Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
File:                     J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft (raw, json)
Hash identifier:          DJFPDiwifti3pQ9uVoecXsVl+n4tVO7ID/tFwxWOXVo=
Subject key identifier:   77:45:D1:74:1A:0B:DB:11:C6:C5:D1:E4:6B:7A:DA:B3:F3:BE:CB:92
Authority key identifier: 27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4
Certificate issuer:       /CN=27fdce9db6af9b8133a32617eef4e046444efdd4
Certificate serial:       01A1544057A7F90012F41B499E6014521141
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
Manifest number:          0C26
Signing time:             Mon 19 Oct 2026 13:01:05 +0000
Manifest this update:     Mon 19 Oct 2026 13:01:05 +0000
Manifest next update:     Tue 20 Oct 2026 13:01:05 +0000
Files and hashes:         1: J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl (hash: Qz79ODQ6JMPaNcWfe84oEAIbQkvkWRgpDH57Gz6nmmA=)
                          2: pG3Dfbd9hX3TvxsYc8iEA-E9yvU.roa (hash: RKfqaHBHufPXQ+FRBmatkD236oqFKLw1y5df/WqN564=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:54:40:57:a7:f9:00:12:f4:1b:49:9e:60:14:52:11:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27fdce9db6af9b8133a32617eef4e046444efdd4
        Validity
            Not Before: Oct 19 13:01:05 2026 GMT
            Not After : Oct 20 13:01:05 2026 GMT
        Subject: CN=7745d1741a0bdb11c6c5d1e46b7adab3f3becb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d5:a7:f0:dc:d3:c5:a7:cc:b5:89:ce:79:a6:
                    c2:84:db:88:40:1e:0b:72:18:ef:b4:f1:1a:b3:63:
                    8b:8c:5a:ca:0e:ac:1a:e8:76:6d:38:8c:ea:65:7e:
                    a6:f6:4b:90:aa:5a:cd:41:20:5f:8b:a0:48:55:4a:
                    88:7c:44:6a:31:25:1a:9f:fd:7d:b3:ff:c9:20:ee:
                    fd:1b:e7:98:63:b6:4a:54:07:ca:84:b0:f5:73:f7:
                    02:ce:ff:80:3a:84:90:57:fa:c5:65:57:01:62:a0:
                    12:87:40:dc:6e:40:ed:d5:4b:b2:61:bf:10:30:26:
                    f2:52:ec:0d:86:14:0e:da:6d:c5:16:c3:fc:9b:1f:
                    06:18:86:ed:75:23:2c:11:12:fa:8e:c7:68:7e:8a:
                    25:77:98:ca:a3:a4:77:e1:da:50:6b:cb:a8:37:cd:
                    11:0c:ca:95:32:bc:b5:3c:19:e8:2d:f1:58:4d:f7:
                    59:5c:08:4a:f4:fa:e5:a1:0c:2b:c8:1c:11:39:ab:
                    a0:3c:87:41:db:34:79:ef:55:ca:1b:0d:37:2d:27:
                    73:59:77:2d:7e:37:f0:4a:e9:b4:39:15:2c:58:57:
                    f9:f8:41:23:03:ad:e9:87:22:30:58:5b:a6:42:a6:
                    86:19:3d:78:c5:1e:2f:aa:be:77:9d:55:39:48:2e:
                    59:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:45:D1:74:1A:0B:DB:11:C6:C5:D1:E4:6B:7A:DA:B3:F3:BE:CB:92
