Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
File:                     JMltOG189ZqZDTmU8N-Ek9_KSbM.mft (raw, json)
Hash identifier:          STvRrgpJoWH2y3UnB7wJd15i6e/+N4rzmyIg70z+YXg=
Subject key identifier:   0F:F4:38:DF:2E:AF:E9:E0:C5:6D:6F:6C:3F:E3:A8:10:6A:A0:67:BB
Authority key identifier: 24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
Certificate issuer:       /CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Certificate serial:       01A041CEBDB004ED6B6240EA28F7F0C767D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
Manifest number:          049C
Signing time:             Thu 27 Aug 2026 06:01:03 +0000
Manifest this update:     Thu 27 Aug 2026 06:01:03 +0000
Manifest next update:     Fri 28 Aug 2026 06:01:03 +0000
Files and hashes:         1: 4C9QDlBnnXSHpJEM9ANlWAaSyEs.roa (hash: v92PqB+zER9mvZgRziC74aTu4c1aP8hKbPOOfRE55tQ=)
                          2: JMltOG189ZqZDTmU8N-Ek9_KSbM.crl (hash: 6aUQwjYDh07DgoBkQG9oNaZxG5NN4HyrhCL7l1vWnN0=)
                          3: MkwV_p4ZiOf8Ia5ZHOPhoW4eKIU.roa (hash: JMKNPRf6e5NpGat9TNpevi/2X+CTiPo4/6Chd3GgN+E=)
                          4: oJUrlPiGpThaOu9GEMzKstl67oY.roa (hash: ZAsmCmye4OXdSzraVVSyaiBbg3Yr1OAE/9LISAwEOHg=)
                          5: s6R6PJpd-Myk3vNL1YiMPF0NHiY.roa (hash: 82ptaySXeh8vuN3858KZJT3/tNdBNq1pDFzQMH65GpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:ce:bd:b0:04:ed:6b:62:40:ea:28:f7:f0:c7:67:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
        Validity
            Not Before: Aug 27 06:01:03 2026 GMT
            Not After : Aug 28 06:01:03 2026 GMT
        Subject: CN=0ff438df2eafe9e0c56d6f6c3fe3a8106aa067bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:89:40:a3:30:23:0e:b8:9c:ee:a9:07:5e:e5:
                    d8:bc:dd:a3:1a:76:e1:6d:c9:05:f4:79:1f:02:92:
                    93:99:a8:71:9d:11:1c:7e:ee:21:21:80:ca:41:fd:
                    18:64:f7:54:68:17:7b:d0:e2:f7:0c:fa:95:fe:a4:
                    6a:d4:db:d3:36:85:31:10:41:02:05:ec:00:bc:df:
                    1a:ef:6f:23:7b:f3:be:43:dd:54:9b:ec:ff:b1:50:
                    9c:b8:5f:ae:ab:9f:90:c3:b6:55:aa:9e:0b:e7:7b:
                    83:7c:97:ae:80:12:d9:aa:e8:e9:60:44:f5:6b:e2:
                    3b:4e:ac:e5:92:c7:dd:97:fd:01:80:cf:2c:b7:a2:
                    7b:e7:86:35:44:db:42:72:98:7a:38:3e:af:8b:81:
                    ec:b5:a7:1f:c0:75:87:7a:5a:1a:aa:f6:14:bb:f9:
                    d9:ff:96:59:50:30:cc:90:1f:67:43:2a:63:8b:d5:
                    c7:ce:81:85:1b:3d:d9:61:1e:3d:a0:55:e5:5a:26:
                    55:84:e1:77:97:1e:f2:7b:7f:5f:80:9b:52:0a:b9:
                    07:08:9a:a1:8e:02:dd:de:4d:2d:c9:a9:cb:6a:b9:
                    18:14:9a:5b:fa:da:a2:18:75:53:57:74:5a:2c:40:
                    f0:66:7a:58:20:f6:f6:01:f7:08:1a:b3:83:5f:92:
                    17:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F4:38:DF:2E:AF:E9:E0:C5:6D:6F:6C:3F:E3:A8:10:6A:A0:67:BB
            X509v3 Authority Key Identifier:
                keyid:24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:0b:d5:d1:8d:3b:5c:af:f6:74:3b:e8:29:78:3b:8e:e3:90:
         23:66:cb:d7:08:10:f6:eb:67:79:18:94:e1:3c:1c:cc:27:30:
         d2:67:4b:55:be:ef:da:1d:0c:da:fc:b6:1f:0d:9a:e0:af:5e:
         0f:99:cf:10:e6:4c:d7:01:b1:92:ed:ae:9f:33:4e:9e:e0:ff:
         1a:9d:9b:86:ee:ab:aa:1e:07:2c:20:f9:5c:d2:66:67:ee:c2:
         31:98:9e:50:0f:42:9d:60:c0:e4:a8:8e:62:3a:c7:ba:f8:bf:
         9f:4e:dc:e8:30:b8:d3:d1:cd:4a:fa:7c:d1:0c:af:39:76:d9:
         0f:07:8e:e8:31:c8:fa:a1:00:98:0a:72:e3:74:73:1e:26:75:
         0b:3b:4a:c0:e5:63:bc:fc:2f:7c:38:64:36:16:57:f1:ea:f6:
         9c:b4:c5:23:80:c9:a0:c3:0e:50:28:bf:81:6d:d3:c8:05:c5:
         25:47:e8:02:5b:b7:c9:9e:5a:a2:bc:6a:3b:a7:f1:fc:fa:9b:
         34:90:47:be:ba:66:7f:c6:92:14:58:ce:2e:4e:d3:d6:c2:c7:
         47:20:40:a7:5e:7c:06:7a:be:2b:b9:75:18:50:70:32:25:98:
         08:8e:9d:6d:38:a5:54:27:6d:c8:67:5d:d0:9c:24:4c:3a:2c:
         91:96:3b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:56:47 2026 by rpki-client