Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
File:                     JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft (raw, json)
Hash identifier:          HTOOxVckQTY/fH5PvHQC/RJdrec77QCb0Hc9OOVcYrU=
Subject key identifier:   20:83:46:3B:CC:94:7D:13:EA:86:22:04:D7:7D:2C:2E:ED:5F:A1:73
Authority key identifier: 26:01:BB:69:18:BD:CC:91:A4:14:28:90:1E:B9:8C:ED:97:0F:3E:EE
Certificate issuer:       /CN=2601bb6918bdcc91a41428901eb98ced970f3eee
Certificate serial:       01A0B4D14158B149839108CA76EB224CE249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
Manifest number:          0263
Signing time:             Fri 18 Sep 2026 14:00:07 +0000
Manifest this update:     Fri 18 Sep 2026 14:00:07 +0000
Manifest next update:     Sat 19 Sep 2026 14:00:07 +0000
Files and hashes:         1: JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl (hash: 06qE4NCKmVtnguEWneY2RjumbVuRoEwDbSjTtEZxwjA=)
                          2: xI2T6u-ogHCh_qmF9fvjI4t2phU.roa (hash: 8tqJsupYoAdrcHq1+XtacOJOwfLsGLJVAq+lOhZtBiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b4:d1:41:58:b1:49:83:91:08:ca:76:eb:22:4c:e2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2601bb6918bdcc91a41428901eb98ced970f3eee
        Validity
            Not Before: Sep 18 14:00:07 2026 GMT
            Not After : Sep 19 14:00:07 2026 GMT
        Subject: CN=2083463bcc947d13ea862204d77d2c2eed5fa173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:3d:c5:34:53:a3:f6:f6:61:07:26:9b:9d:
                    e6:10:34:be:19:4a:3a:40:d8:4d:bd:d4:9a:bc:1a:
                    19:77:61:20:2f:9e:cb:96:78:e4:9f:bb:fa:76:be:
                    cd:cb:95:cb:32:e4:3b:cf:fa:85:06:80:49:d8:03:
                    8f:8a:d8:d1:96:d1:77:5b:f3:ca:0e:54:c0:0e:e3:
                    bb:30:35:c0:49:59:b0:8f:fe:2b:61:27:3b:30:41:
                    43:09:24:bf:2b:80:71:72:d1:61:ce:ea:8f:51:72:
                    d9:df:7e:bb:64:03:e1:bb:11:c3:c9:2f:08:d0:ba:
                    8a:0a:cf:f4:e3:08:34:a1:20:8a:bb:b5:5d:63:df:
                    a9:16:18:b6:6a:78:db:83:d6:22:0c:cd:84:3d:10:
                    97:f4:30:0b:83:d4:d8:4b:ce:7c:e7:c1:fa:e9:38:
                    de:83:36:82:9e:40:63:fa:d5:f3:56:ad:9c:74:b1:
                    b2:79:f8:35:7a:c4:8a:24:5a:c8:05:78:1c:9b:41:
                    14:6a:0c:cd:72:9a:4b:da:b3:a9:61:db:e8:9c:97:
                    d5:77:da:fc:5a:02:2b:5b:18:c9:af:e6:98:7f:41:
                    38:09:65:fd:b3:c4:c4:8e:9c:e6:f1:a6:47:d4:be:
                    2a:62:fb:18:cc:d4:75:58:57:4f:0e:45:44:0e:6c:
                    d2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:83:46:3B:CC:94:7D:13:EA:86:22:04:D7:7D:2C:2E:ED:5F:A1:73
            X509v3 Authority Key Identifier:
