Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
File:                     JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft (raw, json)
Hash identifier:          OXZGE+5Jx7bLurGfqhr3bEuKo3igJlM2geZi+nDslSI=
Subject key identifier:   27:56:A8:84:1E:55:05:80:D2:48:B5:44:80:50:F7:81:8E:7C:C4:73
Authority key identifier: 26:01:BB:69:18:BD:CC:91:A4:14:28:90:1E:B9:8C:ED:97:0F:3E:EE
Certificate issuer:       /CN=2601bb6918bdcc91a41428901eb98ced970f3eee
Certificate serial:       01A1AA153BB9601A06B0C99B6101B66B2FAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
Manifest number:          02E2
Signing time:             Thu 05 Nov 2026 05:01:20 +0000
Manifest this update:     Thu 05 Nov 2026 05:01:20 +0000
Manifest next update:     Fri 06 Nov 2026 05:01:20 +0000
Files and hashes:         1: JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl (hash: JIdYXluPYCIi7//fDA6c4ARV0UNyhVveS5ie2cL7Nlo=)
                          2: xI2T6u-ogHCh_qmF9fvjI4t2phU.roa (hash: 8tqJsupYoAdrcHq1+XtacOJOwfLsGLJVAq+lOhZtBiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 05:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:aa:15:3b:b9:60:1a:06:b0:c9:9b:61:01:b6:6b:2f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2601bb6918bdcc91a41428901eb98ced970f3eee
        Validity
            Not Before: Nov  5 05:01:20 2026 GMT
            Not After : Nov  6 05:01:20 2026 GMT
        Subject: CN=2756a8841e550580d248b5448050f7818e7cc473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2f:96:45:62:54:01:9f:a8:52:96:2d:e3:1d:
                    71:15:8f:33:8c:76:fc:84:af:69:a7:a7:f8:86:61:
                    d7:56:51:4c:f2:48:f4:4f:90:a3:a6:f1:67:73:33:
                    ab:90:b0:3e:57:43:c5:d5:c8:ef:9b:31:8f:ae:40:
                    c7:a2:d2:21:38:79:8f:0b:f7:d0:65:9b:44:c6:05:
                    92:df:37:7a:67:f3:a5:4f:3b:96:0d:7b:95:be:ff:
                    31:83:eb:43:4d:68:d6:cc:74:cc:c4:b6:e3:7c:d4:
                    31:e5:19:a4:c8:8f:b1:07:9f:da:a4:93:ec:a3:d2:
                    6f:23:6e:f4:08:6c:b0:85:61:b8:ce:96:02:3c:6d:
                    59:fa:48:6d:41:f3:72:8b:1f:c9:0d:e7:71:25:f6:
                    0a:b1:ca:2a:73:20:34:0c:3a:ca:0b:d6:82:96:61:
                    df:69:51:b6:da:51:70:45:04:1e:d4:3e:fa:ec:15:
                    ac:61:ae:77:02:53:b4:eb:ac:a4:8b:81:e1:46:53:
                    87:02:4b:04:6c:32:1d:0f:e6:68:18:e3:53:8c:e0:
                    88:c2:8d:87:96:9d:83:cb:76:c9:68:f2:4f:b0:67:
                    be:04:c2:ee:90:44:02:4f:00:0a:dc:e3:16:0f:3b:
                    a6:2d:33:f5:71:22:f6:be:19:48:e0:6f:33:41:52:
                    20:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:56:A8:84:1E:55:05:80:D2:48:B5:44:80:50:F7:81:8E:7C:C4:73
            X509v3 Authority Key Identifier:
                keyid:26:01:BB:69:18:BD:CC:91:A4:14:28:90:1E:B9:8C:ED:97:0F:3E:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c1:c1:0a:51:38:e9:f6:18:0f:6a:d3:0c:c7:b9:c7:f4:e9:
         1c:e2:86:aa:d4:81:29:39:0f:02:33:62:66:c0:29:43:3b:dc:
         b2:93:54:e7:3b:91:77:c1:63:e4:05:68:fa:71:f4:83:1f:2c:
         63:a8:26:5d:ce:a2:78:2e:6a:15:cd:f1:dc:d5:ed:ac:3f:ac:
         6b:a1:59:7f:df:8b:d9:9a:6f:89:49:76:77:04:61:42:48:61:
         ff:20:ea:b9:a2:67:c7:cd:86:f0:ff:1b:2b:ea:57:a2:4b:d8:
         18:a0:2f:d6:73:96:ae:fc:3d:9a:6f:35:3a:d6:3c:92:ab:a7:
         0b:cf:5b:3d:b5:95:ac:a7:d1:cb:6c:7f:93:26:31:26:9f:0c:
         93:86:87:36:44:61:7a:c9:dc:f3:62:1d:e0:73:90:e4:ef:cf:
         83:d5:b5:2b:bd:84:27:32:60:e5:5c:b8:ac:1e:2b:0e:83:b1:
         72:80:e3:39:94:cf:68:b6:22:5f:30:0f:01:5d:0a:5e:ba:71:
         a0:a8:83:c9:a6:21:85:44:43:4b:76:ec:5f:39:70:16:84:47:
         6d:d4:ab:de:dc:a6:cd:8e:8b:1a:9b:9f:0e:01:d1:2e:a0:42:
         51:f1:eb:f2:e0:28:3f:2f:8b:16:bb:39:16:53:ba:cc:ee:b5:
         e3:fe:ca:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:22:07 2026 by rpki-client