Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
File:                     JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft (raw, json)
Hash identifier:          dbQqNwc0Tzt7y9U/3pnS2TyPkuxEm70cpf/vt/Z5I+I=
Subject key identifier:   B3:6C:6C:C8:3B:9F:22:D8:73:1F:14:85:28:E8:29:02:4F:C0:4D:F1
Authority key identifier: 26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
Certificate issuer:       /CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Certificate serial:       01A133A29725937F54C16A7E9B5C5C1F7FE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
Manifest number:          0878
Signing time:             Tue 13 Oct 2026 05:00:55 +0000
Manifest this update:     Tue 13 Oct 2026 05:00:55 +0000
Manifest next update:     Wed 14 Oct 2026 05:00:55 +0000
Files and hashes:         1: JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl (hash: OYmQoPGytC8euLK+W3gejMIcfwGoOzfNxA7HPzGZpfM=)
                          2: kt6ISYmYzdT_sD7cn5nH6bulSe4.roa (hash: 6LvWtYhhWQnpqxU2WlqAAGv11j/zEYewR/NkDp4dAe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:33:a2:97:25:93:7f:54:c1:6a:7e:9b:5c:5c:1f:7f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
        Validity
            Not Before: Oct 13 05:00:55 2026 GMT
            Not After : Oct 14 05:00:55 2026 GMT
        Subject: CN=b36c6cc83b9f22d8731f148528e829024fc04df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5b:f0:12:01:98:46:50:60:cc:03:05:de:ee:
                    3a:26:72:f8:59:9e:29:c9:4b:74:a7:3b:a1:a6:09:
                    48:7a:67:c0:41:0b:49:c7:a5:3c:2b:a5:4f:1a:76:
                    ae:5d:83:60:36:46:42:04:be:c8:53:aa:bf:9b:e3:
                    fb:21:7a:04:0e:e1:65:5e:fe:f0:39:6a:f6:e7:b7:
                    78:d3:23:c8:a5:7d:42:8b:ab:5d:51:ad:f4:68:7e:
                    b1:89:fc:80:9a:86:23:cb:0a:71:b2:a7:4f:fa:c2:
                    97:b5:f0:2d:81:1d:bc:9c:56:33:16:15:7a:8f:3e:
                    98:13:aa:4e:d2:61:8f:c6:81:21:aa:52:94:19:c1:
                    34:28:bb:01:28:cb:11:07:bd:8e:23:f6:89:d7:30:
                    9b:0e:9c:ba:72:d7:a2:f7:2d:67:11:25:f6:ad:ac:
                    e0:51:47:0e:4e:cc:8c:5e:cb:4e:b1:7a:8b:e0:18:
                    45:ee:63:6f:e2:dd:7b:58:ca:f5:e9:37:9c:18:bf:
                    0f:1d:e0:4e:62:d8:ab:56:ad:a3:28:69:1e:88:2b:
                    6c:6f:fa:39:bd:ee:5e:19:4f:ea:e0:23:88:c3:66:
                    99:d4:f5:e5:3b:27:f7:fe:81:1c:96:d3:85:36:57:
                    c9:ec:de:f0:c6:44:57:38:0b:4a:eb:44:c8:89:a6:
                    46:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6C:6C:C8:3B:9F:22:D8:73:1F:14:85:28:E8:29:02:4F:C0:4D:F1
