Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
File:                     ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft (raw, json)
Hash identifier:          eBzMasNvksmKYwKKFkINwR6x5A7IcJHNrZ71HQE3Xy4=
Subject key identifier:   6C:44:04:FC:AF:D5:CB:3B:AE:7C:8B:CB:92:5D:9D:73:80:FF:4C:4B
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Certificate issuer:       /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial:       01A0F29E8F2AF9FA898502B7B5EF53D61F9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
Manifest number:          1A8D
Signing time:             Wed 30 Sep 2026 14:01:12 +0000
Manifest this update:     Wed 30 Sep 2026 14:01:12 +0000
Manifest next update:     Thu 01 Oct 2026 14:01:12 +0000
Files and hashes:         1: 6osyBEyP0HcSM0NQyBHIvRn1Fhk.roa (hash: hglwRwFDDllYX9jYTjK+3ZWKDlBPRVFz/hfeMX7vQ4o=)
                          2: JauiIPMakXs-XxyLaWxO0rjIw8E.roa (hash: iXxbDtozEsteNQ9atnfu+OC8ptchPtG62ieHNq3ckVI=)
                          3: Ote8Xple36NOljGpswnBnv1BVHg.roa (hash: 7PcKnm0HqFWloTnBPRiK0Jc5QCuqif0gaeoULdBF7ck=)
                          4: cKqvG9BsZG6su7we84q3E8DeV-0.roa (hash: yebnJKVbgSkS4D7E+ORpv+scwNkFgxpLo5cTVCzh2rI=)
                          5: jYL_MHWzxB2OX15Vxs1hmwy4NzY.roa (hash: VfRhELdR7icqL4aOULnTdK+xLakSZDUjVfSg/1rTQ3c=)
                          6: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl (hash: cUe2nkROk+2TEvxfryIl8Qg08/jclfF8Sqi409oESP4=)
                          7: vsAq2ox79fGO3Ta6QC_1orZGKIY.roa (hash: 11wmgbpdweQHKnUalimrWFHED8Za8q31JapGPV4qcP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 14:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f2:9e:8f:2a:f9:fa:89:85:02:b7:b5:ef:53:d6:1f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
        Validity
            Not Before: Sep 30 14:01:12 2026 GMT
            Not After : Oct  1 14:01:12 2026 GMT
        Subject: CN=6c4404fcafd5cb3bae7c8bcb925d9d7380ff4c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:7e:4e:6f:33:2a:20:ed:fe:26:53:bc:fd:
                    23:f9:c6:0b:2a:06:18:4b:4c:dd:18:27:38:31:61:
                    e0:4c:b6:a4:e6:12:d9:32:d3:d5:0a:9c:54:5e:11:
                    e7:d2:06:02:fc:ee:8a:d5:7d:17:f3:19:5a:4c:93:
                    37:7b:23:f9:2c:33:50:e8:20:6d:69:1c:02:36:35:
                    01:c6:1e:5f:7a:93:49:ac:81:0b:50:e5:cf:5c:0c:
                    41:4b:42:03:0c:b6:62:0e:e5:76:9d:4a:ce:d1:66:
                    6c:0b:c2:8a:fc:40:91:1d:4b:44:dd:93:c4:16:bc:
                    b2:01:d1:ac:5d:6f:1f:cc:a1:ad:35:bb:00:4d:2b:
                    19:bf:23:eb:70:7a:f7:3c:54:c3:6c:b7:24:7e:91:
                    04:e0:4f:93:4b:79:21:f0:dc:19:b5:62:d3:f2:6b:
                    51:a3:69:66:fb:40:8e:14:cc:2b:7f:d7:81:bd:00:
                    d2:eb:9b:f5:40:22:cb:b1:8e:11:e8:c4:06:88:f8:
                    b1:09:37:6a:18:d1:32:16:37:1d:82:a4:8d:6f:7b:
                    e3:c2:74:aa:30:31:f9:26:47:ab:1a:c7:c4:fe:6d:
                    bb:4a:24:55:45:08:6d:c6:4f:ee:7b:f6:22:e4:0e:
                    42:ab:fb:49:9f:62:91:30:6d:22:f4:f1:44:f5:75:
                    32:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:44:04:FC:AF:D5:CB:3B:AE:7C:8B:CB:92:5D:9D:73:80:FF:4C:4B
            X509v3 Authority Key Identifier:
                keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:7b:95:89:97:0a:bb:c3:56:7a:06:f9:ab:cd:a3:be:90:aa:
         1c:ce:cd:e0:34:d3:f2:5b:59:c8:44:1b:a9:b4:be:e8:09:36:
         60:50:80:89:5c:24:3a:4a:3e:07:d7:8f:71:90:45:17:a5:71:
         db:be:fe:44:48:6d:6b:06:53:dd:fe:59:34:1c:3d:de:bc:43:
         14:87:79:4b:7e:cf:4b:ef:1f:9c:a7:0d:a4:c0:69:da:27:ed:
         22:b1:df:d9:3c:e5:bd:5a:51:ec:55:6c:a5:b4:24:e2:89:27:
         5d:45:84:45:ef:25:08:ef:63:4c:d9:2a:95:b9:8c:90:2e:34:
         94:26:84:cd:04:82:f6:cd:e3:b3:51:06:77:62:bf:3d:4f:41:
         34:dd:d4:34:9f:47:f2:f5:35:1f:c8:68:35:4b:10:97:f9:52:
         31:f2:63:2d:e3:6a:12:02:3a:55:ae:e6:b1:65:d3:20:26:c4:
         41:95:b3:9d:ff:ae:5a:4c:54:3d:56:12:e8:4b:6b:08:37:4e:
         5e:16:71:0e:1c:20:1b:30:68:11:61:85:24:91:29:e3:6d:9d:
         7f:f1:ce:3f:a2:a3:c2:dd:b7:09:e6:4f:82:fd:f3:37:9a:fb:
         3a:52:57:52:b9:42:05:23:3a:7b:9b:1a:b7:6e:56:5d:e8:ea:
         b6:17:86:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:03:20 2026 by rpki-client