Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File:                     jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier:          N5MkS6BqpegVvzV+1tAOlVfu9opH73HhH6WOmU2gdho=
Subject key identifier:   AF:90:F5:22:31:75:37:D8:94:21:D3:84:5F:60:08:19:01:6B:16:95
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer:       /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial:       01A0028213D593E66D57D7C6DEC856391090
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number:          1A2C
Signing time:             Fri 14 Aug 2026 23:01:13 +0000
Manifest this update:     Fri 14 Aug 2026 23:01:13 +0000
Manifest next update:     Sat 15 Aug 2026 23:01:13 +0000
Files and hashes:         1: 5RrePjfBfgFsb1dfhghTvm6VuXQ.roa (hash: kBSyv/KZQ0qJXn8NAa0tIDmtlcQIduDFV8hiLoM2Mcw=)
                          2: 9XXmMNy-VHJ0PLsbfxTeybE0OHk.roa (hash: tv89A0XeQybFhGlMxmSOiFsbHBh2Q6fNjP2cbql77Wk=)
                          3: EFOJ5hBQeND6qpOwej-hMBPDrb4.roa (hash: 64pmfHtYGatuKBycpEHQu6TCsuyqMwyKSXfipltHlOU=)
                          4: HMYMrzVLN168eCAt_VV9QEMc1vE.roa (hash: WNkIhTv4maTJmnFA0xAIC09aoeLQEEiiGXxq3HqPXJ4=)
                          5: WUu3HDK7_b9UY0uEWE1eCFmRxi8.roa (hash: vFNR8Uj+MyPWrDQ7TG/uWi1P+9M7J9xGwepHob8miIw=)
                          6: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: KpTWVEJBrFVp4ZMekFwirMuLutXS/lE/d7KcAsxXr9o=)
                          7: nJ7N_QAqwTZAZdT0YkSUpJyKqPU.roa (hash: bO16KmSqrJMMMxqy56go6I9tZ7emzSjvu3bgctCivCY=)
                          8: qpb9tX8sfLyt6D276zZ0qYuN9GQ.roa (hash: bRF4+8TUZLsEoI3KAZWa9IvCW2TSQ5hlcXoGFeSa3Vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 23:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:82:13:d5:93:e6:6d:57:d7:c6:de:c8:56:39:10:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
        Validity
            Not Before: Aug 14 23:01:13 2026 GMT
            Not After : Aug 15 23:01:13 2026 GMT
        Subject: CN=af90f522317537d89421d3845f600819016b1695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ee:7b:d7:57:8e:e5:e5:e4:06:83:98:ee:0e:
                    bb:9e:3d:ff:47:c4:2a:2d:f4:11:e7:93:93:7e:4d:
                    51:ce:84:cb:90:76:51:80:dc:ff:ba:1a:11:59:28:
                    f4:29:80:8a:42:88:49:52:14:22:f1:55:ba:f2:1e:
                    8d:b3:f1:2a:e5:d9:6c:37:52:18:9c:27:30:f8:47:
                    d9:5c:76:c0:1f:fa:81:c8:3d:ed:1e:30:1d:e1:b7:
                    88:8e:61:f4:e2:71:e6:72:ea:5e:7c:e9:7d:fa:f6:
                    52:d5:a7:67:6d:05:5b:2d:3b:5b:ee:95:e2:a3:37:
                    16:c4:80:1d:87:34:35:77:92:27:02:17:d7:5b:9e:
                    54:70:d1:d7:16:a2:b4:9c:5b:36:ec:8b:31:75:9b:
                    21:bc:df:06:3c:ce:9c:20:5c:c6:ec:d0:c6:bf:86:
                    f7:e8:ab:f4:60:ba:55:5d:65:50:74:2f:85:e3:08:
                    2a:6b:45:4b:31:69:f3:95:3f:95:69:86:0a:b7:11:
                    56:e0:b5:d1:41:5d:60:a1:22:fb:3d:e0:d5:10:64:
                    79:fb:52:36:0e:ee:6c:26:a7:aa:1b:00:99:60:e5:
                    6d:d3:a5:ca:ea:e0:98:41:50:92:d7:2b:c6:9f:b5:
                    b5:27:45:c3:d4:f7:21:72:16:7a:82:01:56:20:d4:
                    1d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:90:F5:22:31:75:37:D8:94:21:D3:84:5F:60:08:19:01:6B:16:95
            X509v3 Authority Key Identifier:
                keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:fe:0b:86:25:53:05:7a:20:9c:03:8a:71:41:b4:57:0c:ba:
         11:56:aa:37:02:8c:3a:f7:56:ff:e3:31:55:6b:1a:04:45:10:
         84:5c:d6:56:ea:71:4a:ff:c9:61:ab:be:74:a4:e1:c4:fd:37:
         bf:8f:c2:fa:f0:b7:21:df:30:9c:86:7e:cb:0e:91:a7:b3:12:
         70:47:cf:b1:40:dc:ac:4b:9e:6e:b3:00:95:1d:b6:7e:00:a1:
         3f:82:c7:50:6e:eb:2b:a9:60:7f:d3:42:fc:43:b7:e6:29:6b:
         75:bf:78:b7:05:09:91:57:d8:04:ef:2e:a3:46:9c:9d:81:72:
         3d:bf:15:6a:9c:ea:78:81:5e:2c:73:9f:96:2f:fb:2d:44:94:
         84:fc:d2:ff:69:79:9e:f2:8d:2e:12:60:9c:95:81:c7:5c:77:
         ee:a8:5a:dc:b3:b5:f8:86:49:d7:95:20:7e:36:19:d4:41:22:
         ef:4f:13:61:7d:7e:33:25:54:40:be:72:52:63:74:31:d6:31:
         63:b2:eb:05:ed:a6:48:4a:db:c4:d4:39:3b:8d:cb:1e:c1:ef:
         94:15:76:7a:b3:75:5f:4b:5d:94:77:d5:68:40:48:be:92:92:
         2a:49:3c:e8:fc:ae:df:60:20:d3:e1:1f:12:40:eb:64:2d:3a:
         93:75:30:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:49 2026 by rpki-client