Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.mft
File:                     jZxuhD_-fzS5XToM1y3Uq7abpCU.mft (raw, json)
Hash identifier:          RC2u8GLh3q/yI/K2+iaLtrjBGa9hN5h1oCw+4I8f/ys=
Subject key identifier:   59:55:53:15:6C:FE:CA:02:E6:6E:2B:E6:93:A3:8B:4D:F8:73:47:A4
Authority key identifier: 8D:9C:6E:84:3F:FE:7F:34:B9:5D:3A:0C:D7:2D:D4:AB:B6:9B:A4:25
Certificate issuer:       /CN=8d9c6e843ffe7f34b95d3a0cd72dd4abb69ba425
Certificate serial:       01A113A9CC9B4149BDA49C8C7EA259EC814F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.mft
Manifest number:          0108
Signing time:             Wed 07 Oct 2026 00:00:57 +0000
Manifest this update:     Wed 07 Oct 2026 00:00:57 +0000
Manifest next update:     Thu 08 Oct 2026 00:00:57 +0000
Files and hashes:         1: 5obrous7XUZitja1_hFFYlNQZ7k.roa (hash: NfULfmjDL7GL5S7q3lxZzNVHHsHI3SMrW1ODtOA3XQY=)
                          2: HYe7sVkhcA0-XfmeqjiB4IGETrY.roa (hash: wE+9P2a3reoKHkptwHKo9c9l79kAKhyB8j8AYkmyO3U=)
                          3: YFjZ7PDdgCtA2pIj93N3qBt_WLk.roa (hash: N4WC8IbaKS6Y1uAtos17ccb/a4w6H5ZTAuoZB9Rb3vg=)
                          4: ajFaZwTIdu3W6qUXInD2ZebB8Ko.roa (hash: WWyrqyz1eCJbRVCKQIKHhhIgeU4jmP2rAh23Pg0mu/Q=)
                          5: jZxuhD_-fzS5XToM1y3Uq7abpCU.crl (hash: hEkcq8D2h3+sq3EBf/4QfUIA6PBA93eNqXYWiqI3RUY=)
                          6: x86CTom7AXVfPVrzqqXjbrUQURY.roa (hash: VtlBuK8OxKd67U/IaQcXt0yJ5PAebcLvZF4N1BHaydo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:13:a9:cc:9b:41:49:bd:a4:9c:8c:7e:a2:59:ec:81:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d9c6e843ffe7f34b95d3a0cd72dd4abb69ba425
        Validity
            Not Before: Oct  7 00:00:57 2026 GMT
            Not After : Oct  8 00:00:57 2026 GMT
        Subject: CN=595553156cfeca02e66e2be693a38b4df87347a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:17:a1:dc:a3:8c:06:e3:83:ae:4e:9f:32:
                    a0:92:11:1b:f5:f5:17:04:3f:a7:6f:c7:01:68:17:
                    af:dd:75:41:b7:c5:42:5e:ca:10:a3:6f:d5:1f:a7:
                    17:bf:56:46:be:87:85:ea:97:5b:81:be:ea:af:02:
                    4b:4b:d1:f8:fd:5f:06:27:9d:20:50:3f:60:7d:41:
                    32:00:6c:01:39:3e:62:7c:42:be:cf:66:7a:a1:d5:
                    79:8d:ff:7c:87:7a:81:3b:56:59:25:ee:14:94:66:
                    2c:e4:ae:7f:11:05:fa:92:56:97:82:c5:c5:12:5b:
                    86:dd:ec:e6:a1:ab:bf:f3:33:e8:6d:5d:f5:05:75:
                    62:d1:81:03:38:54:db:d8:29:81:e5:bd:19:b5:db:
                    d7:65:5b:09:de:cf:f4:1d:d0:4c:6b:af:38:93:45:
                    a0:84:63:54:55:fa:03:fa:e7:ae:3d:e5:6c:8b:87:
                    86:46:ab:15:4a:c9:6b:c6:34:fb:69:cb:f4:73:9b:
                    2e:cd:d4:45:4d:7b:71:4e:6d:61:73:d7:c7:7f:d8:
                    17:fb:42:2d:d4:4a:d7:6c:fd:64:83:e2:c4:69:80:
                    6d:42:6b:a2:ab:3d:c5:b3:56:4a:f0:fd:ac:20:ef:
                    06:58:a9:3c:22:e1:9f:50:43:49:f3:c4:95:3f:04:
                    6d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:55:53:15:6C:FE:CA:02:E6:6E:2B:E6:93:A3:8B:4D:F8:73:47:A4
            X509v3 Authority Key Identifier:
                keyid:8D:9C:6E:84:3F:FE:7F:34:B9:5D:3A:0C:D7:2D:D4:AB:B6:9B:A4:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:df:ff:b3:37:05:84:1b:85:5d:13:8d:62:6e:64:81:68:f5:
         8d:9a:3b:d9:3d:1a:6b:c8:85:b2:7b:dc:d5:b9:bd:1a:3d:74:
         b9:08:1c:62:6b:0d:fd:b1:f5:9e:77:31:21:6e:93:c4:e3:69:
         3d:c7:75:6e:24:00:49:fb:56:9f:e4:7f:09:f2:26:37:05:5a:
         fa:a6:36:bb:92:df:e8:41:71:00:6f:ea:d8:28:c0:00:7c:bd:
         7c:4b:86:19:d1:2c:64:7b:a8:ac:b2:b6:ee:97:39:54:f7:81:
         c5:ac:ca:a2:bd:c4:60:df:e1:64:1c:75:dd:01:27:c9:31:a9:
         57:0d:e8:09:c2:1f:24:55:d8:aa:ec:74:dc:c9:7c:78:e1:d0:
         6b:4b:72:f7:47:2f:3c:f6:29:1b:b5:76:ec:b1:76:64:a8:c1:
         aa:5d:25:34:24:17:bc:04:f3:b0:fe:59:f4:a7:9a:e6:27:d7:
         62:16:b4:dc:79:6c:30:ff:1d:2c:83:ab:14:49:26:1a:38:bc:
         38:70:13:d7:58:3b:bb:38:c7:47:26:d1:0f:85:9a:f3:a2:21:
         97:04:8a:83:04:50:e4:bd:1d:c4:f6:ba:23:8a:48:83:60:d3:
         ac:ee:63:23:57:ee:88:65:d5:e5:fd:b1:eb:f4:b8:2e:22:a7:
         91:92:56:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 03:53:08 2026 by rpki-client