Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
File:                     Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json)
Hash identifier:          /d5cH2UU9uqO1cdviNcA99aR9/SFov2uA4pph9fKQYM=
Subject key identifier:   83:AF:F9:32:70:E8:E3:6D:B4:00:A7:9E:68:DE:68:03:D6:0A:F4:60
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Certificate issuer:       /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial:       01A00281FFEC3CD280C78E354984EDE68D07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 23:01:09 +0000
Manifest this update:     Fri 14 Aug 2026 23:01:09 +0000
Manifest next update:     Sat 15 Aug 2026 23:01:09 +0000
Files and hashes:         1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: yuefgVqB2fXQLrhSgg2UxfG7TWKYniPk1R9WhHj5yjM=)
                          2: e-pIqroMx8ktOvBXKbMUSY489PA.roa (hash: zD2XKbyMKOBSm6Gik/HGW9BbJtz+ToLcLdq/4K8Rj18=)
                          3: tg82jIBHH5LcgWYYM7zJbYrlVt0.roa (hash: n6rCSA1xOIDb4YmG15TQjoYexybekFDUsJodZaNLnM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:ff:ec:3c:d2:80:c7:8e:35:49:84:ed:e6:8d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
        Validity
            Not Before: Aug 14 23:01:09 2026 GMT
            Not After : Aug 15 23:01:09 2026 GMT
        Subject: CN=83aff93270e8e36db400a79e68de6803d60af460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:81:ea:a8:24:d7:b8:16:6f:2f:77:a3:10:72:
                    54:37:d8:ef:b0:38:a7:b3:db:e8:d8:99:9d:03:79:
                    d3:cc:ca:62:32:43:e4:1e:a6:90:52:90:33:ba:5f:
                    20:f1:97:99:ee:a2:5e:9e:6a:d0:b5:e1:97:63:9c:
                    79:ec:ca:cc:bf:6a:fa:0f:0a:e9:ab:3b:9c:93:05:
                    b9:85:82:cc:64:1f:43:48:e0:9b:7a:ef:9a:3b:99:
                    ae:f8:0e:d6:67:da:0e:4c:de:37:75:51:f9:57:11:
                    08:80:2b:b6:1e:bf:7f:b0:11:0c:cf:6c:14:37:80:
                    b7:69:76:66:ca:78:6b:1a:e7:38:8f:83:d8:75:ea:
                    61:de:62:84:10:64:ff:86:e5:2e:b4:24:d1:8e:51:
                    2f:bc:f0:d5:92:e9:1c:10:1f:42:c8:ac:8b:2b:7d:
                    a1:e0:a4:b9:a4:a6:56:e8:68:44:d6:66:02:b4:e0:
                    04:55:cf:9f:72:0d:fb:5e:3d:6d:6b:71:0d:a3:e7:
                    c4:86:88:05:08:63:46:3c:a5:cb:b7:e7:76:5e:51:
                    b5:36:73:e3:12:d9:3b:67:56:3e:9f:18:ec:7a:77:
                    e5:f9:b9:21:ae:dc:e4:90:84:60:27:c0:a4:5b:1c:
                    81:b1:23:60:a7:6f:81:af:e3:b5:05:59:2e:c0:19:
                    09:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AF:F9:32:70:E8:E3:6D:B4:00:A7:9E:68:DE:68:03:D6:0A:F4:60
            X509v3 Authority Key Identifier:
                keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c6:02:2e:96:c4:93:82:09:01:35:ac:94:85:da:ff:27:c8:
         59:b9:bc:c9:92:17:82:9b:81:64:13:ed:7f:35:23:d1:28:ff:
         73:1d:e4:eb:7d:72:90:b1:e9:21:9f:a8:8e:38:e3:86:5a:16:
         71:89:b6:2e:4f:0b:86:42:be:b9:42:f3:1d:ef:f2:9b:2d:78:
         17:12:3c:1c:c9:28:35:44:79:35:38:53:a4:85:c4:17:85:85:
         5c:88:86:ba:62:3b:cb:83:97:1d:62:47:68:4f:5b:84:fe:8a:
         41:a8:d2:f0:ef:9a:6e:ec:8b:21:e4:0c:5b:63:1f:3f:30:9f:
         c1:4d:4e:c7:9e:8c:9e:9c:c3:9a:a6:63:23:70:d0:b8:17:8f:
         11:5d:51:1a:42:20:ed:5a:41:0c:ce:5f:fd:e9:77:d2:8f:3c:
         dd:dd:55:5a:65:1b:73:40:33:f9:11:2e:62:c3:5d:dc:4f:65:
         38:bf:e4:d1:5f:e2:24:b5:62:fd:99:52:b9:c4:3d:f4:3a:c1:
         57:8e:84:41:ef:86:96:44:c0:0b:59:86:20:f3:ea:59:2b:76:
         ca:0b:3a:c8:a4:aa:49:f9:4d:5c:b9:9f:1c:37:b7:2b:9b:fa:
         54:30:5a:45:17:36:33:0b:18:64:d1:46:2c:f0:95:e7:7b:a4:
         93:10:bf:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:32:05 2026 by rpki-client