Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
File:                     j9-HylMGV5hEdkUlX4KbU7wdohU.mft (raw, json)
Hash identifier:          C7nvrg0q9Lo97WACECuqXytBJHuG8TWCOw9MAEmn+ZI=
Subject key identifier:   C9:E2:C4:F2:CE:9D:C2:93:CD:F3:56:E0:0B:40:9F:00:25:2B:AE:B4
Authority key identifier: 8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
Certificate issuer:       /CN=8fdf87ca53065798447645255f829b53bc1da215
Certificate serial:       01A0393908669F3869E6DBDA2E769006B609
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
Manifest number:          0969
Signing time:             Tue 25 Aug 2026 14:00:33 +0000
Manifest this update:     Tue 25 Aug 2026 14:00:33 +0000
Manifest next update:     Wed 26 Aug 2026 14:00:33 +0000
Files and hashes:         1: aiNfAtwLgUKsL4qA7akVZhQU1bA.roa (hash: Hw2VjFxuxUBTnIvwm5B0o1nhy9vvmSj+hAxZVQnZIws=)
                          2: j9-HylMGV5hEdkUlX4KbU7wdohU.crl (hash: qEDxIETeVmL3rjFnevwh+/dZJ8kjk9f9kw98fN6Ex88=)
                          3: wRelCGO5kr4PionuAw4TmZeTb24.asa (hash: R4hwvYPLQTU3+ZW26hz18/RfC35G0WghkbbOHFf/yeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 14:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:39:39:08:66:9f:38:69:e6:db:da:2e:76:90:06:b6:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fdf87ca53065798447645255f829b53bc1da215
        Validity
            Not Before: Aug 25 14:00:33 2026 GMT
            Not After : Aug 26 14:00:33 2026 GMT
        Subject: CN=c9e2c4f2ce9dc293cdf356e00b409f00252baeb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:47:71:cc:65:77:20:0a:a4:6c:3c:bf:08:5f:
                    99:a4:29:8f:03:71:34:33:00:19:56:c4:36:e3:cf:
                    ad:77:90:1c:68:98:36:e9:ce:83:fa:78:b3:4a:9a:
                    91:d0:83:70:11:49:47:65:d5:7f:81:fd:4f:73:7e:
                    44:c0:85:f7:12:75:ad:a7:8e:ee:43:3a:de:d7:54:
                    4d:86:a4:89:35:dd:08:79:de:70:a6:7b:86:94:6f:
                    6e:f7:ec:e9:b9:be:9a:d0:6e:43:05:87:68:be:09:
                    a8:ac:50:12:d2:6b:39:39:b1:79:04:23:6b:4c:42:
                    c7:36:1f:f7:67:7c:c9:60:90:6b:e2:f7:cb:ef:53:
                    ce:47:4d:01:79:23:83:ac:c4:e5:b3:66:a8:39:f0:
                    d7:50:b6:60:d2:64:a7:23:4d:a2:97:fc:f9:12:f5:
                    94:9d:5a:34:d6:41:14:87:fa:67:60:3e:e2:db:b4:
                    f8:cd:bb:c1:f2:54:68:d7:67:fc:de:e1:8f:f4:0a:
                    f7:2c:40:de:b9:23:9d:6b:2f:bb:93:d4:7b:52:74:
                    9a:d3:93:da:28:cc:43:e0:42:b5:2d:45:7b:56:77:
                    fc:4b:4a:f1:d8:1d:35:34:7c:d5:2f:a0:91:e0:a9:
                    49:28:c4:67:fd:9b:20:d4:eb:2a:ae:9e:c8:f4:50:
                    89:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E2:C4:F2:CE:9D:C2:93:CD:F3:56:E0:0B:40:9F:00:25:2B:AE:B4
            X509v3 Authority Key Identifier:
                keyid:8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:95:7e:0d:a7:39:b5:5c:f1:f7:51:ef:22:35:92:f0:ad:8e:
         63:d9:3c:f2:b6:82:c5:f1:89:41:f8:61:1a:e4:04:26:dd:49:
         b1:5d:32:fb:6d:f6:af:b5:2f:ee:1e:e1:d1:5d:f3:b1:18:07:
         e1:95:ae:9e:c1:5b:0e:d8:61:8b:d4:de:dd:95:95:02:ad:6e:
         ae:30:92:88:00:09:37:94:d3:cb:35:17:49:68:64:22:77:8d:
         04:48:b6:99:d0:3a:05:64:9b:7f:ff:dc:96:64:04:5f:34:f7:
         c6:b3:a8:bc:07:37:c0:48:0b:0d:a0:cc:09:52:da:16:e3:15:
         c4:a0:bd:1d:4d:11:72:5f:45:11:bc:48:f9:27:e2:71:96:f5:
         31:42:9d:ce:52:07:c2:5e:06:d3:d2:7b:3d:b9:26:15:10:fb:
         c3:73:b5:de:f9:05:aa:a2:17:bf:4d:2b:02:89:9e:3f:e5:c9:
         ba:a1:ba:96:31:0b:d0:85:50:c4:36:81:28:c5:0a:33:0e:d9:
         75:6d:83:e0:b0:79:13:f8:9a:6f:81:03:37:ce:81:9f:94:ab:
         a5:cf:f0:1f:7c:b0:08:a3:58:3f:9b:8a:90:0f:2a:d5:15:60:
         eb:09:e5:fc:0b:fe:ff:f8:d6:53:8f:8a:55:55:94:72:ee:0e:
         c4:b6:db:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 00:43:14 2026 by rpki-client