Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
File:                     _JRi_vSVJI_b2XNCH96-IWJc3x4.mft (raw, json)
Hash identifier:          KVJwsJS53ucXN986c/dhfJu0slgBj21JvFNdkgMifw8=
Subject key identifier:   74:06:B8:F5:23:6D:C0:ED:29:17:D9:C0:F7:DB:76:99:FB:26:B8:F5
Authority key identifier: FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E
Certificate issuer:       /CN=fc9462fef495248fdbd973421fdebe21625cdf1e
Certificate serial:       01A14D99655CC3663FE1DDFF09DD5B32F65D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
Manifest number:          0BC6
Signing time:             Sun 18 Oct 2026 06:01:00 +0000
Manifest this update:     Sun 18 Oct 2026 06:01:00 +0000
Manifest next update:     Mon 19 Oct 2026 06:01:00 +0000
Files and hashes:         1: 8POUdXxydU2NWgTjMAS46lsReJU.roa (hash: NHxwG6zBnwiJw78rQkaCy5d/Y3YySuB1Lrikl1PrCTw=)
                          2: _JRi_vSVJI_b2XNCH96-IWJc3x4.crl (hash: G8Rb8sPFq9Wh7Pr7IfpW8pRW80Y4qRR4FGnvB7UNKDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 05:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:99:65:5c:c3:66:3f:e1:dd:ff:09:dd:5b:32:f6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9462fef495248fdbd973421fdebe21625cdf1e
        Validity
            Not Before: Oct 18 06:01:00 2026 GMT
            Not After : Oct 19 06:01:00 2026 GMT
        Subject: CN=7406b8f5236dc0ed2917d9c0f7db7699fb26b8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:93:af:bf:4a:f8:e3:ad:2b:d1:f9:2f:77:ef:
                    49:b2:3d:e5:44:7a:1f:4a:97:d6:df:f5:3e:12:64:
                    cc:7a:28:a1:3a:d6:a4:19:b5:5d:7b:ef:cb:5a:d4:
                    72:aa:93:af:34:d6:5a:14:ef:b0:fe:77:82:cf:6a:
                    9a:3f:78:17:66:7d:d9:0d:52:fb:bd:74:3a:98:e0:
                    6f:64:e3:44:56:55:73:83:e4:bf:92:a6:f2:2f:0c:
                    30:fd:35:7d:51:db:a2:ee:4e:a8:bc:72:1f:15:73:
                    59:f0:ad:e4:d5:ba:e5:5d:c7:15:a8:16:d8:f4:58:
                    af:a5:da:ab:f9:c3:7e:32:1b:d0:c1:22:96:ee:f5:
                    ac:db:51:53:7c:ff:58:82:fb:b0:78:e5:dd:a8:71:
                    ec:e3:c0:45:cc:e9:8b:27:3a:28:86:7c:a9:f6:dc:
                    66:c9:58:d5:4c:43:6a:18:78:a2:8b:3f:c1:68:23:
                    ce:ae:c2:bf:9c:44:db:8e:d8:f9:9a:48:9d:e7:ec:
                    6f:4a:04:15:d6:15:73:f3:04:71:6c:af:8a:a1:04:
                    dd:b2:22:7b:7b:6e:e7:c3:f6:6a:d1:24:b2:4b:30:
                    1a:b6:e6:ec:97:a9:f4:ba:a8:b6:e2:f5:6b:78:f8:
                    e8:4e:c1:93:13:b3:b8:22:6a:22:d8:3d:17:1e:de:
                    58:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:06:B8:F5:23:6D:C0:ED:29:17:D9:C0:F7:DB:76:99:FB:26:B8:F5
            X509v3 Authority Key Identifier:
                keyid:FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:32:c4:65:f9:90:8b:64:89:51:50:ca:8f:fd:a7:98:75:64:
         8e:6b:5d:b8:9d:5b:5d:47:36:cd:91:f4:77:26:1f:03:78:01:
         c7:37:1c:23:6b:0b:46:4d:ba:a9:a2:e9:9f:93:35:29:5d:ee:
         2b:90:8b:6b:d6:a6:b0:6b:2d:2b:99:3e:d7:ad:b7:ca:0e:81:
         dc:7d:cd:44:e2:97:ee:c1:06:fd:79:b9:47:0a:ee:19:e1:44:
         e3:38:eb:54:e5:30:94:35:c8:78:70:4f:97:64:5d:41:27:00:
         4c:2b:70:eb:4a:84:54:1f:66:da:e4:48:66:62:e1:de:c0:60:
         a2:26:1d:41:31:5c:03:71:b2:f3:7f:31:6c:3e:78:50:11:86:
         93:2c:da:f1:89:90:96:fa:a3:95:1b:03:bb:6d:e0:87:31:a8:
         bd:bd:7d:b1:58:17:fb:59:49:83:83:28:31:ef:56:59:97:f6:
         82:dd:28:3d:3f:6c:cd:d3:21:52:7a:78:dc:83:d5:07:23:19:
         26:68:bc:81:d4:64:5d:11:2d:f2:7c:96:ef:28:31:ae:6f:70:
         f9:d7:02:87:1c:16:04:67:2c:3a:29:e8:bd:0e:1e:49:47:2d:
         36:56:74:ac:c1:50:65:f6:96:5f:b4:f0:b3:cb:80:77:ae:3b:
         65:9c:8f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 12:54:04 2026 by rpki-client