Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
File:                     ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft (raw, json)
Hash identifier:          Y1PBR0e8Ms61tzRt+gow5aLesXtQcs5OrY4ZwsaV5m0=
Subject key identifier:   00:FA:84:D3:73:99:F8:A6:3A:59:17:02:36:1C:74:C0:FF:9B:61:F2
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Certificate issuer:       /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial:       019FF5A24F146C5A11EBE02285D3B6B9991D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
Manifest number:          1A0A
Signing time:             Wed 12 Aug 2026 11:01:22 +0000
Manifest this update:     Wed 12 Aug 2026 11:01:22 +0000
Manifest next update:     Thu 13 Aug 2026 11:01:22 +0000
Files and hashes:         1: 6osyBEyP0HcSM0NQyBHIvRn1Fhk.roa (hash: hglwRwFDDllYX9jYTjK+3ZWKDlBPRVFz/hfeMX7vQ4o=)
                          2: JauiIPMakXs-XxyLaWxO0rjIw8E.roa (hash: iXxbDtozEsteNQ9atnfu+OC8ptchPtG62ieHNq3ckVI=)
                          3: Ote8Xple36NOljGpswnBnv1BVHg.roa (hash: 7PcKnm0HqFWloTnBPRiK0Jc5QCuqif0gaeoULdBF7ck=)
                          4: cKqvG9BsZG6su7we84q3E8DeV-0.roa (hash: yebnJKVbgSkS4D7E+ORpv+scwNkFgxpLo5cTVCzh2rI=)
                          5: jYL_MHWzxB2OX15Vxs1hmwy4NzY.roa (hash: VfRhELdR7icqL4aOULnTdK+xLakSZDUjVfSg/1rTQ3c=)
                          6: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl (hash: oQQAP+3tdsiJxpFhufL3lWv8dkcDyyqVxDeCwtOmr3M=)
                          7: vsAq2ox79fGO3Ta6QC_1orZGKIY.roa (hash: 11wmgbpdweQHKnUalimrWFHED8Za8q31JapGPV4qcP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 11:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f5:a2:4f:14:6c:5a:11:eb:e0:22:85:d3:b6:b9:99:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
        Validity
            Not Before: Aug 12 11:01:22 2026 GMT
            Not After : Aug 13 11:01:22 2026 GMT
        Subject: CN=00fa84d37399f8a63a591702361c74c0ff9b61f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e2:d9:31:cb:cc:ee:48:33:95:a3:4d:54:fc:
                    f1:1f:6d:bb:2d:46:f5:ee:5b:9c:24:60:c4:f3:f7:
                    74:c7:97:30:73:55:9b:b6:15:8f:90:c6:6f:7e:c3:
                    51:43:77:1b:1f:eb:d7:8a:4a:4e:48:8a:8b:12:4d:
                    1e:e9:9c:ec:9c:98:ad:92:d8:9b:1b:46:61:d6:01:
                    90:99:f4:4d:29:83:f4:e0:96:a2:fa:f8:be:a6:58:
                    6a:57:6e:b4:37:cc:ff:84:b9:0d:0f:b4:56:38:b3:
                    b0:d2:a1:6f:1c:23:56:9c:a5:51:fb:b9:56:4d:ef:
                    19:2f:88:47:f0:61:68:36:05:0f:a2:71:5f:7a:b2:
                    13:c3:17:bd:66:a9:1a:5a:c8:ad:f8:06:57:d6:b7:
                    5e:63:da:d0:23:f3:17:c5:ba:e9:6e:fb:5c:c8:01:
                    a9:3e:c7:25:29:46:99:87:69:cf:32:66:5d:e1:60:
                    2d:06:fa:b7:e9:80:a4:3a:15:99:1d:1b:43:1e:da:
                    0e:5e:4d:32:d4:6c:fc:ad:92:22:07:4b:f3:62:e1:
                    ef:1f:8d:03:fa:a8:11:92:c4:d3:ee:7a:b4:c1:f9:
                    26:1f:fd:87:18:d7:e2:3b:11:46:3d:64:6b:7f:30:
                    48:6f:ad:f5:a9:62:8f:54:cb:4a:57:2e:9d:fd:f4:
                    2f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FA:84:D3:73:99:F8:A6:3A:59:17:02:36:1C:74:C0:FF:9B:61:F2
            X509v3 Authority Key Identifier:
                keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a6:db:ca:34:95:3e:a3:63:5f:72:46:e0:1f:8a:dc:e8:41:
         3d:6d:77:c3:87:9c:22:21:af:a1:f0:e5:d0:d7:1f:db:27:0d:
         51:f2:e6:69:33:41:ba:c2:ad:7f:39:e4:77:69:57:15:2f:3a:
         19:45:b2:da:0b:02:01:a0:07:6b:94:81:5f:c1:19:4e:b2:fb:
         82:0a:dd:ba:15:5f:db:b3:b7:da:c4:3a:9c:cf:dc:82:73:c8:
         dc:9d:e4:e1:71:8b:20:48:1d:02:39:05:3e:45:10:df:a7:63:
         69:cf:a3:77:5a:23:7d:f8:16:b1:04:24:5e:ea:95:39:6c:b0:
         fb:c2:ff:95:74:e5:e8:1e:3a:d1:17:81:b9:d4:7c:ef:c8:4d:
         09:2f:06:eb:22:4b:4b:d1:e9:71:4e:89:e0:c2:8b:a9:95:e6:
         34:2e:dc:a0:3f:4b:60:89:42:29:0b:25:c9:53:43:ba:f5:0d:
         bd:3b:50:5d:51:db:60:21:40:7f:8c:5b:ce:c0:48:08:b2:e6:
         8e:65:71:42:65:8f:b7:8f:fb:ec:44:5a:ef:99:80:d4:95:eb:
         af:bf:25:b7:f8:7a:94:17:25:64:d5:56:2f:f8:94:0e:8b:ff:
         7d:4e:e8:fa:19:ac:52:4f:d0:29:61:c7:d0:4c:bf:66:e7:4c:
         d4:c3:73:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:29:34 2026 by rpki-client