Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
File:                     jWIohbCUzKumvc5vw6r92Pqn51Y.mft (raw, json)
Hash identifier:          yX/J3OHc3neFNvUQg8JsdP1E2BCkxD+dPj70I+l/ob4=
Subject key identifier:   D7:CF:B3:76:29:88:42:F7:4D:C6:AF:68:02:A7:A3:4A:44:EC:5E:3F
Authority key identifier: 8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
Certificate issuer:       /CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Certificate serial:       01A08C0D9D610191E051C31703768A62CF19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
Manifest number:          0B67
Signing time:             Thu 10 Sep 2026 16:01:37 +0000
Manifest this update:     Thu 10 Sep 2026 16:01:37 +0000
Manifest next update:     Fri 11 Sep 2026 16:01:37 +0000
Files and hashes:         1: jWIohbCUzKumvc5vw6r92Pqn51Y.crl (hash: h4LB2Z0x/nCwFzKOTY9r15lwHUTFdneBiJoR8THKVVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0d:9d:61:01:91:e0:51:c3:17:03:76:8a:62:cf:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
        Validity
            Not Before: Sep 10 16:01:37 2026 GMT
            Not After : Sep 11 16:01:37 2026 GMT
        Subject: CN=d7cfb376298842f74dc6af6802a7a34a44ec5e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:80:e7:5c:00:f3:82:b0:42:f5:89:38:ae:
                    9f:9f:ce:82:f1:15:6a:78:9f:b7:9d:c5:09:ff:75:
                    9c:7d:ea:95:1a:e5:9e:1b:44:94:7d:ba:89:bc:92:
                    5c:03:28:e2:e1:6e:76:4d:38:79:ff:05:26:29:a5:
                    22:af:4e:c6:e9:8d:a7:4f:5f:93:67:98:95:dd:1d:
                    00:e0:92:46:16:aa:f9:58:81:c3:27:b6:89:43:60:
                    92:a2:81:08:1f:8d:81:9d:18:01:61:9b:74:f0:df:
                    96:45:b6:5b:3f:85:0a:c8:42:3e:78:0c:d9:91:1d:
                    df:29:49:5d:71:4c:6a:da:3a:18:a8:a8:ea:3b:23:
                    93:af:8e:cd:73:ee:cf:33:a8:b7:f0:3a:ac:b2:2f:
                    c0:e7:d9:29:6f:98:8d:db:4e:fe:08:11:c8:48:50:
                    cf:5b:f0:76:88:59:a2:f8:49:10:cd:17:94:6e:8f:
                    1f:fa:e3:9e:a0:99:51:df:21:3c:a7:e4:43:b9:6b:
                    8f:8b:0f:a8:e0:3d:1c:60:1f:54:6e:71:6a:22:f5:
                    68:f6:db:7e:0d:84:67:9f:7b:46:3e:e7:e3:d8:62:
                    31:98:e4:18:71:fb:a6:cc:02:dc:e4:c1:70:b7:ff:
                    82:23:f5:47:ae:e0:9a:bb:04:03:d7:b1:3b:7a:60:
                    65:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CF:B3:76:29:88:42:F7:4D:C6:AF:68:02:A7:A3:4A:44:EC:5E:3F
            X509v3 Authority Key Identifier:
                keyid:8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:53:5b:bc:3d:36:c6:04:aa:1b:18:87:70:4f:93:6d:1b:e2:
         ee:dc:d7:07:97:b3:2a:af:82:c5:f4:87:4f:20:6a:0d:c7:86:
         32:3e:bb:d2:13:1b:0c:96:20:59:f9:e3:59:46:95:97:fc:19:
         fe:5f:0e:87:0c:44:79:17:34:e3:b6:9f:a6:d2:e6:98:1e:04:
         2b:8b:f4:48:b1:f3:92:20:60:ea:b9:0e:c9:07:f7:68:ce:8f:
         dd:ed:c7:ff:96:aa:49:2b:26:51:c1:c9:9a:63:b3:c9:ff:dd:
         7f:58:61:4f:5f:36:61:f0:ff:e5:02:5d:fb:30:cc:e5:fd:38:
         2e:f7:b1:85:71:56:cb:c4:55:d2:be:2e:69:18:0f:22:e6:30:
         ee:83:60:8f:60:f6:74:4f:b9:6f:88:9a:7a:62:26:fd:e5:3d:
         5f:11:b9:8f:34:2a:a2:ee:a3:09:d6:57:b8:04:ff:e2:66:a0:
         32:81:25:15:4f:ca:00:15:cc:1f:c9:22:26:53:da:d8:e8:3f:
         de:b2:37:42:30:ef:86:f5:0b:68:81:41:6f:df:ea:55:e2:05:
         32:c1:0c:66:ff:d1:49:d5:5b:0f:6e:48:83:86:0e:3f:b9:f1:
         0e:0d:55:8a:14:6c:ef:2a:38:80:5a:74:fb:4d:60:1b:2c:94:
         ed:94:71:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:07:49 2026 by rpki-client