Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.mft
File:                     jLsZbctbQbLDX2jNw9CKcj-OMKc.mft (raw, json)
Hash identifier:          61fK7V++1n4hYLhZqj4crumxB+KQpkmcSNNe4zlri0s=
Subject key identifier:   B1:6B:CD:7A:D5:BC:8D:8C:3B:7C:F5:59:2B:10:A6:8A:95:D3:E6:D5
Authority key identifier: 8C:BB:19:6D:CB:5B:41:B2:C3:5F:68:CD:C3:D0:8A:72:3F:8E:30:A7
Certificate issuer:       /CN=8cbb196dcb5b41b2c35f68cdc3d08a723f8e30a7
Certificate serial:       01A06D952D3D1B910799585E4F0D9D514688
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jLsZbctbQbLDX2jNw9CKcj-OMKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.mft
Manifest number:          B2
Signing time:             Fri 04 Sep 2026 18:01:28 +0000
Manifest this update:     Fri 04 Sep 2026 18:01:28 +0000
Manifest next update:     Sat 05 Sep 2026 18:01:28 +0000
Files and hashes:         1: jLsZbctbQbLDX2jNw9CKcj-OMKc.crl (hash: e5csTAAP1WWIZvKTBbxpZRdzDLKPPVae0pxVD7/yv9M=)
                          2: pjDwdQHNJVDo70btJAsKcL2t8Wc.asa (hash: 9hs9uCk4t0lY0AxWzX7WklKc5C2LiY8Jejt1rMjXdhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jLsZbctbQbLDX2jNw9CKcj-OMKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 18:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:95:2d:3d:1b:91:07:99:58:5e:4f:0d:9d:51:46:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cbb196dcb5b41b2c35f68cdc3d08a723f8e30a7
        Validity
            Not Before: Sep  4 18:01:28 2026 GMT
            Not After : Sep  5 18:01:28 2026 GMT
        Subject: CN=b16bcd7ad5bc8d8c3b7cf5592b10a68a95d3e6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:3e:cc:32:d2:9f:96:98:a3:9b:8c:71:e6:
                    af:ad:62:53:69:7d:e2:83:0e:e5:d9:de:ab:fe:91:
                    c5:2e:9e:99:94:73:af:64:7c:99:16:3e:53:c5:55:
                    2d:7c:b4:33:8a:ed:4c:9a:ea:9c:0c:c7:d6:63:7f:
                    e3:4e:89:c0:8e:62:2e:c6:4e:37:10:17:22:b3:bb:
                    39:92:60:b8:57:44:a6:01:a1:cb:3c:74:7e:eb:75:
                    15:14:fd:56:bf:c1:f8:52:dd:7f:dd:2e:5c:84:f0:
                    d0:26:3f:ff:c4:1b:a8:26:5f:b6:36:d4:55:5a:85:
                    7a:74:cb:da:a8:14:a4:56:c3:bb:f1:f2:c5:d5:73:
                    76:20:89:15:78:20:94:ce:ee:c1:66:1c:0e:d5:18:
                    a1:a5:da:dc:52:48:46:36:8d:59:4e:9b:32:1f:05:
                    39:86:b3:cd:c7:0a:c4:ff:87:0c:39:00:db:70:13:
                    44:84:bd:5f:2f:c0:99:ba:3e:ab:9a:ca:de:68:11:
                    53:db:8f:a3:eb:64:70:1f:d9:6e:f6:0e:9a:99:96:
                    40:8c:15:3e:a4:b8:96:ca:f0:28:9e:75:b7:d6:c0:
                    4b:9a:97:a8:a4:fb:dc:34:15:e6:de:62:83:d5:a7:
                    43:4a:b6:c0:7a:b6:1b:ee:37:62:48:a8:82:91:0b:
                    11:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6B:CD:7A:D5:BC:8D:8C:3B:7C:F5:59:2B:10:A6:8A:95:D3:E6:D5
            X509v3 Authority Key Identifier:
                keyid:8C:BB:19:6D:CB:5B:41:B2:C3:5F:68:CD:C3:D0:8A:72:3F:8E:30:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLsZbctbQbLDX2jNw9CKcj-OMKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7e:58:19:17:30:a3:6a:b6:fe:c9:00:8e:60:a7:9f:e2:e7:
         02:44:7b:73:b9:23:78:9f:1a:cc:b2:fe:34:55:c7:14:68:b7:
         1c:93:40:26:09:ca:01:74:1c:e3:02:37:2e:33:a5:eb:6d:bf:
         2c:24:c9:0a:20:43:85:ae:b1:69:29:49:5f:82:fd:87:05:d6:
         72:4b:bf:c5:14:a5:2c:99:8e:4a:02:9c:78:b1:8b:45:22:2f:
         b5:c2:bd:d0:a1:b9:53:dd:c3:9d:b6:cc:b3:67:e8:e9:3e:4e:
         ba:a9:bf:ec:e3:74:23:37:9e:06:cb:ea:95:a9:26:41:2b:4e:
         43:93:44:0b:80:3c:98:70:f5:e3:8c:c0:a1:2b:9d:66:5c:54:
         de:f0:bc:dd:e3:f7:91:73:71:a5:7e:4f:f4:ac:00:5b:8d:1a:
         96:6d:b6:c0:ed:19:14:e3:37:30:ca:25:ac:41:d7:a7:2b:09:
         9c:c4:27:09:51:20:4e:17:31:20:0d:35:fe:fd:c9:be:51:17:
         11:63:3b:18:55:6d:6f:45:be:86:53:64:5a:e9:07:a1:dc:cc:
         9d:05:63:35:a7:f3:a5:2c:2b:ae:82:c2:0f:2c:1b:af:36:69:
         4c:59:d3:b1:92:61:50:32:52:7f:ca:7e:aa:f3:27:f6:3e:b8:
         c1:63:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:24:28 2026 by rpki-client