                keyid:26:01:BB:69:18:BD:CC:91:A4:14:28:90:1E:B9:8C:ED:97:0F:3E:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a6:df:4e:2c:66:3e:ac:db:14:d5:dc:1d:8f:38:f3:3d:49:
         a7:91:3a:6c:02:1c:51:53:86:1c:6d:f1:da:18:8e:50:4c:f0:
         c7:b5:a4:68:67:e4:4f:23:94:71:a1:69:e9:84:c7:1d:e7:bd:
         9e:66:20:16:9d:c9:d9:7c:ea:52:da:45:72:1e:db:e3:fc:b3:
         3c:8b:a4:77:68:d5:ee:8f:b8:5b:79:3b:5c:3b:96:c5:9f:6d:
         ac:d8:fd:80:e6:4f:ad:e9:0c:f3:fc:99:13:b1:f1:a8:6b:23:
         e5:4f:a8:a0:0d:8f:1f:22:b3:14:d5:c3:c9:b3:1d:e0:c7:e3:
         6d:ce:44:c8:52:e4:69:9c:fb:fd:32:d2:49:88:68:4f:d3:25:
         71:bf:70:57:cb:04:69:c7:8b:3c:77:9a:7b:ee:23:29:4e:4a:
         de:dc:cb:6a:00:f1:35:9c:c4:90:83:34:7c:40:ce:ed:4a:19:
         91:94:fa:6c:18:85:e2:b2:6b:36:b3:1f:f2:50:14:df:c9:98:
         da:75:0a:a0:bb:b8:41:5b:9c:54:17:19:c1:f5:e7:f6:20:8b:
         c3:f1:71:e3:04:db:8f:ca:96:fe:bd:f2:9a:95:96:13:32:58:
         1d:83:5d:31:0a:ef:5a:06:e7:5a:5a:ee:2d:7d:9c:3b:c2:83:
         4e:1b:26:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC00UFYsUmDkQjKdusiTOJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MDFiYjY5MThiZGNjOTFhNDE0Mjg5MDFlYjk4Y2VkOTcw
ZjNlZWUwHhcNMjYwOTE4MTQwMDA3WhcNMjYwOTE5MTQwMDA3WjAzMTEwLwYDVQQD
EygyMDgzNDYzYmNjOTQ3ZDEzZWE4NjIyMDRkNzdkMmMyZWVkNWZhMTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCs9xTRTo/b2YQcmm53mEDS+GUo6
QNhNvdSavBoZd2EgL57Llnjkn7v6dr7Ny5XLMuQ7z/qFBoBJ2AOPitjRltF3W/PK
DlTADuO7MDXASVmwj/4rYSc7MEFDCSS/K4BxctFhzuqPUXLZ3367ZAPhuxHDyS8I
0LqKCs/04wg0oSCKu7VdY9+pFhi2anjbg9YiDM2EPRCX9DALg9TYS85858H66Tje
gzaCnkBj+tXzVq2cdLGyefg1esSKJFrIBXgcm0EUagzNcppL2rOpYdvonJfVd9r8
WgIrWxjJr+aYf0E4CWX9s8TEjpzm8aZH1L4qYvsYzNR1WFdPDkVEDmzSrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCDRjvMlH0T6oYiBNd9LC7tX6FzMB8GA1UdIwQY
MBaAFCYBu2kYvcyRpBQokB65jO2XDz7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmdHN2FSaTl6SkdrRkNpUUhybU03WmNQUHU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy80OGJjOGYtMTA2Yi00NGE5LWE1NTgt
ZGZhNjcxMDI0N2FhLzEvSmdHN2FSaTl6SkdrRkNpUUhybU03WmNQUHU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy80OGJjOGYtMTA2Yi00NGE5LWE1NTgtZGZhNjcxMDI0N2Fh
LzEvSmdHN2FSaTl6SkdrRkNpUUhybU03WmNQUHU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARabfTixm
PqzbFNXcHY848z1Jp5E6bAIcUVOGHG3x2hiOUEzwx7WkaGfkTyOUcaFp6YTHHee9
nmYgFp3J2XzqUtpFch7b4/yzPIukd2jV7o+4W3k7XDuWxZ9trNj9gOZPrekM8/yZ
E7HxqGsj5U+ooA2PHyKzFNXDybMd4Mfjbc5EyFLkaZz7/TLSSYhoT9Mlcb9wV8sE
aceLPHeae+4jKU5K3tzLagDxNZzEkIM0fEDO7UoZkZT6bBiF4rJrNrMf8lAU38mY
2nUKoLu4QVucVBcZwfXn9iCLw/Fx4wTbj8qW/r3ympWWEzJYHYNdMQrvWgbnWlru
LX2cO8KDThsmFQ==
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:48:11 2026 by rpki-client