Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
File:                     0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft (raw, json)
Hash identifier:          6eqsO9wc3BvVscepR41XFRiwc3zzLvSkR40IsPXUO0w=
Subject key identifier:   B7:71:1F:D8:D9:A2:01:85:B0:BF:78:78:66:FF:5E:A8:8C:D7:D1:8A
Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
Certificate issuer:       /CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Certificate serial:       01A00213B4FB3989D94C91DA3EC133F79E7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
Manifest number:          0C8A
Signing time:             Fri 14 Aug 2026 21:00:40 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:40 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:40 +0000
Files and hashes:         1: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl (hash: /IhI6Ziac1mBXWR9B1LqWp15eOlsVMeQTQ+BV7KBZjk=)
                          2: StMUvEenw_x5lHCzPw_YMF_URiY.roa (hash: ENHv8rZKdjNZdtVZ7QRD0qvto/6QSsxusDFFUShLO+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:b4:fb:39:89:d9:4c:91:da:3e:c1:33:f7:9e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d
        Validity
            Not Before: Aug 14 21:00:40 2026 GMT
            Not After : Aug 15 21:00:40 2026 GMT
        Subject: CN=b7711fd8d9a20185b0bf787866ff5ea88cd7d18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:59:3d:e3:f4:77:1f:13:ba:8a:ca:44:b5:88:
                    b5:0e:97:60:ab:b9:e3:53:26:d8:d4:20:28:f1:5f:
                    c5:da:fc:af:0e:5d:c7:70:f7:c1:8f:ad:fc:6f:a3:
                    7f:1e:11:49:d5:7f:6e:81:9a:e4:e2:31:65:40:dd:
                    90:fe:e7:be:a0:28:26:9c:41:43:94:a7:a7:26:86:
                    04:42:57:03:02:49:11:95:bb:e7:6e:fc:a3:aa:7c:
                    93:4b:1b:af:de:1e:9b:da:df:50:a1:8c:92:d5:d6:
                    b8:05:ee:8d:c7:f9:81:cd:1d:07:1e:0d:ed:ef:d9:
                    d7:cc:11:a3:e2:38:c0:d4:dc:1a:38:a0:19:44:e8:
                    35:b7:8d:a9:37:6b:9c:22:78:da:66:c7:53:ad:1a:
                    ba:5c:8c:25:b3:eb:b2:1e:da:2a:c2:c3:b7:19:7b:
                    cc:1b:22:4a:e2:1e:a2:a2:51:6e:00:5b:a6:ee:70:
                    06:87:cb:7f:1b:49:8c:1c:7c:45:f0:5b:ed:41:e1:
                    9a:71:22:24:82:7b:cd:51:e4:08:8e:bb:3b:73:44:
                    8f:30:58:8a:b3:b5:e9:af:f7:7a:58:af:d2:32:56:
                    04:5b:04:33:90:04:85:be:1a:ef:48:e3:d6:fa:3a:
                    70:a8:74:d7:0a:8c:9a:09:bd:5e:6d:8e:1e:25:94:
                    02:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:71:1F:D8:D9:A2:01:85:B0:BF:78:78:66:FF:5E:A8:8C:D7:D1:8A
            X509v3 Authority Key Identifier:
                keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6a:30:5b:54:79:e9:f1:bd:f0:87:a0:65:db:0b:50:75:25:
         51:18:31:90:d4:9f:aa:d9:08:12:cb:1b:1e:2e:f6:a1:2f:88:
         2d:93:e1:a7:c6:b1:c9:e3:f5:b6:35:c5:33:0a:e0:b9:ae:c3:
         4e:d9:2c:42:0e:00:a5:0a:f3:ff:67:8b:51:ef:68:a9:05:72:
         9a:a2:6f:c1:95:a8:f4:1d:3f:17:e1:ed:ae:63:8f:c0:c3:4e:
         35:dd:b1:8c:8b:65:eb:6f:8b:92:8f:70:c0:78:c7:de:bb:a9:
         88:ad:20:d6:5d:40:79:19:5a:32:bc:90:95:f2:cb:1d:f4:58:
         d9:4b:5e:db:32:4a:20:30:fd:f2:72:97:83:c6:0a:1f:5a:0b:
         87:0a:d5:7b:38:94:52:93:30:54:a7:e0:21:44:ad:17:ec:94:
         df:e7:1f:99:6e:22:46:e0:f9:7d:54:49:b7:d1:4d:93:d1:ed:
         18:c9:bb:3d:df:1b:bc:60:e2:5f:94:a1:62:e4:81:b6:b0:8b:
         47:ed:9b:11:53:20:a2:7e:84:e8:cf:fa:18:5b:42:48:46:b3:
         a2:cc:d4:ec:13:46:e6:17:56:8b:e1:6f:8f:df:2c:e1:5d:6a:
         3f:65:b8:c0:45:de:e0:e0:9c:df:5b:67:00:eb:fe:fc:37:94:
         a3:41:7c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:14 2026 by rpki-client