Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
File:                     js94ugJ10dO2SSqOnWEGE8Awahc.mft (raw, json)
Hash identifier:          UlAgD+/QTBi2JsF+8ZLYcskHC3VJXbzmKT78lRbK5FE=
Subject key identifier:   C8:17:58:81:D7:BB:0F:F3:81:AC:37:0E:F7:21:5B:69:E3:9B:F0:1A
Authority key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
Certificate issuer:       /CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Certificate serial:       01A11FAE515B43034773E45FC6DFE6DFBE3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
Manifest number:          0CD3
Signing time:             Fri 09 Oct 2026 08:01:19 +0000
Manifest this update:     Fri 09 Oct 2026 08:01:19 +0000
Manifest next update:     Sat 10 Oct 2026 08:01:19 +0000
Files and hashes:         1: 6jRqKVuODTj7RE21wNslnYzfKPk.roa (hash: Zs62FflRnG2r2QTuVznrFZu5JhE4Zt4az6qrBtPJYrM=)
                          2: LAWT8-8DrVGXo-g5H4GZO3z7fS8.roa (hash: Na6k/8EGssv/5DxPGxpYhkk2M4Z1QcQ+K49dXTrHKUI=)
                          3: LJlzTJtg6FQBljsIQ42l8hu1ry0.roa (hash: 8VVphXmiTF2MkpBn69wXWh0vVMpRcQmyTL7499d+b8Y=)
                          4: js94ugJ10dO2SSqOnWEGE8Awahc.crl (hash: VuNzNx9YMYOpn+smIs+5mreKZnxA6VeO9zv9sRtxT6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1f:ae:51:5b:43:03:47:73:e4:5f:c6:df:e6:df:be:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
        Validity
            Not Before: Oct  9 08:01:19 2026 GMT
            Not After : Oct 10 08:01:19 2026 GMT
        Subject: CN=c8175881d7bb0ff381ac370ef7215b69e39bf01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:df:75:32:8b:f6:79:f8:e1:79:22:ec:02:a3:
                    5c:f2:e9:12:f0:07:84:ef:89:b8:9f:bc:ba:a7:6f:
                    27:a7:66:7c:95:f4:0c:b7:1f:de:2c:59:dc:a7:c0:
                    25:7a:d4:dc:55:fd:93:50:3f:f9:d7:9e:11:cc:11:
                    89:9d:aa:2f:8d:87:df:28:61:62:e1:2e:1e:4f:fe:
                    68:51:1b:22:ac:5e:ce:4a:61:e2:8b:fe:9e:29:86:
                    d7:c2:a4:98:c3:46:89:de:00:f1:49:1f:7a:09:d1:
                    23:e9:e5:ce:f5:a3:20:82:47:be:34:cf:ac:58:6d:
                    b1:2d:de:41:21:d7:2d:70:43:d0:a4:2a:17:f0:3d:
                    0f:81:ab:13:7a:c9:68:a1:b4:47:14:5c:bb:30:c8:
                    72:fa:cb:29:3c:e2:fc:32:7d:ca:a7:be:7c:bc:66:
                    c2:d4:eb:97:36:84:99:99:67:3e:b2:b1:bd:1c:30:
                    32:55:d2:dc:18:ff:a3:f7:e8:5a:c3:26:ad:8b:1a:
                    f4:cb:84:c2:6d:67:3f:2e:0d:bd:1a:35:f2:cd:01:
                    ba:da:c7:f4:9a:6f:1d:7d:e1:87:61:24:10:a6:d8:
                    89:e0:7a:36:9a:d2:e5:d2:03:9d:5c:32:47:1a:3f:
                    31:5b:9a:2b:d8:41:7a:2b:31:f8:20:e9:7c:2a:64:
                    be:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:17:58:81:D7:BB:0F:F3:81:AC:37:0E:F7:21:5B:69:E3:9B:F0:1A
            X509v3 Authority Key Identifier:
                keyid:8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:24:75:b2:63:7c:c1:54:8d:ec:af:f6:b2:c9:77:58:8a:90:
         d3:78:8e:ed:cf:e2:90:d0:70:b2:2f:6f:90:c7:c2:d4:af:84:
         4e:f1:bb:d5:4c:d9:47:3e:ec:e6:58:b5:9a:02:fd:80:30:df:
         58:26:d4:ff:3f:ec:01:9f:49:db:09:5a:a6:33:8a:fc:bf:7d:
         ef:95:50:d9:6e:57:17:70:95:91:76:01:89:0c:5f:b6:77:e7:
         67:65:83:cf:c1:ff:94:3d:b2:9a:5f:e1:a9:32:8d:aa:61:82:
         e8:f2:ed:4e:95:04:e0:e9:97:38:32:05:39:16:90:10:9b:8e:
         3d:de:8a:70:1c:38:c7:4d:e7:19:2b:ce:31:48:17:58:0a:3b:
         9b:7e:f2:53:ce:03:06:04:cd:8c:a2:e5:a8:10:ab:39:fa:b2:
         1c:f3:a0:bd:67:cb:94:79:f3:02:c6:cd:24:13:c9:51:f0:c1:
         76:7a:0a:c7:db:9c:05:de:87:8e:ec:fe:fa:4b:3b:8b:9c:b2:
         e2:9c:87:e2:b1:9f:ee:65:d6:69:16:97:dd:bb:a4:83:bd:64:
         c0:e2:db:43:0e:cc:51:db:48:6e:c0:6b:42:7c:d1:f0:3c:10:
         1f:b8:93:15:25:55:bb:00:42:5c:9c:3b:03:8f:6c:8a:eb:da:
         46:a1:ce:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 18:33:31 2026 by rpki-client