Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
File:                     _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json)
Hash identifier:          uHpxyAyG2Ed6v5j9rkBoVwBT//DicMaw50cSuC1lpFw=
Subject key identifier:   9C:DB:EF:2F:7C:EA:2F:38:CC:FF:89:A1:89:F4:F9:48:15:D6:3B:86
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Certificate issuer:       /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial:       01A1833E71B747B7589EA940AAA805007005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
Manifest number:          0930
Signing time:             Wed 28 Oct 2026 16:01:09 +0000
Manifest this update:     Wed 28 Oct 2026 16:01:09 +0000
Manifest next update:     Thu 29 Oct 2026 16:01:09 +0000
Files and hashes:         1: 1y_PVDrf292ypVubKlcfPa0VLTs.roa (hash: 0XpTQ3RyKshZ7qbm+aFTzxAKabtVi92GLDrjmKUXNmw=)
                          2: 4fg-sy7rSWNy5WiQ0bxk2W6GE9o.roa (hash: sBj1mmW9S9rLm3x6oh/b0GK+0Aox7He2vMF3BoCLssM=)
                          3: OzQYkhg3U6SPEppTB5KeCir3I54.roa (hash: pkZLPVt0U4vONG6pCB0IupbzzE3+kAThVfHoxE9CIfo=)
                          4: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: VHt9vrXoEB/BR7xUlLAVc5KWwtOUkc4lVb4peU6skgk=)
                          5: gy24Ea8BsuXB1XC8engI4KEXF4A.roa (hash: 2h0DlQ9bxyg8udmh82iK9dYgkvfs9qOrlDFcUWd8VWE=)
                          6: gzdL0sFbow4oKk4EDaQigF6YR8Q.roa (hash: 4PAEVvmW4MXMjw9QDDNLfFTVziTN0X8TybCtWVl8Bwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 14:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:83:3e:71:b7:47:b7:58:9e:a9:40:aa:a8:05:00:70:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
        Validity
            Not Before: Oct 28 16:01:09 2026 GMT
            Not After : Oct 29 16:01:09 2026 GMT
        Subject: CN=9cdbef2f7cea2f38ccff89a189f4f94815d63b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0e:75:c2:8b:5d:00:8b:3d:ea:0f:b3:f9:82:
                    b0:9f:ca:cb:f6:0e:d8:13:33:59:af:42:86:35:dd:
                    b0:a7:31:c8:b8:3b:65:d4:c8:b2:df:cf:17:88:7a:
                    d2:84:d6:07:64:1e:cb:51:10:d5:9f:d6:2c:83:ef:
                    6c:a5:09:d7:ad:3c:82:18:3e:30:f0:af:6b:b1:b6:
                    c3:01:77:7d:c1:92:df:f6:b9:02:cc:50:e6:ed:94:
                    73:0c:e6:93:3b:50:cc:46:01:bd:f8:37:17:d4:10:
                    0f:7e:ea:91:02:89:d7:08:9b:b0:18:2a:24:71:ed:
                    7c:69:ac:34:e8:90:4d:b9:65:aa:1f:ae:7d:ee:89:
                    70:45:c9:cf:5e:ce:79:4c:12:80:bf:26:5c:90:27:
                    88:24:8b:d1:cd:ba:36:ed:c4:d3:bd:1c:a2:2a:57:
                    9c:1e:e6:49:61:48:8d:a0:30:b9:be:84:2a:ec:6b:
                    46:9c:71:99:66:58:6a:e5:2a:45:2c:1c:1a:4c:c6:
                    02:03:ef:e8:d0:c8:50:0b:52:c8:06:25:b4:ec:73:
                    4b:08:fe:16:cc:48:43:b6:b9:8c:ac:61:da:61:08:
                    03:c3:24:c7:0f:63:db:fe:bf:b7:c5:36:54:e3:76:
                    26:94:d0:de:33:35:d2:ee:d2:5a:47:7e:8e:1c:a7:
                    67:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DB:EF:2F:7C:EA:2F:38:CC:FF:89:A1:89:F4:F9:48:15:D6:3B:86
            X509v3 Authority Key Identifier:
                keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:3e:b6:b5:e2:88:7a:2f:f0:9f:28:30:73:85:78:95:93:92:
         ff:c8:1a:67:76:de:b6:8e:6f:b1:f4:0d:3d:ac:c0:01:37:b6:
         9e:93:20:83:ca:a6:2d:39:05:3a:ee:e5:06:fa:43:5d:03:a8:
         42:6c:6f:01:e6:7f:22:fc:38:0e:33:c5:6d:f0:77:2b:d3:04:
         74:61:d2:56:0a:88:f5:16:54:1a:ae:f3:56:f8:72:62:c8:56:
         44:10:d7:e5:c8:d5:c5:de:3a:02:97:39:b6:ce:95:8f:10:c6:
         f1:9f:c5:3f:f4:51:6d:b8:d0:32:56:4b:3e:ab:99:ef:ad:6a:
         7f:e1:9d:2f:7e:b2:18:4f:1a:f0:1a:43:2c:01:fe:73:dc:fc:
         00:b2:cc:2d:5d:53:d3:49:9d:bf:f0:c4:d1:da:f3:ad:a3:f9:
         90:4c:61:72:97:92:a8:27:2e:1a:51:77:8f:d1:7f:eb:d1:43:
         de:b6:0f:fb:97:97:86:ef:e9:b6:8a:7c:d0:06:b7:60:11:0a:
         ca:e4:b3:12:4f:ef:6f:37:1d:ed:a3:46:fb:a5:6d:0d:1e:d4:
         38:fc:f5:38:84:1a:64:02:56:a7:b1:7f:dc:ba:15:92:54:66:
         21:e3:a6:f1:0d:bf:af:3a:b6:d4:75:fa:88:4e:cd:22:43:7f:
         bc:75:b4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:43:24 2026 by rpki-client