Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
File:                     1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft (raw, json)
Hash identifier:          Q2zyYQIHP4nYyU1ByanQx+l7OymnQ/vjLPMhL/hnpyw=
Subject key identifier:   09:96:FC:D1:83:EC:83:A3:56:46:8B:71:9F:BF:7E:A8:BC:5D:D7:0B
Authority key identifier: F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2
Certificate issuer:       /CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2
Certificate serial:       01A040F2D5B29283003E94718F1DCF99D878
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
Manifest number:          0328
Signing time:             Thu 27 Aug 2026 02:00:51 +0000
Manifest this update:     Thu 27 Aug 2026 02:00:51 +0000
Manifest next update:     Fri 28 Aug 2026 02:00:51 +0000
Files and hashes:         1: 1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl (hash: hUgWezQKuKj4DNOU9Xf4Odei/XyzosH6dLPpiz0vdes=)
                          2: QzF6zdAmWlqa8MJWx9j94DfMPOM.roa (hash: GR81IrpEx4ZIKShy/solAKxjvbcjUDvmJG95WKquc+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:f2:d5:b2:92:83:00:3e:94:71:8f:1d:cf:99:d8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2
        Validity
            Not Before: Aug 27 02:00:51 2026 GMT
            Not After : Aug 28 02:00:51 2026 GMT
        Subject: CN=0996fcd183ec83a356468b719fbf7ea8bc5dd70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e9:54:22:dc:ad:16:c1:26:01:70:ca:9e:02:
                    74:2c:d5:2d:83:f1:22:9a:39:f4:5e:e9:b7:5b:1f:
                    f2:dc:4f:2f:6f:58:44:66:e2:c2:2c:e1:18:10:08:
                    96:c1:89:1f:da:5e:3b:49:2a:56:3e:51:61:68:73:
                    cc:d5:3a:bc:39:c3:78:00:47:53:2d:43:a5:a2:6a:
                    db:49:2b:3f:01:1c:02:a3:af:18:76:04:50:3e:ce:
                    d9:56:7a:9a:f7:80:09:a7:45:1d:63:ea:af:25:c9:
                    9e:9f:1d:20:49:da:e2:ab:e9:45:52:09:8a:c6:57:
                    71:da:e5:04:aa:f1:57:06:3c:8c:a8:77:f9:45:bd:
                    e5:15:1a:0d:0c:1e:d7:e2:40:d3:84:43:b7:a2:9e:
                    41:8e:08:d2:4b:3a:d8:10:82:a4:c0:b7:fd:86:09:
                    df:2b:24:b0:4f:33:ba:b4:eb:e4:ae:12:1b:b9:ec:
                    1d:20:ff:a8:b0:dc:a6:9d:b7:9d:e2:30:57:b8:7b:
                    06:db:83:da:56:6b:a7:c6:71:a7:89:ae:55:dc:aa:
                    dc:17:1e:87:7e:26:6b:c9:b9:74:e2:8b:64:04:65:
                    49:6d:87:17:03:f3:be:7c:9a:69:c2:58:f5:07:c7:
                    e2:58:b2:43:73:02:8d:4f:a0:ad:7e:6d:10:b8:38:
                    f9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:96:FC:D1:83:EC:83:A3:56:46:8B:71:9F:BF:7E:A8:BC:5D:D7:0B
            X509v3 Authority Key Identifier:
                keyid:F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ad:36:29:73:40:0c:c9:26:c9:e6:61:f1:c6:eb:77:5b:c0:
         b5:7d:10:61:e0:4f:a1:71:9c:84:f5:a5:d0:ea:55:fc:f4:23:
         78:a5:d7:28:9d:78:3b:83:21:c9:de:e2:6c:f6:95:4b:00:f8:
         38:b0:4c:20:07:e5:36:6d:a8:2a:f0:60:77:5b:f3:13:58:a5:
         10:25:63:7f:45:b0:a9:17:a1:5c:86:1b:db:55:5c:40:c3:ef:
         aa:f0:5b:2f:19:68:38:19:95:b3:55:0f:5d:36:a1:a1:e0:07:
         10:fc:7d:25:7f:24:70:e6:66:3c:9b:8c:2d:03:bd:af:d2:de:
         4b:cd:2e:a0:ce:3e:71:94:2d:48:c8:a5:e7:6e:da:7d:30:0a:
         98:2f:7b:11:a1:a8:f3:f1:a9:d8:64:bc:86:30:b1:c4:85:eb:
         01:9b:38:8d:7e:1d:03:13:41:50:64:47:3f:76:c7:21:93:e3:
         1a:8d:18:cf:55:cc:79:3b:d2:6c:c6:9e:53:5d:9e:25:05:a4:
         25:3f:c3:53:45:a9:d5:bc:e9:ce:2f:78:35:fd:5a:56:32:af:
         ab:a6:18:a1:e7:02:73:a3:f1:3f:73:6b:9c:4c:6f:06:f8:13:
         8f:a0:32:89:e3:5e:41:3d:9a:1c:67:91:0a:31:ae:0a:62:d7:
         a8:30:56:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:04 2026 by rpki-client