Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
File:                     jlo2o46eViR2rnC5FQKOMBhxKRk.mft (raw, json)
Hash identifier:          H6kzJLB12PW49GWsqUudF1nlT79rtMBtQu22CgbKxqA=
Subject key identifier:   5B:79:0C:91:34:49:D2:97:7F:E4:92:B2:C2:19:48:05:C7:C6:D4:0E
Authority key identifier: 8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
Certificate issuer:       /CN=8e5a36a38e9e562476ae70b915028e3018712919
Certificate serial:       01A08F7BC1A9F65201A6777FFDCFECD0C07A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
Manifest number:          0DEC
Signing time:             Fri 11 Sep 2026 08:00:47 +0000
Manifest this update:     Fri 11 Sep 2026 08:00:47 +0000
Manifest next update:     Sat 12 Sep 2026 08:00:47 +0000
Files and hashes:         1: KCCXTiyEdgg9X9UWZ--_fhYVO_Q.roa (hash: 0RPtm2bqma6nOnpNbHsYWDjHVvYXOYQDlwmuFFsHb6M=)
                          2: jlo2o46eViR2rnC5FQKOMBhxKRk.crl (hash: 9AnEglT2Re7vmaHNzycrk6zsF4bWKpz0rM2T5gA7at8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8f:7b:c1:a9:f6:52:01:a6:77:7f:fd:cf:ec:d0:c0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e5a36a38e9e562476ae70b915028e3018712919
        Validity
            Not Before: Sep 11 08:00:47 2026 GMT
            Not After : Sep 12 08:00:47 2026 GMT
        Subject: CN=5b790c913449d2977fe492b2c2194805c7c6d40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8f:2e:28:f9:98:0c:e4:3a:68:05:bb:e1:3c:
                    db:6a:cf:ff:69:d5:e8:69:13:9d:06:87:4d:85:b1:
                    e6:2f:f1:e8:5b:9c:7d:23:a3:7a:46:9c:d1:47:ac:
                    b7:bf:6e:69:99:29:e6:62:1e:c9:df:4a:25:d3:60:
                    d2:fb:39:2f:41:07:01:a8:a0:54:c9:79:04:8b:91:
                    0e:3c:fe:fa:35:3d:33:7a:89:5d:06:56:69:42:99:
                    ad:63:03:9c:eb:c2:5c:80:17:a8:5b:71:9d:75:0e:
                    db:7e:51:11:24:64:b8:2b:e0:39:34:ba:68:98:7a:
                    49:18:1a:63:cf:25:a1:c3:eb:64:e4:ca:11:d4:76:
                    3c:b3:97:b6:1b:2a:49:32:cc:ad:39:27:de:e9:72:
                    e8:6e:87:69:16:dd:39:01:8d:a8:6d:58:9f:20:7d:
                    76:ee:ec:9c:a1:2c:6c:52:2f:8f:f4:cc:a2:1e:16:
                    3d:a9:01:c8:58:3f:f6:7e:f4:a4:86:43:4a:5a:2e:
                    7e:e9:f3:b2:07:ec:dc:9c:4b:4e:29:38:df:c9:25:
                    18:a1:91:9a:25:72:98:7e:27:f0:35:98:5b:35:6c:
                    ed:d8:db:7f:01:91:e7:44:51:dc:65:4e:c7:14:9a:
                    24:ca:79:b0:bd:21:52:ef:44:da:31:8b:90:54:00:
                    79:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:79:0C:91:34:49:D2:97:7F:E4:92:B2:C2:19:48:05:C7:C6:D4:0E
            X509v3 Authority Key Identifier:
                keyid:8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f2:d6:e4:4f:0a:9d:29:d2:71:d7:2d:24:86:6c:ec:3f:69:
         d3:ca:08:6b:ab:87:1c:d6:5e:d4:46:00:5d:30:7a:1f:d0:c0:
         03:7e:15:99:8b:a7:de:29:99:aa:c6:6d:c3:2d:f0:3a:d8:4a:
         60:ff:94:ac:7d:5d:22:f7:4a:e0:84:ec:34:c2:7b:ec:2d:e6:
         9a:cb:fe:e9:f0:51:70:5b:6a:6e:d6:c9:df:33:6f:ff:79:3d:
         68:0d:15:9b:6d:6b:fd:11:6b:c1:de:a3:f4:31:be:8f:22:4e:
         b0:ed:47:6a:00:62:63:3c:74:2d:a0:39:86:3e:99:06:20:91:
         cf:d6:3a:ef:be:31:c3:e5:e4:4f:2f:b2:64:9c:68:d8:c0:1b:
         32:ce:40:75:74:57:39:d5:79:e7:16:a6:65:e1:ff:7e:92:0b:
         90:9b:29:d9:78:f4:60:f1:54:b2:ef:5c:90:5b:7b:52:8b:c2:
         0c:0e:b2:6a:a4:03:d5:e0:ab:e7:62:22:d9:f2:dc:d1:32:dd:
         c1:c8:ff:b5:fc:70:2c:4d:e2:8c:04:f5:13:23:45:18:8f:e7:
         c1:98:a5:82:f9:93:3b:25:10:87:c6:c9:23:8a:de:22:fe:97:
         24:6f:d0:6e:d6:ba:ca:58:72:59:f1:f1:c9:c2:25:da:45:be:
         46:0b:7e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:37:57 2026 by rpki-client