            X509v3 Authority Key Identifier:
                keyid:27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:05:6a:51:70:8f:d2:16:a2:62:b0:39:57:2b:77:50:96:87:
         48:69:90:4a:f2:a7:96:94:ad:f8:65:d4:3b:94:86:a4:65:15:
         a9:05:72:cd:c1:55:9e:ce:bc:f2:b5:7d:42:c1:89:47:15:2b:
         b2:5f:6e:78:07:c9:b9:a2:24:a2:74:1d:4c:55:3a:e3:e6:e5:
         ee:ee:b7:f0:dc:c0:c0:18:1f:29:c8:1c:f1:2d:c4:9d:7f:05:
         27:e2:c3:01:7b:45:c6:50:b3:c1:eb:4a:26:9e:c2:f0:4e:8f:
         f9:c9:aa:34:1c:98:d6:5d:e9:aa:67:c3:b0:5b:e7:30:7b:44:
         4f:60:f4:ae:e5:a8:94:64:bd:46:75:5d:2c:b3:80:72:ab:20:
         f5:f3:e5:63:fd:7b:f4:a9:b4:22:09:f1:51:d4:48:36:09:34:
         75:7e:e5:60:c3:23:68:9a:10:d8:4c:f8:dd:9d:0e:a2:1f:70:
         27:2f:4a:a4:08:d1:aa:d8:ba:1a:ad:5a:f6:19:21:e8:a1:81:
         07:42:c3:f4:de:c3:49:c5:b7:f7:d0:63:19:99:a0:6e:09:e1:
         68:f5:17:6f:c4:e7:b0:63:50:9d:11:cb:3f:7e:2a:bf:4e:79:
         99:8e:74:83:28:a8:cf:31:74:a6:da:a7:3f:84:52:ee:e0:11:
         64:4b:a7:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFUQFen+QAS9BtJnmAUUhFBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZmRjZTlkYjZhZjliODEzM2EzMjYxN2VlZjRlMDQ2NDQ0
ZWZkZDQwHhcNMjYxMDE5MTMwMTA1WhcNMjYxMDIwMTMwMTA1WjAzMTEwLwYDVQQD
Eyg3NzQ1ZDE3NDFhMGJkYjExYzZjNWQxZTQ2YjdhZGFiM2YzYmVjYjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tWn8NzTxafMtYnOeabChNuIQB4L
chjvtPEas2OLjFrKDqwa6HZtOIzqZX6m9kuQqlrNQSBfi6BIVUqIfERqMSUan/19
s//JIO79G+eYY7ZKVAfKhLD1c/cCzv+AOoSQV/rFZVcBYqASh0DcbkDt1UuyYb8Q
MCbyUuwNhhQO2m3FFsP8mx8GGIbtdSMsERL6jsdofoold5jKo6R34dpQa8uoN80R
DMqVMry1PBnoLfFYTfdZXAhK9PrloQwryBwROaugPIdB2zR571XKGw03LSdzWXct
fjfwSum0ORUsWFf5+EEjA63phyIwWFumQqaGGT14xR4vqr53nVU5SC5ZYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdF0XQaC9sRxsXR5Gt62rPzvsuSMB8GA1UdIwQY
MBaAFCf9zp22r5uBM6MmF+704EZETv3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl8zT25iYXZtNEV6b3lZWDd2VGdSa1JPX2RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wNDMzZTMtYmQ2MS00ZDEzLTg0N2Et
ZDkwYzYxNzdlNDAyLzEvSl8zT25iYXZtNEV6b3lZWDd2VGdSa1JPX2RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8wNDMzZTMtYmQ2MS00ZDEzLTg0N2EtZDkwYzYxNzdlNDAy
LzEvSl8zT25iYXZtNEV6b3lZWDd2VGdSa1JPX2RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxgVqUXCP
0haiYrA5Vyt3UJaHSGmQSvKnlpSt+GXUO5SGpGUVqQVyzcFVns688rV9QsGJRxUr
sl9ueAfJuaIkonQdTFU64+bl7u638NzAwBgfKcgc8S3EnX8FJ+LDAXtFxlCzwetK
Jp7C8E6P+cmqNByY1l3pqmfDsFvnMHtET2D0ruWolGS9RnVdLLOAcqsg9fPlY/17
9Km0IgnxUdRINgk0dX7lYMMjaJoQ2Ez43Z0Ooh9wJy9KpAjRqti6Gq1a9hkh6KGB
B0LD9N7DScW399BjGZmgbgnhaPUXb8TnsGNQnRHLP34qv055mY50gyiozzF0ptqn
P4RS7uARZEunhw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:47:06 2026 by rpki-client