Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
File:                     j7x_Fwe20LIrzYGA9Puxtj78mfk.mft (raw, json)
Hash identifier:          KCD2mtj6A+6bPupsG6JVJ8pE8x/G2QLNag56YNXnRTU=
Subject key identifier:   F8:EC:08:7B:57:8A:81:D5:99:04:2B:DC:73:1F:35:CC:17:2E:94:56
Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
Certificate issuer:       /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Certificate serial:       01A0DC16938B680EF3E1617B9D55B51AD06E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
Manifest number:          1A73
Signing time:             Sat 26 Sep 2026 05:01:02 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:02 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:02 +0000
Files and hashes:         1: 7OTQnzrbHyXo119EfPUpBJCKYHw.roa (hash: 2rynQETuFSP28J9DNP84gVl8Pw/3bThUsvE7hH2G5gw=)
                          2: MsTpS_9Ef3SDy2PLq6WfNUkYizQ.roa (hash: Ea2AJU7gEy/xVP6HsAboTHLHs8TQfaChyqKqx20NTwM=)
                          3: j7x_Fwe20LIrzYGA9Puxtj78mfk.crl (hash: 9n9goawKfiS9vq+0IQMNMgFVfpKr8C7rka8yG0Huzfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:16:93:8b:68:0e:f3:e1:61:7b:9d:55:b5:1a:d0:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
        Validity
            Not Before: Sep 26 05:01:02 2026 GMT
            Not After : Sep 27 05:01:02 2026 GMT
        Subject: CN=f8ec087b578a81d599042bdc731f35cc172e9456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:84:f3:29:2a:16:96:8b:87:11:0f:64:c5:8a:
                    15:2e:96:01:da:d3:f5:74:72:fc:bb:5b:d0:b1:8e:
                    7b:df:1e:ae:7e:bc:0a:06:b6:a7:e1:cd:a4:60:83:
                    d3:c7:3b:33:77:0a:23:45:de:66:e5:14:85:f9:d9:
                    93:5f:4f:48:b9:f6:16:4a:08:1a:0e:7d:e1:96:11:
                    c7:5f:65:20:b4:e2:a8:52:c2:09:a6:d4:63:d6:f2:
                    d5:65:13:c5:ff:13:99:fe:a9:0c:84:96:43:c2:4a:
                    81:aa:77:3e:61:55:c7:4a:0b:d9:f0:dd:3b:29:87:
                    82:33:09:3c:f2:4a:53:38:40:0b:c1:66:cc:5f:9e:
                    6d:6c:0c:1e:a7:4f:7c:ba:51:c7:2d:99:12:73:19:
                    c8:07:bd:c7:f4:bf:37:9b:48:98:d1:e8:1c:2e:2c:
                    37:30:a3:16:ff:1d:57:56:bf:55:8c:93:cf:3c:06:
                    06:66:eb:bc:9b:b8:0c:9d:d8:d9:1e:ed:65:ed:b3:
                    77:2e:16:86:56:0a:9a:48:52:44:bc:9b:30:61:9f:
                    c4:e8:17:fb:65:dd:2d:91:e7:77:b0:d0:7a:0d:de:
                    72:a8:5a:95:88:25:26:8f:be:34:a0:48:3c:46:41:
                    a8:9c:36:8f:c8:7f:52:00:e6:e9:d7:57:05:92:40:
                    82:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EC:08:7B:57:8A:81:D5:99:04:2B:DC:73:1F:35:CC:17:2E:94:56
            X509v3 Authority Key Identifier:
                keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c1:93:75:f4:83:18:c3:14:a4:4b:8c:7e:7c:84:13:9d:d3:
         60:37:93:54:a8:b4:ba:b8:3b:9c:9c:f4:c3:45:63:03:38:23:
         b0:43:df:36:88:18:ca:c7:69:41:54:1f:b8:f5:4f:0f:c1:28:
         ae:29:51:03:45:69:81:0b:28:ea:69:08:db:a6:85:c1:86:51:
         b6:d2:78:f7:48:f2:dc:e7:71:5a:11:c9:b9:b8:10:0b:fd:57:
         7d:57:cb:30:19:e3:8a:dd:0a:ec:af:ca:8a:3a:81:b2:dc:0a:
         28:ba:c1:f6:e8:f7:e2:ce:4d:56:55:03:b9:a7:3d:6e:2d:92:
         eb:9e:4b:01:19:ed:30:5c:5b:1b:53:b9:8b:4b:92:68:11:0d:
         6f:18:02:d7:87:bc:a4:e2:23:95:fd:f2:a0:75:9e:87:7c:59:
         df:41:08:ec:d3:11:3c:ca:e5:2e:e6:40:5e:e8:35:07:e0:a3:
         be:38:d6:4e:44:6e:58:c6:e9:2d:f5:46:b6:96:96:8d:f3:b6:
         12:27:cd:64:c1:40:17:27:ac:70:df:29:03:48:25:d7:4b:1e:
         88:b2:0b:f8:fa:67:35:f6:9f:a1:b7:0a:82:df:e5:99:75:ad:
         dc:f9:47:86:54:18:0e:93:01:db:78:47:28:87:ca:06:cb:37:
         71:26:30:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:31:32 2026 by rpki-client