Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File:                     jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier:          /YWm1I8eso1ffqZDolaq437bWPrYhx6b0GHhO8Cg3xo=
Subject key identifier:   FA:7B:DD:59:C7:37:11:53:7E:DF:DE:BB:38:1A:ED:C6:41:5C:55:8D
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer:       /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial:       01A08D1F823336012831AB0D7E3C3E65A19B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number:          1130
Signing time:             Thu 10 Sep 2026 21:00:47 +0000
Manifest this update:     Thu 10 Sep 2026 21:00:47 +0000
Manifest next update:     Fri 11 Sep 2026 21:00:47 +0000
Files and hashes:         1: 5wC3q6B54eAcdpMGYy8JKiEzECU.roa (hash: YD5/mldtyyZxQxTmZPfE5GxbPet+CghI1yjmDd9E8V0=)
                          2: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: W+AZIuk93ETb9lxfbolgx41kvrG/stzRbYGEj/CrnQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:1f:82:33:36:01:28:31:ab:0d:7e:3c:3e:65:a1:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
        Validity
            Not Before: Sep 10 21:00:47 2026 GMT
            Not After : Sep 11 21:00:47 2026 GMT
        Subject: CN=fa7bdd59c73711537edfdebb381aedc6415c558d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c1:80:ce:98:08:b2:3b:5e:06:e4:fb:6a:48:
                    d7:b3:f8:5a:4f:6f:47:fb:9d:ba:28:fa:2f:d1:4f:
                    75:30:93:58:4f:70:19:f3:bd:9a:57:a7:13:e9:aa:
                    34:c3:35:2b:2a:e4:93:8c:cc:03:39:a8:84:52:ca:
                    3c:a3:52:51:0f:2d:ca:56:d0:03:44:6f:dd:72:c1:
                    cd:77:6f:07:42:c0:55:58:cc:62:a1:bb:da:d3:e1:
                    5d:36:84:14:a1:79:de:b8:1b:17:61:f9:6f:f1:5a:
                    85:79:b8:d4:89:53:21:9e:ce:ad:0c:93:c9:e7:e5:
                    b3:6b:10:ed:86:e3:31:2e:23:6a:4f:ce:32:d3:18:
                    37:19:20:fb:45:c1:05:ab:d2:64:de:ea:d8:53:65:
                    c2:06:e7:de:49:89:c0:55:fa:8a:7e:31:42:b4:1c:
                    e5:1b:5b:fc:47:0c:dc:9c:09:51:fb:4e:46:ae:90:
                    b6:55:62:68:b7:12:56:74:38:0e:da:01:85:e3:60:
                    da:fb:b6:0f:f1:c9:a6:f0:37:e6:65:23:a7:02:90:
                    fe:6a:81:6f:04:7b:3f:35:f9:0f:fe:18:c8:47:9b:
                    c9:c7:87:dc:33:48:60:62:a8:6f:e4:24:05:87:0c:
                    b4:f1:46:c4:3e:17:eb:2e:f4:e6:a4:1e:f4:48:6e:
                    09:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7B:DD:59:C7:37:11:53:7E:DF:DE:BB:38:1A:ED:C6:41:5C:55:8D
            X509v3 Authority Key Identifier:
                keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4f:c8:8a:71:d2:19:8f:28:e3:ef:27:2e:19:c0:21:d8:68:
         b4:5d:ea:27:41:cd:82:7a:a6:c4:69:f6:ee:85:53:9b:46:03:
         a3:99:f1:d1:33:e2:06:e5:75:81:bc:c4:19:a1:b7:ff:fd:e8:
         0c:44:cf:df:01:35:76:73:16:84:27:4d:17:40:12:96:e9:47:
         4b:ba:61:03:c8:3d:4c:6b:7f:0d:f4:a6:19:e5:84:38:e8:1b:
         bb:af:c4:00:3e:5c:ea:84:11:5c:e0:69:8d:c6:1d:f6:a0:3b:
         a8:72:82:fe:54:17:ea:56:3e:3f:7b:96:f1:8d:81:3b:ca:e0:
         8f:fa:05:88:c5:f7:63:43:6d:4b:aa:08:30:e4:32:70:fd:fd:
         2d:7e:4e:ab:84:60:79:f7:f9:6b:63:ea:e6:2b:6a:5b:a6:49:
         1f:f9:7c:67:bf:b3:e2:4e:3f:32:51:ab:c4:7d:21:d9:2c:57:
         98:2a:11:2f:a3:5a:f2:e3:9a:d0:08:2f:22:2f:c0:f8:60:33:
         c4:fa:b1:16:2b:f3:d7:56:69:41:f9:1d:58:31:20:57:3c:67:
         18:5c:e3:9c:7a:14:95:2d:87:88:1e:26:a1:1c:d5:db:25:32:
         b0:51:7f:21:0b:67:d1:3b:89:38:f4:13:33:cc:4b:94:22:e7:
         1c:06:ed:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:07:36 2026 by rpki-client