Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
File:                     JYYj7MjcuRPRAiipRgqG5mDLj7I.mft (raw, json)
Hash identifier:          5iU745fxu82SLd4kO8udtxx5fZYqO+JAtTcrzNrxups=
Subject key identifier:   64:B5:AA:FE:8C:ED:1D:B9:5A:E4:AC:2B:4C:AD:2B:61:93:AA:36:15
Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
Certificate issuer:       /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Certificate serial:       01A08979CEBFCBB3E6D337FDBE563F16FA7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
Manifest number:          1A45
Signing time:             Thu 10 Sep 2026 04:00:56 +0000
Manifest this update:     Thu 10 Sep 2026 04:00:56 +0000
Manifest next update:     Fri 11 Sep 2026 04:00:56 +0000
Files and hashes:         1: 27iJL7tabeRZf9si2vPA81cwEnc.roa (hash: xWHsz8ye7DjPUgv12m50umXvY8HUT0fQ38UrVHv9Jwc=)
                          2: 6zmwp0Ty38xOLaz9dzA80B6hzAM.roa (hash: OlOuB/7WZRu3jgahb4J4hkXzTMRNqdoXbJ2s7Ooyi+Q=)
                          3: JYYj7MjcuRPRAiipRgqG5mDLj7I.crl (hash: DKS8VFuvuq9cDt3uUKYH9XE17rx8Qfd3onB+xxx+LlE=)
                          4: Txl_hQPriUVq_Buu0gTEPI2kg_g.roa (hash: svJCwy5lyL58vBvH80bdWo+cEP+N6WrO0t2/0pD94JY=)
                          5: e4fvp8yWlAX8buHeYzF-90rR6Bk.roa (hash: cr5m93AUTTeXzPXmKSQPnNEYJwCdKzbaLZUVJBf9U6g=)
                          6: ljr109WhqKfeYcH-MhSgPoSjR9U.roa (hash: RdTZwN02aq7Yl4Y75F8xayBDhsLyfJXGJDu35AD1V7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:79:ce:bf:cb:b3:e6:d3:37:fd:be:56:3f:16:fa:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
        Validity
            Not Before: Sep 10 04:00:56 2026 GMT
            Not After : Sep 11 04:00:56 2026 GMT
        Subject: CN=64b5aafe8ced1db95ae4ac2b4cad2b6193aa3615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:61:ed:eb:d7:29:fa:a5:af:88:20:67:be:19:
                    8e:8a:69:bb:a6:f5:27:30:d8:27:09:7f:9c:02:4e:
                    90:d5:09:18:24:75:46:e3:7e:5a:22:c9:25:87:1c:
                    56:b0:47:4b:44:fb:df:86:bc:23:e3:58:71:b4:56:
                    fa:28:34:72:7c:86:88:00:f2:75:34:48:88:e8:66:
                    e5:e3:da:f3:5c:65:63:0a:1a:b4:fa:1e:25:bd:d1:
                    70:9d:fd:c0:09:c0:84:e0:38:66:55:5c:8f:f7:32:
                    f1:85:26:df:2e:b1:3e:51:0f:43:b0:ff:06:95:e4:
                    ed:b1:5e:f4:8a:72:09:1c:72:cd:62:45:39:b2:2c:
                    58:16:38:8e:54:1c:5f:32:9d:63:40:26:c1:eb:dc:
                    ae:5b:36:54:2b:93:1c:5e:b3:25:3c:b4:72:7a:ce:
                    05:40:fb:a6:36:5d:20:d0:ee:25:5d:29:4a:d4:e3:
                    d4:7e:fe:f5:5b:49:5a:44:d2:04:98:03:c1:57:81:
                    fa:48:66:81:e6:eb:84:71:9d:70:52:3d:87:e1:2f:
                    2d:5d:e0:65:a3:76:05:1b:1c:a4:9e:4c:0b:75:5d:
                    c0:c2:1d:e1:d9:e4:9f:a1:5b:d0:8d:f3:86:2e:95:
                    11:30:ec:e5:e1:04:fc:d9:b2:c0:52:91:f1:9b:b4:
                    93:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B5:AA:FE:8C:ED:1D:B9:5A:E4:AC:2B:4C:AD:2B:61:93:AA:36:15
            X509v3 Authority Key Identifier:
                keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:dd:32:91:48:eb:71:cf:e8:96:e5:ee:bb:94:68:49:f9:23:
         4b:e6:33:7a:25:0a:43:e0:bb:6c:23:10:98:51:40:7d:8d:85:
         34:c7:0b:9a:43:55:e3:35:d1:f9:d6:f3:35:a0:d8:f7:16:54:
         8c:73:35:25:10:27:22:51:9e:f6:71:40:7f:c7:31:6c:d5:7d:
         4f:d0:ba:9c:09:37:cd:f7:c3:41:c5:91:49:15:2c:3a:c4:61:
         39:39:19:75:90:cc:44:8b:3d:da:40:58:98:82:a6:1e:f5:a7:
         ea:7f:4b:76:22:59:a9:58:ea:4a:0c:7b:a1:7b:41:70:b4:fa:
         00:a2:db:7e:f6:ac:0a:af:01:b5:b0:bd:45:c7:ad:6e:98:ee:
         3b:38:63:d9:20:69:5e:fa:0a:11:ca:50:29:d5:45:9d:38:f4:
         c5:94:28:2a:c3:d5:76:4d:e8:1c:6c:a3:43:6a:da:25:36:bd:
         47:60:e5:a2:23:75:7a:aa:e2:01:bc:66:c7:99:3f:3b:15:fd:
         69:1f:6e:6e:3f:3d:ac:53:24:cb:77:39:ee:9d:1a:83:28:b0:
         88:01:72:c7:99:90:cf:f8:cc:fc:bd:f8:ca:d9:8b:7e:39:41:
         7b:b8:ab:a4:55:8b:9b:78:bb:75:bd:b8:3a:84:d8:ff:92:d3:
         08:fd:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:17:32 2026 by rpki-client