Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File:                     JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier:          1qiadUMXT93AZPtpBj1SIE1ERelJsc5Y0k74nOZLgr8=
Subject key identifier:   D5:58:F6:AD:28:6E:54:B9:90:F1:4E:5C:16:F4:46:07:64:4C:46:E2
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer:       /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial:       01A0FF7E85A5DFB5ED2E3B36211596F1A24C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number:          0F09
Signing time:             Sat 03 Oct 2026 02:01:16 +0000
Manifest this update:     Sat 03 Oct 2026 02:01:16 +0000
Manifest next update:     Sun 04 Oct 2026 02:01:16 +0000
Files and hashes:         1: 1-UQfPeP2Hp2kHg0OiYvIdbub_7g.roa (hash: I98ISNyguLUFVm8aiR0qBsZTLT8A2B3NKke2YTAXtF0=)
                          2: FbQ9gg85Y5Qx602ZBVh6YkaLcXs.roa (hash: T391+Idz7L3dve/E2xgopb1fIMnjsWpWTFaXJBaoxCg=)
                          3: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: A4uWNxXaHHVQ/P+sbb1IIeCeb4nR+UMCHZMEwUBxbtk=)
                          4: KJfyUjYhSbcTj4BqhcYlT-NV3k0.roa (hash: PTxZGqD0eutJIRMtp0zEf920MlkzT2rTXHG1ErOVkNE=)
                          5: LeJNm1ZK5iVV3SsDbJERcUuUUyU.roa (hash: YZLLMnJFDKGZDywuXIt3IlZ5Tc81OdOTnXuXJJ8sLok=)
                          6: ytIxMg-nFxFDrCls8GXhACBFUSI.roa (hash: GHaVvWlfNGDA8GztLcPLg+D8rXVf6ft0hke/kEcK6uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ff:7e:85:a5:df:b5:ed:2e:3b:36:21:15:96:f1:a2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
        Validity
            Not Before: Oct  3 02:01:16 2026 GMT
            Not After : Oct  4 02:01:16 2026 GMT
        Subject: CN=d558f6ad286e54b990f14e5c16f44607644c46e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:df:af:8c:02:23:23:53:99:d3:ba:78:28:69:
                    b8:f3:82:5d:5e:9e:ef:5e:4d:91:09:98:0c:66:03:
                    83:16:37:f8:bd:5e:7d:e9:f0:79:cf:7d:2e:f3:f5:
                    90:7c:8d:df:d9:a2:10:fb:0e:3d:90:00:cc:30:9f:
                    ba:f8:fc:c4:cf:61:05:df:31:d9:b7:9c:08:01:87:
                    62:5b:2b:71:34:65:38:3c:bb:c1:a7:39:d9:dc:67:
                    6f:f7:77:a5:f8:40:ac:95:a3:5b:40:30:a4:58:4c:
                    f6:24:61:63:48:15:6c:58:7a:76:86:78:4b:c5:1e:
                    c5:26:12:5a:e9:cd:c1:05:73:f8:09:cb:fc:e6:b4:
                    73:a8:2e:8a:43:b4:4a:8c:83:8b:9b:5c:f1:ec:5f:
                    44:9f:3f:41:3f:74:6d:bb:04:75:bf:7f:bf:11:9a:
                    f4:0c:b0:36:2e:3b:00:dc:ff:1c:e2:0d:eb:c6:a4:
                    89:ff:55:f4:b8:17:30:1f:55:21:7f:ef:a8:20:82:
                    c2:18:75:92:e0:29:91:d7:93:dd:57:9d:36:2a:d1:
                    43:f4:ff:48:bf:d8:a5:e7:b6:12:1f:41:66:3b:5d:
                    3d:99:d1:c4:d0:fb:49:ee:f0:90:3f:17:0e:59:0e:
                    63:25:46:12:92:8e:7c:f8:ce:42:d5:47:ef:1d:71:
                    a9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:58:F6:AD:28:6E:54:B9:90:F1:4E:5C:16:F4:46:07:64:4C:46:E2
            X509v3 Authority Key Identifier:
                keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:41:3c:52:94:e1:94:2e:06:d9:5e:e8:e6:01:e8:34:fc:f2:
         83:58:74:d9:63:1b:f7:29:a0:fb:57:10:61:1e:5b:b2:e0:e8:
         12:d3:70:23:10:fe:94:71:a0:8e:1a:36:4e:93:e9:a4:4d:40:
         96:f1:af:b4:a7:68:fa:3a:3b:b6:bc:3f:e9:b4:f8:b0:33:19:
         bc:8a:5c:f8:a7:e3:4f:8e:13:61:bc:49:3f:84:9f:9c:98:a7:
         7f:25:70:98:23:27:e2:21:1c:17:c4:c0:91:3d:7c:09:47:ae:
         d6:d0:06:c7:d6:df:e8:e4:d2:dc:6c:07:ca:ca:1a:87:c4:81:
         ad:1e:ac:31:0f:e7:ce:05:5c:83:13:63:27:e0:94:6a:0e:5f:
         93:24:09:43:86:4b:5e:d9:36:1d:e0:72:67:3c:18:67:2e:1d:
         3f:3f:ef:00:90:d3:cf:13:56:7d:16:c3:02:ac:fb:be:12:c5:
         1d:c7:83:2e:64:21:17:dc:b2:8e:44:3a:f2:19:ba:89:97:be:
         8b:ba:85:53:da:a2:ec:4e:ff:3a:48:64:6e:32:ef:37:a6:24:
         40:51:31:25:77:dd:7d:f0:a7:6a:94:95:d8:52:73:a6:03:7b:
         f6:1d:5d:ab:88:2a:a6:e1:5a:45:25:0f:48:9d:39:2b:b1:7f:
         2e:ac:8e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 04:19:38 2026 by rpki-client