e9:2c:f8:29:06:ad:df:26:
                    e0:af:ff:e3:82:bb:b7:97:29:53:27:ff:a6:d4:ae:
                    9e:88:5f:57:1b:91:b7:ab:cf:c7:db:10:ef:d4:f5:
                    d2:ce:35:e1:74:59:a9:4c:5c:a0:0c:aa:81:d0:9d:
                    96:eb:82:0b:70:9f:c3:8e:18:70:10:22:f2:77:10:
                    9c:18:cb:26:03:c4:85:86:41:ea:b3:0a:37:1f:02:
                    c4:61:f6:19:22:5e:0a:b4:7d:93:6b:98:43:a1:e9:
                    e5:6d:76:3f:dd:47:f9:4b:d8:f2:7d:60:5e:49:fb:
                    86:db:2a:e0:e8:75:58:88:d9:c1:61:63:6a:c5:a4:
                    f6:d1:58:7a:f6:f0:3b:91:12:4e:51:21:ee:15:e2:
                    b1:48:37:49:23:80:c7:8f:fe:3f:95:9d:72:9e:6f:
                    3a:4d:48:d6:93:a8:61:cd:01:fd:bb:a9:d2:6e:ec:
                    4b:39:da:e9:8d:77:f6:91:ff:95:ae:ca:02:bb:18:
                    93:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9B:1A:F4:90:1D:77:B1:03:44:0E:FE:36:9E:50:FA:BE:20:CC:F6
            X509v3 Authority Key Identifier:
                keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:50:84:8b:cc:13:c3:71:6d:b7:c0:ba:53:80:a7:3c:d8:d7:
         f9:54:54:2a:0e:b4:8d:b9:c4:1d:1d:48:22:2e:e6:bc:9e:2b:
         b9:a3:3d:b0:19:59:17:fc:34:aa:a0:44:bf:88:91:3b:cf:b5:
         83:b0:8b:fb:47:88:b9:23:e2:b5:e4:2a:3b:f5:70:0e:85:44:
         55:7a:e2:3b:5f:9a:3a:d4:25:3d:70:ec:35:b0:8f:17:e2:62:
         24:c7:6e:b3:10:bc:00:61:db:1f:33:b6:b2:66:8b:be:b1:e8:
         03:19:ae:1c:75:55:ec:db:b3:75:e5:7b:6f:62:a5:c7:ff:15:
         46:68:20:0a:81:77:0d:34:c0:a1:7e:fd:e0:68:d1:5d:f6:96:
         3b:25:d3:59:61:a7:29:cc:ba:9c:99:47:93:85:b4:46:cb:1f:
         dc:d3:0c:28:b8:0a:64:3e:5b:16:68:c9:d2:5b:9c:cb:2f:8c:
         4d:b4:cc:5a:fc:23:35:4c:4a:f6:09:59:3e:6e:07:37:e4:a9:
         1c:12:c7:1e:d0:71:b8:11:37:d8:71:fb:fb:56:b5:1f:7b:dd:
         c0:11:d3:06:86:7e:d0:4b:7a:bb:7e:53:eb:fc:94:f4:9b:db:
         15:98:61:7b:39:d2:ab:eb:db:f2:2c:b4:bb:47:4c:16:5b:6f:
         44:60:9c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:17:42 2026 by rpki-client