Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jUVFZ7xFjEbZlJpsEObaFYqnpcA.mft
File:                     jUVFZ7xFjEbZlJpsEObaFYqnpcA.mft (raw, json)
Hash identifier:          jLvuioRdDaemh/3rDFJ0KrbAW9gBbURq71NHqqTSh9s=
Subject key identifier:   E1:24:73:F1:77:42:59:FE:81:BD:B8:57:9F:49:FC:8F:F4:D9:D0:8D
Authority key identifier: 8D:45:45:67:BC:45:8C:46:D9:94:9A:6C:10:E6:DA:15:8A:A7:A5:C0
Certificate issuer:       /CN=8d454567bc458c46d9949a6c10e6da158aa7a5c0
Certificate serial:       01A160E8AF7A96789D1549B45FA1C76F80A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jUVFZ7xFjEbZlJpsEObaFYqnpcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jUVFZ7xFjEbZlJpsEObaFYqnpcA.mft
Manifest number:          0130
Signing time:             Thu 22 Oct 2026 00:00:24 +0000
Manifest this update:     Thu 22 Oct 2026 00:00:24 +0000
Manifest next update:     Fri 23 Oct 2026 00:00:24 +0000
Files and hashes:         1: J_rm4irlXyul-9SSioq0J12OhGw.roa (hash: NMx7tZKe46TFJ5ivGujHYkVVqt05EhMgXUNXkv1EpJs=)
                          2: jUVFZ7xFjEbZlJpsEObaFYqnpcA.crl (hash: vOkC28q9c4yqXIh+qVP4m3k31lMhxLcudMAzIeJWMvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jUVFZ7xFjEbZlJpsEObaFYqnpcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jUVFZ7xFjEbZlJpsEObaFYqnpcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jUVFZ7xFjEbZlJpsEObaFYqnpcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 18:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:60:e8:af:7a:96:78:9d:15:49:b4:5f:a1:c7:6f:80:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d454567bc458c46d9949a6c10e6da158aa7a5c0
        Validity
            Not Before: Oct 22 00:00:24 2026 GMT
            Not After : Oct 23 00:00:24 2026 GMT
        Subject: CN=e12473f1774259fe81bdb8579f49fc8ff4d9d08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:18:51:49:48:0b:1d:67:cd:01:32:4f:76:bf:
                    ec:98:de:2a:bb:5b:cf:98:f4:88:aa:7d:4c:7a:fa:
                    38:51:9b:08:e5:33:17:8b:d3:0d:8e:84:07:6c:b3:
                    54:6e:ff:ac:83:b1:48:89:9e:48:9b:bc:2e:b3:83:
                    4c:cf:dd:b1:3f:75:54:6c:c4:a3:f9:bf:39:71:41:
                    23:d8:3d:ff:ed:18:04:09:7e:a5:85:95:73:59:55:
                    86:66:2b:c4:11:0f:a3:fa:65:ca:63:e0:08:da:60:
                    f2:d6:1f:49:44:e0:7b:7f:6c:16:5c:d3:ec:5e:ea:
                    47:0c:9c:18:f4:32:ef:5b:3b:f8:38:75:77:b2:d8:
                    57:d4:ca:a2:e2:9f:89:d9:d2:59:8f:6b:e0:fe:f3:
                    38:b5:12:79:9e:24:20:ef:38:76:a3:8a:01:b7:2d:
                    a6:f5:88:fe:ea:e0:16:f1:f8:e0:6d:66:8f:9a:21:
                    a9:5b:f3:ac:73:ac:d3:77:f8:0f:2a:33:a4:c2:25:
                    8c:e1:4b:4e:b5:42:28:97:d0:63:80:cb:6f:39:34:
                    6d:1f:eb:82:ba:75:9d:b9:19:4b:59:3c:67:1d:c5:
                    1c:1f:76:24:18:44:95:cd:0a:dd:ee:0a:30:44:3d:
                    02:91:59:64:a8:19:30:2f:9d:4a:8f:5e:2a:95:87:
                    97:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:24:73:F1:77:42:59:FE:81:BD:B8:57:9F:49:FC:8F:F4:D9:D0:8D
            X509v3 Authority Key Identifier:
                keyid:8D:45:45:67:BC:45:8C:46:D9:94:9A:6C:10:E6:DA:15:8A:A7:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jUVFZ7xFjEbZlJpsEObaFYqnpcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jUVFZ7xFjEbZlJpsEObaFYqnpcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jUVFZ7xFjEbZlJpsEObaFYqnpcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:8d:ec:5a:9d:04:2d:71:94:9e:64:71:4c:e1:19:f9:97:b9:
         8b:01:21:e6:e0:b2:fb:dc:0f:5f:7c:8c:c6:eb:d2:53:4a:d3:
         e1:44:12:80:e4:20:18:cf:5d:27:fa:87:41:34:1b:1b:c2:f2:
         90:0b:dc:5a:2a:ca:71:e1:b2:4f:5f:d4:6c:bb:df:f8:24:1a:
         93:82:af:79:c4:b8:96:ce:05:30:b6:a6:1c:54:37:d7:8b:aa:
         18:8d:0d:62:41:b2:54:eb:75:e8:a6:20:ce:32:a1:6b:ef:cd:
         12:a7:06:fd:bb:30:c0:34:4e:46:b9:c9:9d:eb:c8:8e:03:38:
         63:84:50:84:d6:0b:80:3d:f1:01:46:a5:cf:55:93:51:1d:6a:
         bc:d8:0f:f1:b9:2f:1b:89:7d:21:99:d4:ef:99:70:31:66:29:
         14:d7:28:9b:fd:fb:b1:45:b0:4f:76:42:be:67:ed:a6:58:1e:
         ef:14:0f:00:f4:7a:da:21:e7:dd:af:2c:a6:aa:5a:d5:af:90:
         4f:e5:ac:75:b3:25:74:d9:6b:10:8a:79:84:cb:88:aa:6b:3f:
         19:8a:8f:1d:1b:3e:63:5d:b6:39:0a:0c:14:96:45:2b:11:a9:
         23:13:93:54:96:14:56:5a:19:43:86:1a:a8:8f:3a:7f:5e:3f:
         34:44:d9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:18:40 2026 by rpki-client