Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
File:                     jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json)
Hash identifier:          z8oI64HWcHckSYC2xG4TI1Vt6wHthP/cLHS7bZG0RuU=
Subject key identifier:   36:94:04:72:51:BD:EB:14:0E:B1:29:B5:C2:22:1E:2B:15:06:68:E4
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Certificate issuer:       /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial:       01A153D288E2296987B3844151776F9031FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
Manifest number:          0B9B
Signing time:             Mon 19 Oct 2026 11:01:08 +0000
Manifest this update:     Mon 19 Oct 2026 11:01:08 +0000
Manifest next update:     Tue 20 Oct 2026 11:01:08 +0000
Files and hashes:         1: 6ckN970H7cpuN5SlW3wkVE1-uM4.roa (hash: 4RC2uU6qxyV9bc9Cvszgx0ISOMF1kgJvTGxyXOpdXhI=)
                          2: 6j9AVsDIcLErIkpn3X-eJeF1GGI.roa (hash: ZsMGjImkdIZH7VCwDNjWJbDGVpBmnhjQHnLW0jKIHBo=)
                          3: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: PHIF10AwLyWpfaVcST2LcIrpaleOzG7ohDwp9Oo+APs=)
                          4: yQpjhvw8i6e9KzrpvjEnSpkHzwc.roa (hash: tuojuZc92088axUvGHKz4onECSlWfJI0kA5M4lGnMdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 11:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:53:d2:88:e2:29:69:87:b3:84:41:51:77:6f:90:31:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
        Validity
            Not Before: Oct 19 11:01:08 2026 GMT
            Not After : Oct 20 11:01:08 2026 GMT
        Subject: CN=3694047251bdeb140eb129b5c2221e2b150668e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:ea:e8:ba:9d:c3:5a:19:75:66:78:f5:b0:
                    65:8f:c8:75:7e:15:99:a1:d3:2c:ad:38:af:7c:d5:
                    ef:05:b1:09:9a:96:7b:87:2f:3c:0e:2d:d2:04:20:
                    6f:9c:b2:e2:5e:31:a6:da:e6:83:bd:74:79:f0:ca:
                    83:04:01:24:05:06:d5:d4:06:58:c0:59:5a:53:bc:
                    7e:74:da:e1:11:9d:99:3e:8d:03:6a:32:b4:ed:42:
                    5a:bd:54:70:60:8c:86:3d:9d:2a:bc:d5:9c:8a:be:
                    a9:01:ae:1e:af:1e:51:28:37:1a:b0:e9:e3:0f:e8:
                    bd:e4:ab:84:fa:18:69:06:fb:56:49:d9:4a:b2:10:
                    94:20:d7:45:2e:ed:56:b6:a4:a6:ae:04:b8:34:d1:
                    7a:09:b5:14:c7:10:f0:c5:b7:45:d2:81:e0:f3:f6:
                    7c:92:b9:1b:74:ae:83:cd:ec:5d:fd:42:80:44:5a:
                    e5:27:c3:df:c1:98:f0:91:5b:32:8a:14:ea:87:52:
                    d0:f3:00:22:55:ed:ab:de:6b:ef:46:ce:ac:a8:e3:
                    04:bc:06:86:07:28:ba:95:d0:74:23:d0:aa:8b:c8:
                    da:4f:44:85:e0:a0:f0:39:56:4f:78:a9:d2:71:8e:
                    72:73:cc:c4:20:37:cf:ff:32:85:8f:6d:e1:d6:92:
                    d5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:94:04:72:51:BD:EB:14:0E:B1:29:B5:C2:22:1E:2B:15:06:68:E4
            X509v3 Authority Key Identifier:
                keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f5:64:aa:e2:45:89:0d:78:64:7e:2d:4a:ca:82:50:21:1a:
         c9:80:96:04:6b:32:72:69:3d:a8:00:dd:77:55:9d:58:3f:1a:
         41:40:95:fd:77:fd:1c:0c:2a:95:13:8c:9d:85:72:fa:67:cf:
         5b:16:4a:dd:b8:bd:53:71:8e:7c:36:0d:c7:4d:40:23:e8:e3:
         e6:bf:cc:25:85:69:6f:d9:2c:47:63:d6:18:7a:b2:9d:1d:5a:
         f9:e4:02:9a:7e:3e:e1:78:f1:aa:39:e8:16:ed:8f:7b:d2:82:
         40:c9:a8:96:6b:da:0f:45:d0:d7:29:36:fc:71:4c:c7:38:7c:
         f1:c9:fd:04:b0:71:bc:81:d3:4a:70:7b:2e:60:48:f5:ff:0d:
         76:02:aa:d7:0d:c0:64:e6:52:35:c7:a9:bc:09:f2:2b:06:d2:
         ba:64:e6:60:2b:f0:8d:c7:ff:17:88:7f:f2:5a:0a:a9:8f:3f:
         c6:e1:d3:51:88:e6:cb:dc:33:e3:f0:d1:4e:a0:fe:e3:31:64:
         53:27:9a:4f:16:5a:4d:7f:46:2f:6e:a6:00:db:81:1d:24:fd:
         c1:1e:6d:ea:e9:84:7d:8c:ca:1e:e5:4f:78:16:42:04:e3:dd:
         b2:22:09:f6:e9:c4:35:4e:d1:89:d4:ce:90:5b:98:2a:f5:49:
         41:82:e4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:52:27 2026 by rpki-client