Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
File:                     jrM9OZ3Q9flhftTkcOa9ydELeiA.mft (raw, json)
Hash identifier:          E3Y9IPOdzguHHT3Go9lew4oqNdR1rQSVpfZxT3dGjj4=
Subject key identifier:   1D:EE:98:5C:FE:DC:97:5A:F2:44:58:EE:87:9F:20:29:A7:8B:CB:3F
Authority key identifier: 8E:B3:3D:39:9D:D0:F5:F9:61:7E:D4:E4:70:E6:BD:C9:D1:0B:7A:20
Certificate issuer:       /CN=8eb33d399dd0f5f9617ed4e470e6bdc9d10b7a20
Certificate serial:       019FFBA52BE78F9E31C7B5A0AD5B0E1D1015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
Manifest number:          0190
Signing time:             Thu 13 Aug 2026 15:02:13 +0000
Manifest this update:     Thu 13 Aug 2026 15:02:13 +0000
Manifest next update:     Fri 14 Aug 2026 15:02:13 +0000
Files and hashes:         1: _Wy5a31X0fWVI5kzqNmJQQC4UbU.roa (hash: 9Bcaw7GkeT0B0JGjnO2Z6JkUkn/KrawL89AtsYKJKU0=)
                          2: jrM9OZ3Q9flhftTkcOa9ydELeiA.crl (hash: zSMF547CFHdoNRYcnCZbPAQzWqCVjx6tVTBBiHQ6lCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 15:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fb:a5:2b:e7:8f:9e:31:c7:b5:a0:ad:5b:0e:1d:10:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb33d399dd0f5f9617ed4e470e6bdc9d10b7a20
        Validity
            Not Before: Aug 13 15:02:13 2026 GMT
            Not After : Aug 14 15:02:13 2026 GMT
        Subject: CN=1dee985cfedc975af24458ee879f2029a78bcb3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bd:eb:4b:61:de:0b:05:d3:9d:b8:f4:97:84:
                    9a:51:d7:b9:43:da:c0:c7:97:29:3a:21:4c:e6:17:
                    a9:23:4d:f3:97:54:d4:8c:4b:ef:47:87:7d:f6:2d:
                    29:95:d4:7f:3f:38:12:aa:d6:39:d4:5b:96:23:3e:
                    a0:ec:1a:66:4a:55:23:eb:0d:31:fb:30:fc:80:8d:
                    3c:e8:db:4a:f1:ac:7a:5d:53:36:3f:09:5b:e0:bb:
                    d9:74:01:13:e5:a1:8b:2d:c8:6a:5a:4f:a6:b8:87:
                    61:70:db:1e:03:12:b6:42:a8:76:b0:92:e3:e4:5b:
                    ec:fe:6e:93:fe:2d:d8:85:98:7c:78:bb:f8:48:8b:
                    b4:55:6b:04:54:49:aa:06:02:c6:7c:a1:ed:91:77:
                    a2:33:66:62:12:be:ee:b2:4c:af:fa:f2:05:4b:ee:
                    c1:8d:d4:e3:e3:5f:34:07:fc:7d:d9:f9:57:5d:2f:
                    01:12:c5:36:3f:9c:f3:aa:84:ad:31:0b:1d:ab:3c:
                    68:64:41:54:9c:1f:29:b8:7d:56:6d:35:31:c8:4a:
                    77:5e:89:96:82:88:20:6c:49:92:f2:b5:a0:42:a2:
                    a3:73:db:23:ea:cc:b4:fc:71:8d:a3:5c:11:fa:60:
                    c3:d1:ab:c9:86:d0:7b:ab:aa:6d:8d:b8:fe:fa:06:
                    48:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EE:98:5C:FE:DC:97:5A:F2:44:58:EE:87:9F:20:29:A7:8B:CB:3F
            X509v3 Authority Key Identifier:
                keyid:8E:B3:3D:39:9D:D0:F5:F9:61:7E:D4:E4:70:E6:BD:C9:D1:0B:7A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:10:3a:af:94:8e:cc:b3:59:5b:20:75:1e:77:b2:ab:47:e5:
         1e:46:21:36:85:2c:42:c0:64:5b:56:49:ce:f0:70:79:d4:5a:
         aa:91:7a:9e:d7:2e:c4:99:e2:cf:58:6b:86:62:d3:61:86:c0:
         53:ed:b7:0e:8a:2b:00:a6:70:90:20:95:2c:32:38:77:e0:ba:
         d1:46:7d:66:ea:36:04:51:fa:e2:d6:ec:37:6a:65:db:37:51:
         43:6e:28:d1:ae:d3:3b:4c:fe:6d:09:06:ac:96:6a:0b:13:a6:
         8a:02:5e:51:a8:df:0a:f9:9d:dd:07:61:9e:2d:09:87:8d:17:
         2e:00:2a:13:3e:64:18:9b:43:2a:2a:22:1c:2d:5b:27:ef:d9:
         23:fb:02:48:36:45:b9:f3:df:89:cc:be:05:7d:f6:72:9c:4b:
         62:5c:e2:a7:f3:54:e4:01:d2:53:aa:88:b6:35:f1:c0:f6:2a:
         74:a4:28:33:13:48:21:94:17:41:ba:79:8c:d2:07:9a:83:f0:
         23:e0:55:5a:b5:e6:39:a0:63:d1:68:6c:22:11:e0:3d:fc:21:
         53:ed:f8:4b:b1:b4:7b:19:ea:b5:68:73:02:31:52:97:da:53:
         7e:c5:48:0a:ad:71:00:ca:d7:dc:35:a0:4f:6b:44:b0:8e:50:
         9f:ac:93:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 20:57:38 2026 by rpki-client