Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
File:                     INJjO_-xbaLXXtr0m8ghGHz7iO8.mft (raw, json)
Hash identifier:          sNwKYnjdoK0T9694PhNxDywJrV/v4qAz7PqloxWK6wY=
Subject key identifier:   EE:EA:32:1B:00:E6:AA:B4:87:71:DB:F4:EB:8A:FD:92:B6:58:34:9A
Authority key identifier: 20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
Certificate issuer:       /CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Certificate serial:       019FA07263533DC97FB049B5B8BD949A777A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
Manifest number:          0E47
Signing time:             Sun 26 Jul 2026 22:01:18 +0000
Manifest this update:     Sun 26 Jul 2026 22:01:18 +0000
Manifest next update:     Mon 27 Jul 2026 22:01:18 +0000
Files and hashes:         1: INJjO_-xbaLXXtr0m8ghGHz7iO8.crl (hash: FX1WqutdTmIrw7Qajf1J8OrbYaODhRSwWlx0sWjBgTA=)
                          2: p_-g8PelWdmqsdjOIMd952nJEQ0.roa (hash: SNcHznir+SSpk2nPwXwbT8vISszxA2KZ7EJsOdYVxCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:72:63:53:3d:c9:7f:b0:49:b5:b8:bd:94:9a:77:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
        Validity
            Not Before: Jul 26 22:01:18 2026 GMT
            Not After : Jul 27 22:01:18 2026 GMT
        Subject: CN=eeea321b00e6aab48771dbf4eb8afd92b658349a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b3:84:14:78:2d:fc:6b:79:84:98:cc:aa:4f:
                    ca:5f:88:27:5f:f0:15:e5:9c:53:14:b8:cb:c6:f2:
                    2d:a0:fc:f1:81:b8:9f:32:27:e1:ef:9c:82:0e:2d:
                    e5:61:8a:9e:28:41:56:37:b9:c2:1d:b9:38:c5:17:
                    88:52:bf:03:2a:80:e9:f7:38:c9:a4:75:f3:d7:7d:
                    7a:42:02:0e:54:38:37:d1:6e:b7:6b:be:c7:f5:e3:
                    b6:13:40:98:fb:6f:8c:03:5e:25:10:cc:87:80:b8:
                    82:28:2b:4d:4e:54:be:ae:9b:93:af:96:d4:ba:59:
                    f5:34:5c:5a:f7:0f:a9:9d:2a:5b:cd:93:27:75:5f:
                    31:06:50:da:a2:86:e3:9a:7d:c8:4e:d0:e3:5a:cd:
                    0a:43:82:a0:e1:64:c8:d2:89:16:ba:61:c8:42:df:
                    2b:c1:4d:1e:b2:07:32:b3:87:c9:33:e5:55:23:02:
                    5e:c7:82:a3:84:3c:d7:bb:d0:df:fa:d7:da:5f:4e:
                    fb:6c:12:f4:ec:51:9c:66:dc:ec:45:96:e9:80:a2:
                    80:b8:76:47:d2:de:48:a2:c5:4c:04:d3:1e:c9:a1:
                    a5:26:bd:e0:84:99:96:93:2e:97:b7:3a:ef:36:31:
                    39:3b:86:23:df:1c:05:e6:be:a0:fa:a7:23:34:d9:
                    b9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EA:32:1B:00:E6:AA:B4:87:71:DB:F4:EB:8A:FD:92:B6:58:34:9A
            X509v3 Authority Key Identifier:
                keyid:20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:62:06:80:f6:8c:4d:1f:7c:3f:f5:2d:c7:67:a7:a1:5c:d6:
         e7:69:8b:ed:5d:83:8a:4b:4e:dd:67:ba:74:ec:a4:86:c7:b5:
         08:3b:16:aa:0d:a2:f1:ec:ad:87:5f:ab:8e:43:2c:a6:d6:d1:
         45:3e:ac:a7:db:b3:f0:4c:8e:4e:73:02:3d:9b:60:7b:57:5c:
         70:fc:45:f0:7a:6c:e9:76:90:f9:29:db:6d:5e:47:ba:d3:8c:
         e1:40:df:50:63:d1:73:fb:23:29:ff:ed:88:36:6c:68:6c:c7:
         ba:39:1d:43:23:97:28:7d:5a:59:47:9b:a6:c5:82:f9:45:16:
         23:d7:16:b4:e7:09:cd:dd:1a:92:cc:86:ee:62:e0:55:21:d6:
         47:31:67:b9:dd:8a:93:a9:4c:88:18:78:e5:22:1e:2f:76:70:
         d9:3c:7d:ee:23:89:ff:ac:52:df:2e:cb:ff:dd:3b:be:27:f6:
         cb:e9:13:7b:4f:b9:70:5a:7f:a2:8a:ac:89:f8:09:ac:c2:44:
         57:9e:7f:8e:cb:07:f4:04:08:b9:57:fc:37:39:ae:37:cb:95:
         c7:30:a8:6e:b5:cd:0c:d2:47:e8:ff:e6:33:bc:5b:0e:3f:12:
         80:6e:08:9c:9e:61:cd:9f:7e:06:ab:bd:b0:15:96:6e:a3:34:
         47:a2:ed:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:38:07 2026 by rpki-client