Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
File:                     JgGttY6Dyu5nXc94lUugiqkwGg4.mft (raw, json)
Hash identifier:          s9KdLE1iWQSHTqABEWHdggLG7phwdykhXjkZTN2opHg=
Subject key identifier:   A3:81:FA:87:21:2B:1B:73:A1:E1:71:15:82:D0:49:EC:AC:CE:78:B2
Authority key identifier: 26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
Certificate issuer:       /CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Certificate serial:       01A1A4B7608723F45C7D75FF5286724877F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
Manifest number:          0B4A
Signing time:             Wed 04 Nov 2026 04:00:43 +0000
Manifest this update:     Wed 04 Nov 2026 04:00:43 +0000
Manifest next update:     Thu 05 Nov 2026 04:00:43 +0000
Files and hashes:         1: 2l98OJUUaR9ta-P_Yl3BL25xX6E.asa (hash: epA5OEpKpO6J6HOrXhbe4eK7JMJAieEm7djq/rBNlXc=)
                          2: JgGttY6Dyu5nXc94lUugiqkwGg4.crl (hash: ih7ZAkciq3/Cp8bfh4QFii063dfA43hKWla8zuvivo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a4:b7:60:87:23:f4:5c:7d:75:ff:52:86:72:48:77:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2601adb58e83caee675dcf78954ba08aa9301a0e
        Validity
            Not Before: Nov  4 04:00:43 2026 GMT
            Not After : Nov  5 04:00:43 2026 GMT
        Subject: CN=a381fa87212b1b73a1e1711582d049ecacce78b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:92:e5:f0:5e:32:90:8e:3d:ac:7d:1e:58:
                    dc:28:bd:2a:4e:d7:92:81:84:ba:e9:39:2f:21:00:
                    5d:ae:21:21:23:6d:05:63:aa:da:d6:b4:fd:b5:e5:
                    b4:06:60:f5:a2:75:d0:31:10:cf:17:c6:71:f5:77:
                    24:20:01:0e:20:04:3a:1e:c9:df:49:6e:f2:99:8a:
                    ab:4d:df:83:58:0c:f5:70:29:5e:37:e2:f8:a8:0c:
                    60:df:73:5b:2a:8b:cd:6e:75:1e:99:58:ea:27:31:
                    0b:04:1a:21:ef:10:b0:6b:dd:46:12:a3:49:bb:cb:
                    67:8a:69:56:1c:74:9f:88:36:56:3e:43:83:a2:c3:
                    67:e1:36:4f:45:08:52:0f:39:cb:0d:e7:0c:cd:18:
                    a3:46:33:90:80:c6:9a:36:e3:b4:e6:2c:d2:40:cc:
                    40:1b:5a:3d:b3:06:b2:1e:51:98:04:b5:44:46:64:
                    f4:3c:61:ea:89:65:b3:7f:93:22:a7:9c:60:7e:ba:
                    0e:82:58:e1:95:88:fb:42:2f:7a:c5:70:3c:a2:c8:
                    b1:d9:1f:19:26:77:6b:ed:83:c1:f2:34:ee:2d:fe:
                    2f:5d:0a:2a:81:31:0e:4f:98:0b:13:e8:22:c6:35:
                    51:db:23:ae:50:6f:38:b4:8d:a2:3a:59:04:1f:1f:
                    54:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:81:FA:87:21:2B:1B:73:A1:E1:71:15:82:D0:49:EC:AC:CE:78:B2
            X509v3 Authority Key Identifier:
                keyid:26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:04:22:71:9a:bf:27:b1:6c:1e:89:25:f7:5b:28:3d:2c:ae:
         ea:cb:3d:80:03:da:de:45:02:22:69:aa:7d:34:57:d7:00:5b:
         df:2b:e8:6a:1a:6e:5e:8c:88:90:5d:95:97:12:bc:a0:7b:0f:
         7e:65:96:b6:b3:86:f4:b8:47:3a:ae:c5:23:04:f6:22:fd:64:
         fc:5e:7a:0e:f1:d5:cc:58:0e:7f:fb:48:42:33:eb:d8:6d:c8:
         ea:ee:ee:f5:dc:87:bd:6e:30:9d:ac:08:42:99:71:9c:a4:3f:
         88:00:3e:10:e2:00:72:1d:ca:4e:48:51:23:dc:42:9b:9f:61:
         3c:ee:57:39:12:17:79:5c:8b:39:ae:53:43:cd:8e:3d:cc:48:
         a1:14:c7:e3:94:aa:29:63:05:ed:56:ff:a2:74:9e:64:cf:36:
         d7:6d:3e:45:79:3d:29:69:29:6f:ec:de:48:64:8e:df:b6:a0:
         bc:77:29:c0:a6:fc:47:33:8a:60:c1:32:97:25:bc:8e:58:b3:
         32:a7:f7:11:bc:64:44:dc:5c:5e:e6:2e:f4:a3:b2:ea:02:0a:
         cf:7a:88:33:28:b4:51:d6:da:fe:13:dd:c5:06:89:8d:f9:7c:
         7e:df:1a:a0:f9:fc:70:b6:8f:af:50:e7:45:03:22:c4:c0:0b:
         bc:2d:5d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:32:32 2026 by rpki-client