Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
File:                     JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft (raw, json)
Hash identifier:          1x1DojZ6izUtxwSLGtvxfdyoemprIafxf566181nkmo=
Subject key identifier:   14:96:CE:9C:88:2E:7D:65:74:39:F1:BD:59:66:76:02:82:CD:14:AD
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Certificate issuer:       /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial:       01A17DAA7989B12E782A639AECD8DFB49E15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
Manifest number:          1AD3
Signing time:             Tue 27 Oct 2026 14:01:26 +0000
Manifest this update:     Tue 27 Oct 2026 14:01:26 +0000
Manifest next update:     Wed 28 Oct 2026 14:01:26 +0000
Files and hashes:         1: CE6rRh7gwkNwQsNCEV_5-qvby8o.roa (hash: +C6crj3tlveY40cfyaDLAmJKc2kjvGSJAnx+Tun2pBQ=)
                          2: J7hqwzNBUJIFCvPHnt3UCUaIkS4.roa (hash: dwuiTVtxcw0Gm8ehWtdolENkQjfHnVWwxpd27Y3PhYA=)
                          3: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl (hash: sneYxQK+ptSWDKDmyVOt87RFfava7o3lpemcxkG9pA8=)
                          4: MjvomoUdbRCYMRTivd64oJucyR4.roa (hash: cQeTekUSkTsAQzZ5llLXfmDS9liZjdYx7jCgTSy2Qs0=)
                          5: My7nFs0Vdg40cSVzVAWWgDYiiWQ.roa (hash: xMnqeo8kv1TT3K5je0MfFlhPp2VhqBwqS4yOebCmHHo=)
                          6: dwe_m7iK2njmUFFGe9nnrN8FZV4.roa (hash: utaiyLTsrEWxNDIzyZ7TNXdP2ryHcGA9G92URVMLgOY=)
                          7: hVI8QpUF6r-7T1ydDal0FAOErp0.asa (hash: eBJoQYgzHLkhlMbNBG7c3qKGn19DEMueFJ88acOdrks=)
                          8: ixjloOI87OkWVNhgbhDEEFBTJ_A.roa (hash: cx+C+iENlLKYVwuPtzW+PgZZj9Jz/VMG8suoQFDv4vY=)
                          9: j2qKFrWfusxDiFzkFOC9pNjdNeM.roa (hash: eedi82Numcyo5s6BIiJHhclTJ6KJqgbKjG36ZSW5eFU=)
                          10: m3RaVncm_gBlS4tVezr7XBZHrR4.roa (hash: NCcn02MU0AdzNYn2EHJlZXzwGScb4dWUGw8AznxeOaE=)
                          11: pxvwZ83GQsd2xDFU232Uh7bybX4.roa (hash: wTQyNgjrlPNNWRBqCTTjBvEsBojPl8WoXlgNibVwY1s=)
                          12: s5LlLi4ld2vBJszDYqPE5bC6NUQ.roa (hash: xBO3s6pJR+C6uL7cUKX1XBoCQVOuPGpiKn7J6K0u+hM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:aa:79:89:b1:2e:78:2a:63:9a:ec:d8:df:b4:9e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
        Validity
            Not Before: Oct 27 14:01:26 2026 GMT
            Not After : Oct 28 14:01:26 2026 GMT
        Subject: CN=1496ce9c882e7d657439f1bd5966760282cd14ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:bd:23:10:fd:31:71:65:dd:57:36:57:d3:
                    7c:0e:e8:68:d6:aa:5e:30:a7:68:3a:e5:65:c3:df:
                    d4:c6:6e:90:9b:35:fd:4f:0d:24:60:45:36:f0:53:
                    79:95:7d:af:27:52:ea:8e:63:c5:da:c0:a7:13:df:
                    0e:e6:35:31:bc:36:23:08:17:ce:a1:ed:a1:3d:0d:
                    87:e9:7e:0c:43:2c:9b:23:b8:30:f3:e7:3f:ae:00:
                    4d:7e:06:5c:1d:96:82:c6:b9:94:37:8d:63:71:1f:
                    89:2f:9c:ea:af:37:d0:0f:e7:e6:4a:18:16:db:67:
                    89:cd:87:f7:2f:07:f7:b9:59:18:90:dd:82:5f:77:
                    38:47:4f:33:2d:82:d1:0a:b0:05:8a:4c:42:c8:0e:
                    e1:71:a4:10:84:da:e6:7d:c5:59:ca:ce:48:37:55:
                    35:71:e2:e5:cb:b8:21:41:03:57:52:74:5a:77:06:
                    78:24:1a:03:22:5f:2d:ad:63:64:ba:91:f8:be:f0:
                    50:8d:d1:dc:aa:cd:0b:88:ed:9f:6a:37:76:c0:4b:
                    35:2b:14:e7:a2:ed:08:a7:17:55:1a:6d:a3:61:12:
                    7c:6d:bc:fd:6e:cc:14:08:72:ed:ca:35:9c:95:95:
                    7f:c2:a5:c0:91:d5:ae:f9:01:88:06:64:50:25:5f:
                    fd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:96:CE:9C:88:2E:7D:65:74:39:F1:BD:59:66:76:02:82:CD:14:AD
            X509v3 Authority Key Identifier:
                keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:76:17:28:19:b7:1a:78:ac:a0:0c:49:71:65:c5:c1:f6:b7:
         5b:21:e1:8d:aa:64:2e:e2:eb:35:40:5a:46:61:9f:69:4a:01:
         f8:57:2b:17:18:47:50:41:65:ab:73:79:e3:98:bb:b9:8f:58:
         00:77:f2:ab:8c:b2:40:70:90:42:1d:65:b0:02:9d:c1:51:76:
         06:e1:d1:31:f8:8e:61:13:98:47:14:58:ed:73:fa:dc:2a:6c:
         20:30:55:b0:50:f1:85:2d:ed:b6:f7:db:00:df:29:1a:30:c7:
         2b:6e:5e:66:ee:44:d8:07:9b:e1:76:b6:9c:33:14:fe:54:74:
         0c:89:1f:af:5d:6c:64:28:40:df:a5:39:af:e1:4a:ae:21:39:
         89:c1:b0:db:f4:59:52:8f:d7:67:58:13:a2:4c:20:91:b7:8b:
         e7:69:c3:a0:9f:22:a9:a1:94:af:81:f7:19:6d:05:6b:08:ec:
         7c:ac:ac:78:d2:77:c9:a2:5f:26:e3:e5:7f:31:36:1f:06:0f:
         e9:b4:83:89:9b:c9:52:ec:d2:9f:46:f0:ee:29:ce:35:a8:81:
         8a:7a:c9:b5:a6:27:10:c0:cc:25:92:21:a6:92:e5:05:73:c2:
         5f:aa:c7:90:21:f4:84:72:38:88:ca:2c:54:36:79:05:df:2a:
         85:69:65:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:20:24 2026 by rpki-client