Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File:                     jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier:          zK+/SMa4ZdpwH10qFk4E6j7ErGErwM8Gm1oxiZi4Xrk=
Subject key identifier:   B8:AE:91:DB:30:C5:68:4C:77:4E:89:53:8D:B8:9A:85:D2:1C:05:BA
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer:       /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial:       01A146BBCFC0CE7ECC8DFAE4D80AB012C283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number:          131D
Signing time:             Fri 16 Oct 2026 22:01:15 +0000
Manifest this update:     Fri 16 Oct 2026 22:01:15 +0000
Manifest next update:     Sat 17 Oct 2026 22:01:15 +0000
Files and hashes:         1: hJ4yBwRAkPSn0hZDZUYf9X3bnuA.roa (hash: SieYkKpzIy6oq5VVbN7rTFUvyMh99g+Bi6wzQEIEdkQ=)
                          2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: 7ACA3Ktzx06I0IqnRoqEc1XIef/mzinkvyxoywQdDTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:46:bb:cf:c0:ce:7e:cc:8d:fa:e4:d8:0a:b0:12:c2:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
        Validity
            Not Before: Oct 16 22:01:15 2026 GMT
            Not After : Oct 17 22:01:15 2026 GMT
        Subject: CN=b8ae91db30c5684c774e89538db89a85d21c05ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:95:5d:1d:b1:80:ac:50:53:6c:02:40:6a:
                    3b:f0:71:7d:68:42:f9:3c:80:3d:75:9c:fe:84:7d:
                    ff:3f:ef:ae:98:b2:36:82:ff:85:c2:e3:52:7a:ed:
                    c4:9b:13:a5:9f:94:58:60:9e:ca:37:06:24:a2:40:
                    be:bd:13:8d:b8:ef:0a:b9:52:5a:14:22:89:2c:1c:
                    ac:55:d0:1a:52:cf:6c:4d:4e:60:a7:af:9f:3f:d9:
                    f2:93:8f:bc:8c:75:78:b7:bf:84:0a:04:66:bc:57:
                    ab:e1:b5:f4:a8:45:31:49:6f:d4:18:a6:29:c6:05:
                    1b:43:1b:89:c4:8c:52:8c:16:17:3a:a4:48:9f:1f:
                    ff:b8:71:aa:18:4a:de:81:37:83:cf:84:82:90:0a:
                    b0:15:0c:3e:cd:5b:e5:76:45:3c:74:6e:33:bd:c4:
                    3f:a5:e5:73:60:14:6c:fb:cc:e2:e6:91:c4:89:5e:
                    8a:45:12:03:d0:7a:17:e6:7f:e4:ad:ac:8a:db:15:
                    0f:90:de:e6:e5:12:b6:d5:07:1c:30:46:7d:87:9b:
                    3d:cc:fd:df:47:ea:9c:ef:8e:56:29:06:5d:ff:d2:
                    8b:b3:a4:dd:88:85:9e:6f:00:2b:56:0c:ce:23:16:
                    06:5b:2a:5f:f8:d0:3f:c2:5b:3a:52:70:d4:16:9c:
                    ac:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AE:91:DB:30:C5:68:4C:77:4E:89:53:8D:B8:9A:85:D2:1C:05:BA
            X509v3 Authority Key Identifier:
                keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:74:f7:bc:97:62:7b:aa:a3:1a:6f:88:88:58:4a:ff:8c:b2:
         65:55:44:fe:f0:95:c0:0d:a9:90:3d:4b:9a:fe:2f:ef:13:d3:
         e7:61:40:c3:4b:a5:27:64:86:02:4e:56:2d:b8:95:b3:30:2c:
         e4:2a:79:61:eb:ec:0f:c8:b0:6b:b6:e2:a3:30:2f:f8:e8:75:
         c4:f0:da:8f:4c:e5:41:31:27:2c:ba:d9:05:52:a0:a1:da:f4:
         d1:7b:9f:b8:87:b4:56:56:31:ba:52:40:90:a3:bd:2e:24:d7:
         cb:0c:23:0c:fb:c2:e7:f3:af:93:1e:e9:b5:b5:29:48:a0:6a:
         28:4e:a9:8c:ac:e2:57:6d:6d:73:4f:64:e9:70:7b:bf:fa:7b:
         40:82:86:1e:cd:47:54:6a:36:ee:72:19:ba:05:fc:1f:41:51:
         4f:d1:13:60:27:10:e1:71:53:87:d6:63:22:f4:c9:c7:44:1d:
         10:a2:56:30:fa:fe:00:cf:1e:1a:27:ae:b0:24:8d:49:b4:92:
         db:cf:af:f2:1a:10:15:f5:c4:43:bc:9d:0b:bb:bd:e1:24:6d:
         8a:07:e3:25:cb:4d:13:3f:42:c5:ee:36:fe:d3:49:bb:34:33:
         f1:de:86:4f:2e:5e:86:56:2c:79:54:1b:63:a7:c5:fd:42:d9:
         ed:5a:ea:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFGu8/Azn7Mjfrk2AqwEsKDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMzUwZGQ2ZDg0MmViZDRkZGQwOGNhZDQxZDhmZjgxNmJm
ZGZmZjgwHhcNMjYxMDE2MjIwMTE1WhcNMjYxMDE3MjIwMTE1WjAzMTEwLwYDVQQD
EyhiOGFlOTFkYjMwYzU2ODRjNzc0ZTg5NTM4ZGI4OWE4NWQyMWMwNWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv+VXR2xgKxQU2wCQGo78HF9aEL5
PIA9dZz+hH3/P++umLI2gv+FwuNSeu3EmxOln5RYYJ7KNwYkokC+vRONuO8KuVJa
FCKJLBysVdAaUs9sTU5gp6+fP9nyk4+8jHV4t7+ECgRmvFer4bX0qEUxSW/UGKYp
xgUbQxuJxIxSjBYXOqRInx//uHGqGEregTeDz4SCkAqwFQw+zVvldkU8dG4zvcQ/
peVzYBRs+8zi5pHEiV6KRRID0HoX5n/krayK2xUPkN7m5RK21QccMEZ9h5s9zP3f
R+qc745WKQZd/9KLs6TdiIWebwArVgzOIxYGWypf+NA/wls6UnDUFpysrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiukdswxWhMd06JU424moXSHAW6MB8GA1UdIwQY
MBaAFI41DdbYQuvU3dCMrUHY/4Fr/f/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xYmYyZTEtMzM5Mi00YjZlLTk1OTct
MjFmM2YyNjQ4NGQ5LzEvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xYmYyZTEtMzM5Mi00YjZlLTk1OTctMjFmM2YyNjQ4NGQ5
LzEvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHT3vJdi
e6qjGm+IiFhK/4yyZVVE/vCVwA2pkD1Lmv4v7xPT52FAw0ulJ2SGAk5WLbiVszAs
5Cp5YevsD8iwa7biozAv+Oh1xPDaj0zlQTEnLLrZBVKgodr00XufuIe0VlYxulJA
kKO9LiTXywwjDPvC5/Ovkx7ptbUpSKBqKE6pjKziV21tc09k6XB7v/p7QIKGHs1H
VGo27nIZugX8H0FRT9ETYCcQ4XFTh9ZjIvTJx0QdEKJWMPr+AM8eGieusCSNSbSS
28+v8hoQFfXEQ7ydC7u94SRtigfjJctNEz9Cxe42/tNJuzQz8d6GTy5ehlYseVQb
Y6fF/ULZ7Vrqbw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 04:43:34 2026 by rpki-client