Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
File:                     Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json)
Hash identifier:          kgEpr+virmcc16HDhWc29uG51tcd0dvaE8n02zjAkLs=
Subject key identifier:   41:24:34:B0:FB:2B:0F:EA:0D:D5:94:90:B3:59:E1:54:DC:19:8B:A7
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Certificate issuer:       /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial:       01A0B5E4452D46B5EFF1D00E80B6DEE6708C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
Manifest number:          1986
Signing time:             Fri 18 Sep 2026 19:00:31 +0000
Manifest this update:     Fri 18 Sep 2026 19:00:31 +0000
Manifest next update:     Sat 19 Sep 2026 19:00:31 +0000
Files and hashes:         1: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: jVjinHDytB1mgLCUM0rR0meZyvdY6b4LawvL+jVqK4A=)
                          2: YdEKnNui8kZkJHSxbtIPmvbJjr8.roa (hash: 0ClyNA/E0qLCFvTgVmstwCaGn8TFoS5MPxpcfIn67MM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:e4:45:2d:46:b5:ef:f1:d0:0e:80:b6:de:e6:70:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
        Validity
            Not Before: Sep 18 19:00:31 2026 GMT
            Not After : Sep 19 19:00:31 2026 GMT
        Subject: CN=412434b0fb2b0fea0dd59490b359e154dc198ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f9:5f:41:64:11:31:45:26:bd:74:a3:dc:cc:
                    5a:1d:d1:66:ad:05:db:60:da:c3:86:9f:58:ca:d6:
                    c9:75:a2:17:56:70:6f:97:3b:cf:96:c4:71:ae:e8:
                    45:f1:38:38:73:c1:56:66:4b:1f:ab:ab:54:c7:50:
                    58:92:97:25:5b:9a:ce:17:19:a8:d0:b9:89:89:7b:
                    5e:53:a4:b0:e9:62:0e:cc:bc:03:bc:bb:e2:7a:15:
                    a0:41:f2:59:5a:7b:48:41:e1:72:05:3b:7b:ec:2e:
                    bd:bb:13:9c:be:84:7c:d7:11:96:19:c6:4e:d5:a3:
                    65:43:7f:b2:52:86:5e:53:a1:c0:a4:ab:67:50:c9:
                    5b:2c:cf:3b:32:9a:25:ed:28:d5:d6:92:ea:d4:2a:
                    29:75:23:57:d1:8b:ff:14:47:41:c0:e3:11:05:eb:
                    12:90:f3:9c:aa:c1:70:0c:21:cd:10:7b:97:52:de:
                    44:8f:ab:fd:25:77:ec:69:bf:be:b6:01:9f:43:49:
                    3c:31:fe:3e:ce:8a:dc:6d:77:2d:3a:a6:98:73:09:
                    25:f1:29:0b:c1:d9:66:ec:67:29:37:e9:85:73:79:
                    56:7d:79:65:65:e8:63:18:27:0a:80:c1:7d:fc:e1:
                    b8:f4:7c:0f:dd:ea:7d:46:e1:04:58:58:a6:16:95:
                    ce:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:24:34:B0:FB:2B:0F:EA:0D:D5:94:90:B3:59:E1:54:DC:19:8B:A7
            X509v3 Authority Key Identifier:
                keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:7b:9c:6a:b4:00:db:d4:c5:b4:3c:64:ea:ba:04:9d:f0:93:
         a1:2f:8d:db:57:ec:8b:f1:33:ab:0b:d7:7e:92:fa:d1:a4:cd:
         74:a1:d2:fa:a1:79:0f:41:e1:d8:43:c4:55:93:b9:b0:31:76:
         b4:ac:9c:19:72:90:52:9f:46:e4:1a:fa:1d:51:18:b3:53:82:
         e1:69:e3:4c:7d:61:f2:92:5c:2d:1c:91:2c:30:55:35:1a:71:
         6f:52:80:00:01:d4:14:d9:4e:b0:34:87:32:34:c3:d3:4b:c6:
         7f:be:e6:2d:07:92:7d:85:21:00:6d:54:ab:86:a9:13:01:81:
         c4:d3:ca:a0:20:15:1c:b4:34:81:e1:9f:4f:f0:bb:63:6f:35:
         4b:07:36:9a:ab:4d:12:bb:5e:ab:90:17:a2:9f:79:c8:2a:13:
         a8:36:78:e2:b7:93:da:a7:51:c3:b2:d0:8d:eb:75:ad:81:63:
         48:c4:23:98:ec:e2:3a:54:69:c2:d5:5e:ea:41:02:92:80:a6:
         1d:3e:f8:ef:9c:cb:92:07:ac:1c:d3:b2:ea:ab:2a:11:1b:ee:
         d3:d2:fa:dc:75:bd:fa:05:6e:90:2d:e7:0d:15:fd:8e:be:e7:
         12:a5:eb:d9:ba:ec:43:cd:12:c3:5a:dc:70:05:c3:09:fd:5b:
         bc:e4:e5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:46:53 2026 by rpki-client