Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
File:                     RjXaOiCHnlX-loU-DXru_1M4bos.mft (raw, json)
Hash identifier:          iS+SpK4Aj9dZxNfMtB6Aq6nL1XlTOKnktel+jZpUinE=
Subject key identifier:   EC:95:31:E9:EF:B1:2B:59:8E:2D:F7:24:49:CC:B9:18:E7:8A:0E:80
Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
Certificate issuer:       /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Certificate serial:       019F27DA86CD37F594939E35F729B25476C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
Manifest number:          0D96
Signing time:             Fri 03 Jul 2026 12:01:00 +0000
Manifest this update:     Fri 03 Jul 2026 12:01:00 +0000
Manifest next update:     Sat 04 Jul 2026 12:01:00 +0000
Files and hashes:         1: RjXaOiCHnlX-loU-DXru_1M4bos.crl (hash: BRUEvB/+nFM+9vCBkrd7o87KPsU3yG/TdYmReZUTdTY=)
                          2: tkGMYK-FRtNdjWKXGGPcl_0HZd0.roa (hash: nr1Jnpu4QEF6XYpXhVbFfyVrl4MGqSq9qg3cEdw2q4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 12:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:27:da:86:cd:37:f5:94:93:9e:35:f7:29:b2:54:76:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
        Validity
            Not Before: Jul  3 12:01:00 2026 GMT
            Not After : Jul  4 12:01:00 2026 GMT
        Subject: CN=ec9531e9efb12b598e2df72449ccb918e78a0e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:71:cd:2e:98:4b:83:d2:77:a1:49:e8:e9:
                    e8:5d:12:55:56:ca:34:38:2a:ca:45:83:5c:b1:8f:
                    7e:8a:75:fb:f4:69:ce:0d:48:7e:11:f1:33:c3:b0:
                    d9:8f:50:e5:15:80:db:4e:55:6a:b2:8a:b8:ee:4d:
                    94:70:30:03:0b:38:1f:f3:96:0e:16:5a:bc:e7:59:
                    3b:1e:cc:6a:80:95:81:44:71:db:1d:31:fe:ac:cf:
                    58:e2:1d:87:27:bb:4f:aa:1e:08:c1:33:5f:30:07:
                    9d:85:89:0e:e1:b6:29:1c:4e:73:36:0b:a2:55:96:
                    96:b1:f1:a9:ae:eb:5c:d3:df:2b:92:15:d7:d3:3c:
                    cf:1f:f0:09:0a:cc:a8:5d:38:4f:df:c2:c7:aa:18:
                    99:ed:f6:3e:de:ea:c9:a5:4b:71:7f:71:50:b5:2c:
                    e6:2d:db:51:73:ec:02:c9:43:1d:5b:76:70:95:71:
                    d3:1c:a2:c9:cb:b7:d8:62:2c:09:65:85:32:b2:bc:
                    a2:63:ad:ae:4f:4c:6c:a9:6a:4d:95:a2:6c:8c:d5:
                    dc:a9:2a:6f:d6:81:0f:1d:27:67:7b:df:23:6c:b0:
                    e6:1a:05:79:39:d4:2d:4d:1f:d4:69:27:d7:02:43:
                    9a:3b:9f:75:9e:aa:17:54:a4:ff:4f:9a:d6:5f:78:
                    17:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:95:31:E9:EF:B1:2B:59:8E:2D:F7:24:49:CC:B9:18:E7:8A:0E:80
            X509v3 Authority Key Identifier:
                keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ca:55:bf:01:fa:57:51:15:58:97:58:bc:0c:b4:f7:94:78:
         23:75:be:bd:57:4b:60:ce:3e:88:c2:51:16:45:a1:15:be:06:
         c4:e6:cf:83:78:e9:ec:59:c3:d6:2c:bb:94:c6:03:00:cb:2b:
         92:0c:59:a4:b1:76:c4:ef:8d:9b:29:e3:dd:96:60:14:46:d8:
         76:f3:c3:18:63:3e:e0:5b:45:f2:55:61:f9:4c:90:b3:83:09:
         d2:2c:c3:ed:78:a9:65:2c:67:4f:36:1b:86:d9:49:83:7e:01:
         a7:eb:c6:75:4a:70:c8:47:21:b3:a2:fe:38:4b:8d:47:18:6c:
         34:43:14:8f:56:88:13:5a:0b:c8:d8:a8:7a:93:50:06:4e:89:
         26:56:3a:70:d1:21:de:34:11:bc:bc:de:f2:ed:7b:e7:01:89:
         8c:26:e7:93:5c:fe:0b:db:32:73:4f:11:04:8c:7d:29:b6:c8:
         ab:e5:31:96:d8:07:db:ac:a4:28:e3:94:aa:5a:ed:69:b5:79:
         6a:ce:93:b4:41:97:f8:cb:30:76:39:73:80:77:ee:5c:26:8c:
         19:7d:02:03:cb:4e:94:22:9e:07:28:64:1b:d3:c9:ea:44:53:
         9d:32:01:a0:dd:96:bb:90:43:9d:22:6a:37:34:30:d1:02:d7:
         84:8c:78:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:46:00 2026 by rpki-client