            X509v3 Authority Key Identifier:
                keyid:26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c5:2b:0a:ad:89:e9:18:a3:32:9b:24:13:3d:36:74:38:b1:
         fc:2f:0d:ff:82:11:39:b2:8a:66:ab:b4:60:e5:22:5b:9c:bf:
         d4:90:66:b0:29:d3:3d:1e:f8:e3:4d:f9:93:b1:34:f5:c6:ff:
         4c:38:16:7a:14:b1:ea:fc:4e:c6:56:a9:de:be:74:15:dc:7d:
         c6:bd:6f:89:f3:d6:14:fc:f4:a0:79:d2:7c:3f:47:fd:ba:60:
         c0:10:a4:d1:99:1b:90:ed:85:0d:fc:f0:d7:46:7a:e4:26:73:
         d2:b8:42:17:3b:fd:1e:21:0d:fc:76:2f:d2:ad:59:61:3f:3b:
         d6:12:ca:47:1c:49:5d:66:46:01:43:14:0c:31:dc:14:f1:2c:
         53:a8:87:dc:05:94:06:d0:1b:b2:39:b7:fb:82:d0:cf:02:08:
         87:13:57:97:64:14:b1:01:76:d0:7e:2a:6b:e1:9e:7f:86:65:
         3c:1b:1d:01:81:fd:c7:ae:7e:16:4c:e4:34:0b:fb:c4:33:89:
         41:35:d2:c5:e0:82:6b:f9:88:74:c6:b6:00:ca:03:90:66:af:
         39:40:bc:aa:4e:c3:d2:c2:bc:c9:7a:38:24:ca:d2:51:b5:57:
         2b:3e:d7:db:3c:bd:94:f9:e7:c9:45:c8:6c:b9:90:db:eb:f7:
         b5:82:bf:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEzopclk39UwWp+m1xcH3/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YTI1MGQ2YzQ2ZjI2ZjRjMzAwNWZhNDJlNDAxYThhOWU1
Yzg4NmUwHhcNMjYxMDEzMDUwMDU1WhcNMjYxMDE0MDUwMDU1WjAzMTEwLwYDVQQD
EyhiMzZjNmNjODNiOWYyMmQ4NzMxZjE0ODUyOGU4MjkwMjRmYzA0ZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1vwEgGYRlBgzAMF3u46JnL4WZ4p
yUt0pzuhpglIemfAQQtJx6U8K6VPGnauXYNgNkZCBL7IU6q/m+P7IXoEDuFlXv7w
OWr257d40yPIpX1Ci6tdUa30aH6xifyAmoYjywpxsqdP+sKXtfAtgR28nFYzFhV6
jz6YE6pO0mGPxoEhqlKUGcE0KLsBKMsRB72OI/aJ1zCbDpy6ctei9y1nESX2razg
UUcOTsyMXstOsXqL4BhF7mNv4t17WMr16TecGL8PHeBOYtirVq2jKGkeiCtsb/o5
ve5eGU/q4COIw2aZ1PXlOyf3/oEcltOFNlfJ7N7wxkRXOAtK60TIiaZGfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNsbMg7nyLYcx8UhSjoKQJPwE3xMB8GA1UdIwQY
MBaAFCaiUNbEbyb0wwBfpC5AGoqeXIhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnFKUTFzUnZKdlREQUYta0xrQWFpcDVjaUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83MmE1MGItNTVlYi00OTdiLWE5Zjct
MWZmN2IzMWU1MmNkLzEvSnFKUTFzUnZKdlREQUYta0xrQWFpcDVjaUc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS83MmE1MGItNTVlYi00OTdiLWE5ZjctMWZmN2IzMWU1MmNk
LzEvSnFKUTFzUnZKdlREQUYta0xrQWFpcDVjaUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMUrCq2J
6RijMpskEz02dDix/C8N/4IRObKKZqu0YOUiW5y/1JBmsCnTPR744035k7E09cb/
TDgWehSx6vxOxlap3r50Fdx9xr1vifPWFPz0oHnSfD9H/bpgwBCk0ZkbkO2FDfzw
10Z65CZz0rhCFzv9HiEN/HYv0q1ZYT871hLKRxxJXWZGAUMUDDHcFPEsU6iH3AWU
BtAbsjm3+4LQzwIIhxNXl2QUsQF20H4qa+Gef4ZlPBsdAYH9x65+FkzkNAv7xDOJ
QTXSxeCCa/mIdMa2AMoDkGavOUC8qk7D0sK8yXo4JMrSUbVXKz7X2zy9lPnnyUXI
bLmQ2+v3tYK/qw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:33:39 2026 by rpki-client