Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File:                     JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier:          IR7fzhRriJ3BEoCrRDeBje6OZB0l7QCqCSoCidJpyfY=
Subject key identifier:   57:94:29:C3:74:6C:EB:1E:55:0B:A3:57:74:BB:3E:76:D4:D2:85:D7
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer:       /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial:       01A06E705437C751FABA468F3E554AE36410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number:          16CE
Signing time:             Fri 04 Sep 2026 22:00:50 +0000
Manifest this update:     Fri 04 Sep 2026 22:00:50 +0000
Manifest next update:     Sat 05 Sep 2026 22:00:50 +0000
Files and hashes:         1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: ZX8wZkrwemzb3ab+93GVhFY+ta0yMg4XglPaEvIItAo=)
                          2: UTiXqpOnXnL7SsApTxG7VdzoF_M.roa (hash: xvzfHxziNr26zYJwG+snS1syo+ysKboS5MzS0bjlx5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:70:54:37:c7:51:fa:ba:46:8f:3e:55:4a:e3:64:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
        Validity
            Not Before: Sep  4 22:00:50 2026 GMT
            Not After : Sep  5 22:00:50 2026 GMT
        Subject: CN=579429c3746ceb1e550ba35774bb3e76d4d285d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e4:b6:d3:14:fa:fc:60:13:a7:c8:f3:b6:83:
                    07:7d:da:e2:8a:90:53:14:a0:9f:8f:71:d0:88:04:
                    08:f3:d3:2e:5c:dd:d9:48:7e:f7:fa:f6:2d:97:d0:
                    b5:aa:35:37:14:e8:7d:0a:df:62:eb:fd:29:8a:95:
                    0d:1c:fd:c5:e3:50:3c:4e:2a:4a:a1:56:55:dc:9d:
                    6d:24:e7:66:b5:d4:69:1e:12:6d:48:77:5c:7a:bc:
                    19:1a:33:a7:9f:82:9d:99:24:1a:9a:f4:01:b7:78:
                    3c:82:6e:4a:77:14:51:31:f6:96:57:f0:5a:69:38:
                    ed:13:e4:f6:6c:d6:4e:90:18:4e:1c:23:4c:8e:04:
                    69:cd:55:7e:fa:92:12:4f:05:a2:d5:26:96:c9:d6:
                    5a:53:89:f1:18:1c:6d:58:1e:2b:49:4b:42:40:47:
                    55:5b:8d:c2:dd:43:f9:6d:0f:e9:ca:f9:42:1a:03:
                    39:98:4b:61:c0:18:e5:52:31:77:97:13:9d:7b:48:
                    a1:91:7a:75:56:de:b4:a2:81:a2:15:d0:36:5e:a7:
                    eb:f4:9c:cc:2c:08:09:9a:84:65:a9:58:40:6b:0a:
                    98:b8:1f:04:72:22:88:25:42:da:d7:a9:78:28:9f:
                    30:89:41:2e:be:d2:e6:6a:10:7e:3f:6a:50:30:64:
                    5d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:94:29:C3:74:6C:EB:1E:55:0B:A3:57:74:BB:3E:76:D4:D2:85:D7
            X509v3 Authority Key Identifier:
                keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:03:4d:43:83:ac:58:f3:b6:15:42:45:37:d8:33:35:df:75:
         2f:c5:c4:80:66:65:8c:ee:20:32:9c:d6:47:51:bf:53:59:5e:
         3b:10:66:85:c1:2a:c9:6f:99:88:7e:1e:40:0d:50:e9:5f:d8:
         5f:fc:d5:b2:9f:8e:37:fe:f3:2d:5f:29:f1:ac:68:8d:e6:be:
         c4:3f:a5:51:ca:ef:bd:35:ba:a8:0a:f0:ef:96:af:40:d4:fd:
         50:55:b1:7d:96:03:6b:5a:2f:56:44:99:da:90:51:15:77:bd:
         e4:23:be:5a:a7:f6:82:be:b6:63:da:40:95:07:4d:7b:29:91:
         9a:72:06:54:7f:85:00:8a:e5:ea:d8:3f:e4:aa:f5:8e:38:90:
         c8:12:66:a3:3e:73:69:91:59:c4:47:12:20:64:66:8e:ad:87:
         32:48:e7:0f:19:68:08:24:4a:17:20:bb:7e:61:f3:a0:c3:97:
         f8:cb:a5:ad:9b:d9:e7:7d:c5:16:9b:42:07:db:d3:c6:d9:1f:
         a2:89:01:05:7b:09:0d:7b:1e:72:83:e9:81:cb:26:ae:ee:92:
         de:da:7e:0f:89:c5:98:e5:54:8c:5a:cc:b8:e3:3e:c5:5e:30:
         1d:b1:53:cc:84:0a:e0:c2:63:e0:a1:3e:0d:2a:9e:26:79:c5:
         a2:1b:5e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:29:43 2026 by rpki-client