Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
File:                     jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft (raw, json)
Hash identifier:          DZAE33no8uC1hcmhDaA3NEkgdMfw5WG9ocCvhucGsl8=
Subject key identifier:   1C:B4:2E:2E:BF:11:D1:E4:10:3A:FA:5F:46:BE:38:78:86:C6:93:16
Authority key identifier: 8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C
Certificate issuer:       /CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
Certificate serial:       01A0F97C57CA3406537F89E8B29B62864342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
Manifest number:          01CB
Signing time:             Thu 01 Oct 2026 22:01:10 +0000
Manifest this update:     Thu 01 Oct 2026 22:01:10 +0000
Manifest next update:     Fri 02 Oct 2026 22:01:10 +0000
Files and hashes:         1: jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl (hash: fg5ZtCK+RHdRyJFzDVb4dPPXs8SmpuB3MGw0vTom9Lg=)
                          2: y0t4f3SYiNI2RVeLlWE56pwZqao.asa (hash: 7OCsijFOaHb7cmOa3vj0zykIPZySXdI6fNcvKKq6Oig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 16:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f9:7c:57:ca:34:06:53:7f:89:e8:b2:9b:62:86:43:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
        Validity
            Not Before: Oct  1 22:01:10 2026 GMT
            Not After : Oct  2 22:01:10 2026 GMT
        Subject: CN=1cb42e2ebf11d1e4103afa5f46be387886c69316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7c:d8:8c:3b:bb:02:d1:ff:dc:2b:6b:ef:85:
                    7b:af:b5:6c:45:59:3e:70:b1:2a:81:48:db:ad:eb:
                    47:cb:07:a1:72:b7:e8:b0:f1:93:fa:37:ce:c3:86:
                    b5:80:b3:b8:3b:00:7a:89:1e:c7:31:68:fb:f6:e9:
                    b2:f1:55:6a:95:15:01:60:07:a6:3a:df:f5:07:8d:
                    10:d7:60:ca:e8:b8:c5:79:72:54:af:19:f2:28:97:
                    27:57:10:78:7c:bd:e8:98:65:a0:69:6b:d9:31:f2:
                    38:40:7b:ee:dd:93:8e:8b:a6:9c:fd:46:06:44:9e:
                    0a:10:de:b8:ae:9e:5e:88:f5:cd:50:4e:e2:a9:c7:
                    07:ce:c6:06:db:90:6f:e8:30:19:2c:56:5f:ab:93:
                    91:0b:8b:65:2c:4c:eb:3c:71:ad:e2:50:1c:85:7f:
                    81:3d:24:81:94:66:75:ee:3b:e1:ee:42:0b:3b:6f:
                    e9:fa:e1:13:9d:02:8c:57:6e:84:fa:f7:fb:c3:f1:
                    d5:de:10:5c:06:6e:bd:0e:bb:ba:8e:26:1a:ee:26:
                    b8:55:83:82:f4:8d:d7:fb:b9:79:c4:8b:e4:e7:46:
                    63:62:dd:de:40:8d:b4:fa:3a:c3:d6:77:93:99:7c:
                    ee:56:89:bc:db:40:95:3e:9a:36:11:ab:85:e5:16:
                    0d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B4:2E:2E:BF:11:D1:E4:10:3A:FA:5F:46:BE:38:78:86:C6:93:16
            X509v3 Authority Key Identifier:
                keyid:8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:27:30:17:7d:81:ae:fc:45:fc:34:84:4e:3e:ef:2e:90:74:
         17:ab:db:62:f2:27:59:30:89:77:4a:bb:2d:96:91:04:9e:1c:
         41:b1:69:08:29:fc:54:96:d2:a4:ed:ed:ca:96:10:6f:25:ca:
         f1:c7:23:04:ff:27:27:80:9f:28:bc:77:89:f6:39:1d:61:70:
         3a:d2:be:63:36:e3:2d:58:87:65:4d:01:4b:6f:d0:6b:37:ee:
         35:b9:db:24:a5:a6:5a:38:af:b8:2c:95:de:df:27:5f:e8:8d:
         39:d8:4f:68:68:ee:9d:4f:b5:39:b8:83:94:5c:7d:da:5b:5b:
         e5:f7:ce:05:66:df:5b:3e:7f:a3:f2:65:10:0c:bd:dd:b0:b2:
         cb:2e:1b:c6:bd:82:2b:22:e8:d7:77:c2:de:da:b3:c2:b8:bd:
         ef:61:e0:9f:e3:df:eb:1d:b8:81:95:03:14:d4:32:51:68:22:
         bd:78:1d:91:4b:1b:13:ce:7b:ab:11:ee:3d:ec:eb:e4:bc:7d:
         71:b2:f8:6b:67:74:6f:de:1c:02:8e:7f:2d:e5:55:d7:ab:ed:
         53:a0:4a:05:bc:af:7a:c7:1b:01:c5:06:6e:45:e4:37:19:9f:
         63:b9:ed:7a:ed:ac:9c:9d:1a:8d:f3:57:c2:a3:18:12:55:97:
         c4:9a:84:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:41:10 2026 by rpki-client