Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
File:                     JoLIFvcmhv967eU1OGGMwuiGEDk.mft (raw, json)
Hash identifier:          nQGcY4OSmHnTZxIDa7zGXVCJPTdHWJ+JRLRytAOZdyM=
Subject key identifier:   FB:E2:78:06:92:3F:93:B7:06:E0:0E:E8:43:72:07:7F:BE:F0:21:6C
Authority key identifier: 26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39
Certificate issuer:       /CN=2682c816f72686ff7aede53538618cc2e8861039
Certificate serial:       01A08C0D021D9FE20AFDFA8010BFD7910C14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
Manifest number:          14E8
Signing time:             Thu 10 Sep 2026 16:00:57 +0000
Manifest this update:     Thu 10 Sep 2026 16:00:57 +0000
Manifest next update:     Fri 11 Sep 2026 16:00:57 +0000
Files and hashes:         1: 1IIEvGygvpoLAGhzsQa0AFiSc6c.roa (hash: IlEP7k2pN5p03aEIwdfyX+8YwJkY7uWP4+Wsd4o4ZfU=)
                          2: 7dyvMJC9soHwC2C-qKBNN8Swy1E.roa (hash: ThU9QlnbHrk5sj3VeLKsVi1YledN8CGPHeD+PwkC7Pk=)
                          3: JoLIFvcmhv967eU1OGGMwuiGEDk.crl (hash: OumNJ5ChlTx5KIhurC93lZ7/cyXLrq7fqoqGfMlr2gE=)
                          4: iAMQWeS9GMw3TAa5hDTAT6s825g.roa (hash: 2q1sFbCAgulgub3q2AGPYNHWFrfFNMkKFSc13dmp7t4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0d:02:1d:9f:e2:0a:fd:fa:80:10:bf:d7:91:0c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2682c816f72686ff7aede53538618cc2e8861039
        Validity
            Not Before: Sep 10 16:00:57 2026 GMT
            Not After : Sep 11 16:00:57 2026 GMT
        Subject: CN=fbe27806923f93b706e00ee84372077fbef0216c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:e0:f9:6b:98:40:e7:28:9e:b2:bc:52:4a:
                    18:34:c8:3d:a5:d1:02:32:04:b6:f1:53:1d:82:3e:
                    96:38:fa:b1:2e:32:7c:be:9f:3f:7a:d9:4d:83:c5:
                    b5:70:b5:bd:e1:24:fb:22:5e:eb:81:f6:f5:73:65:
                    7a:23:61:ef:ff:6d:8a:11:6d:48:80:74:61:22:44:
                    65:e3:7f:b0:02:8c:66:71:15:43:30:ce:f8:1f:6a:
                    b6:ba:93:93:5f:e1:d0:22:2e:8b:09:88:ae:b1:1d:
                    17:8e:74:7c:09:20:e0:d4:f6:27:ce:20:6c:ce:7c:
                    41:b8:3c:42:cb:76:2c:43:d1:ef:54:81:ca:92:aa:
                    ea:bd:f2:ae:d3:ce:f9:a9:1d:ac:1f:f4:f6:48:c2:
                    8a:6e:b0:75:76:9b:40:58:f5:e7:df:5f:66:02:2a:
                    ed:a8:ed:be:72:16:fb:2a:9f:ee:aa:11:5b:91:6e:
                    4a:a1:ee:d9:ca:8f:0d:61:5d:77:b7:5d:14:9c:e6:
                    91:07:0b:a2:ad:73:f2:93:6e:55:a8:3a:fe:97:7e:
                    03:12:65:21:42:39:31:24:55:5a:b0:a3:7b:51:6d:
                    f6:48:6d:45:97:a9:79:83:59:f9:4a:76:05:d0:65:
                    55:bb:e0:6f:84:5f:45:20:4d:7d:3f:d4:88:93:06:
                    4c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E2:78:06:92:3F:93:B7:06:E0:0E:E8:43:72:07:7F:BE:F0:21:6C
            X509v3 Authority Key Identifier:
                keyid:26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:20:6a:8d:b6:4a:37:af:53:90:b4:bd:da:f5:1e:80:09:69:
         98:a6:ce:df:15:48:46:15:dd:eb:62:b6:aa:43:0f:82:13:0a:
         ab:15:80:0e:ef:bc:dd:df:da:4f:36:bd:04:b5:6b:fc:b4:48:
         5a:8b:c4:26:f3:1e:9c:2b:e6:49:30:37:dc:5e:56:f4:9f:1a:
         14:61:a9:69:dc:9a:62:c4:3b:23:a6:b4:bf:ea:68:a7:1f:6d:
         ea:37:91:c7:d1:f2:64:7c:21:74:14:5b:e1:8c:f5:7f:01:28:
         39:a8:1e:62:8c:10:1e:81:2b:df:11:00:46:2f:a1:4e:74:ef:
         ee:b6:1a:4c:f9:6a:3b:03:68:87:7e:ab:09:91:9c:29:00:07:
         44:b3:6e:07:de:d9:a4:d9:a3:ae:b8:7c:40:9f:45:d3:b1:49:
         ba:58:cf:24:1c:c4:14:48:bd:04:c0:56:25:cc:70:bb:99:df:
         7a:2f:64:5d:d8:9c:de:a7:75:88:db:29:0c:8a:84:3f:74:f2:
         81:fc:13:58:57:0b:b5:82:ed:05:7b:cb:91:f2:ba:77:11:0d:
         f2:04:01:3a:a7:28:4e:ff:3d:2f:c2:4c:77:6b:e7:f7:a2:ae:
         e3:11:5c:98:08:62:9e:6c:61:a1:97:21:a2:4c:29:f1:d5:81:
         b4:da:30:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:16:05 2026 by rpki-client