Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
File:                     jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json)
Hash identifier:          KI+FcmJJjIhV2Ao4BPtWvBH6ddpmMwikZaCkbnULnyQ=
Subject key identifier:   B0:E4:F7:09:8E:BE:0A:42:F0:BE:6F:27:7B:20:B6:59:67:80:03:2A
Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
Certificate issuer:       /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Certificate serial:       01A08CE8B90D6634944B49F4A32BDE7F1B0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
Manifest number:          0EF1
Signing time:             Thu 10 Sep 2026 20:00:56 +0000
Manifest this update:     Thu 10 Sep 2026 20:00:56 +0000
Manifest next update:     Fri 11 Sep 2026 20:00:56 +0000
Files and hashes:         1: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: nuEhKzh/zsilsVUr5wa/EaSW56oYtzbfW8TqkJm5Lno=)
                          2: ybGK7D59nhsrV5zcx9pDpZj5zRw.roa (hash: lUVMObnC7ci77KqYjQKC6vaADGXMIPOZVK0KWxLUoCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:e8:b9:0d:66:34:94:4b:49:f4:a3:2b:de:7f:1b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
        Validity
            Not Before: Sep 10 20:00:56 2026 GMT
            Not After : Sep 11 20:00:56 2026 GMT
        Subject: CN=b0e4f7098ebe0a42f0be6f277b20b6596780032a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5e:46:44:a1:5a:88:56:2a:58:34:22:f9:0a:
                    8d:5e:5c:48:98:48:c0:c9:ba:70:2d:97:0e:0f:66:
                    44:bf:61:fe:ce:b1:4d:2f:bd:61:2a:21:f4:05:46:
                    ab:90:1a:66:e0:72:f2:7d:cc:d7:7f:0b:c6:4c:60:
                    96:5f:91:5b:12:6b:e5:65:64:0f:6b:22:13:f9:05:
                    cb:45:7e:66:fb:1c:6f:a5:83:52:e8:f7:c8:2e:73:
                    45:9d:2e:1c:54:da:2f:be:95:9a:ed:d4:bb:74:9a:
                    5a:ef:3b:f8:c5:a9:c3:38:c3:9d:15:d3:db:8e:c7:
                    e2:55:09:85:b7:67:dd:23:75:d9:b0:7a:81:a6:ab:
                    41:65:f1:38:01:dd:5c:fb:84:26:2a:82:2c:cd:44:
                    0c:75:96:02:31:ca:38:41:77:9f:92:bb:80:5e:d2:
                    32:de:a1:50:3e:94:74:68:97:fd:0b:ee:f3:aa:19:
                    48:9b:f9:45:bf:6f:a4:f5:1d:5f:95:2b:4a:17:b1:
                    fe:9e:97:c4:b1:fc:2d:f2:28:a3:b6:9e:3f:5d:b4:
                    f4:93:e3:c0:99:94:5e:f0:7d:de:3b:ae:2a:7e:94:
                    fe:e8:97:af:b3:f5:97:bc:1d:e5:62:37:44:9a:e7:
                    29:44:ed:d4:16:4f:f9:2b:6e:11:f7:4b:4f:f7:08:
                    d3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E4:F7:09:8E:BE:0A:42:F0:BE:6F:27:7B:20:B6:59:67:80:03:2A
            X509v3 Authority Key Identifier:
                keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c0:1b:e1:3e:07:e5:be:1f:8e:6e:dc:3b:6e:e8:b6:66:01:
         d2:59:8d:eb:a9:a7:cb:3a:52:1e:c1:c7:79:50:3c:56:65:34:
         83:79:12:6c:8a:6e:bb:b1:34:0f:07:37:18:e2:7c:3d:8c:13:
         8f:de:ac:31:22:ae:0b:18:b5:65:77:d5:66:d1:2d:ff:2d:7e:
         69:66:f0:96:f1:c1:1e:8c:da:95:f3:6d:68:66:86:c9:8f:ee:
         6e:75:62:47:7a:53:64:ea:89:c0:3e:74:b2:a6:cf:36:b9:ab:
         8a:a2:fc:fb:d7:51:85:b0:1d:55:e9:b2:f8:14:bc:f4:63:7f:
         eb:0d:85:ad:9b:88:a6:08:b6:3c:66:5b:00:75:c3:af:0b:58:
         a7:74:dc:10:b3:c1:a9:ca:95:30:43:34:b7:3f:2d:68:91:e2:
         58:ac:34:c8:ee:81:96:f3:f0:d1:73:a5:c9:d0:c7:d5:e3:ce:
         2e:5c:c6:4b:cb:ca:1c:29:25:9a:51:2d:bc:63:10:c2:09:9c:
         25:11:c7:82:3b:5b:d3:5f:bd:a2:e4:9d:32:c2:64:8c:9e:a0:
         f2:8b:75:6c:b4:64:06:bf:7c:da:44:1c:de:5f:9c:37:c7:c1:
         66:89:57:10:bf:56:e1:00:28:91:a0:0d:db:89:15:41:5c:fc:
         f4:0d:8a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:50:13 2026 by rpki-client