Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
File:                     C4JANE7t1v9gI0SCv8MAHW4boJk.mft (raw, json)
Hash identifier:          s00/IeXEjXKB2x1YY6aHOd71kFfB0k8OXH2XOkkb8vg=
Subject key identifier:   12:0B:C8:65:BF:39:54:B2:1B:AF:33:36:19:EE:9D:BA:E2:58:C6:20
Authority key identifier: 0B:82:40:34:4E:ED:D6:FF:60:23:44:82:BF:C3:00:1D:6E:1B:A0:99
Certificate issuer:       /CN=0b8240344eedd6ff60234482bfc3001d6e1ba099
Certificate serial:       019F9022A0ABD4FCB81EE7A4AADE9BD133EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
Manifest number:          03F4
Signing time:             Thu 23 Jul 2026 18:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:16 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:16 +0000
Files and hashes:         1: C4JANE7t1v9gI0SCv8MAHW4boJk.crl (hash: tNlbWDw4sYznamNsuDg0BN78vTK+175QWy5LhInyss0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:a0:ab:d4:fc:b8:1e:e7:a4:aa:de:9b:d1:33:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8240344eedd6ff60234482bfc3001d6e1ba099
        Validity
            Not Before: Jul 23 18:00:16 2026 GMT
            Not After : Jul 24 18:00:16 2026 GMT
        Subject: CN=120bc865bf3954b21baf333619ee9dbae258c620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d6:f3:9f:51:b7:7b:a6:aa:d3:3a:41:1b:4c:
                    90:34:84:0b:81:c2:25:80:4f:99:df:6a:61:7b:cd:
                    16:f6:8e:bb:38:c6:e1:64:fc:c5:23:00:9d:5c:42:
                    d6:aa:78:cf:cc:d7:97:66:91:eb:61:17:13:1f:b0:
                    ce:69:07:fa:e9:47:df:62:bb:87:87:ba:84:1e:b7:
                    41:f1:4d:0a:b5:6e:4a:75:6e:53:dc:b8:86:f1:7f:
                    d5:8f:0a:e7:d1:13:94:1b:56:d9:5f:ff:a0:c5:6c:
                    f9:c4:46:93:bf:c4:7b:c8:84:b3:bf:1a:82:46:46:
                    b7:3d:47:bb:62:7f:2f:ca:10:51:ac:0f:7f:8a:89:
                    3d:05:cf:80:07:b1:94:90:9a:43:37:93:7c:31:15:
                    3e:a8:43:40:48:fb:68:1a:d4:e9:e0:7d:5c:7c:3c:
                    57:61:eb:b1:b0:b9:7a:1b:ed:1b:f7:5e:28:8e:90:
                    35:97:f0:eb:1d:21:22:e0:20:42:13:a5:48:11:c5:
                    2e:7e:c9:bb:53:46:14:5e:8b:f9:d7:6a:a4:37:7a:
                    68:1e:68:73:c4:08:5d:74:b5:f2:b0:9f:af:a7:43:
                    03:7d:0f:2a:c3:04:08:4c:f9:40:24:9a:06:e6:6a:
                    26:98:4b:e9:22:85:f8:bf:fb:70:50:22:cc:bf:2d:
                    0a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0B:C8:65:BF:39:54:B2:1B:AF:33:36:19:EE:9D:BA:E2:58:C6:20
            X509v3 Authority Key Identifier:
                keyid:0B:82:40:34:4E:ED:D6:FF:60:23:44:82:BF:C3:00:1D:6E:1B:A0:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:67:56:f6:bc:9b:61:e4:0d:85:cf:3e:83:39:ac:16:90:8d:
         a2:ad:00:a3:f9:fd:11:34:83:42:00:c1:7d:fc:10:79:f7:b8:
         9d:41:56:15:98:5b:eb:5c:e7:f9:10:65:1b:d5:23:4d:77:cf:
         67:ed:fa:24:e2:70:03:87:00:88:fd:49:24:17:cb:c8:ef:53:
         e7:b6:08:10:e1:b4:ce:c6:a1:cd:22:97:23:58:b8:8d:f3:f3:
         03:cf:3d:9d:96:c5:a4:fd:3b:fd:29:cd:e0:ad:f4:ab:ff:67:
         77:c4:ca:98:a4:cc:04:72:b3:c4:8b:39:9f:66:ef:40:c3:d5:
         3b:20:90:93:7d:03:e5:29:03:e3:f4:e5:4c:0a:17:a3:ed:cc:
         5a:25:35:2c:1f:5a:03:15:41:eb:8b:aa:82:a0:04:eb:f5:cf:
         e0:48:75:74:32:12:5e:65:50:d3:f4:2f:b9:11:b9:fe:3a:a3:
         d0:30:fb:a2:13:96:81:59:f5:c7:5b:02:1a:b7:5c:26:8e:42:
         72:8d:27:ec:b1:bd:65:d0:b6:a6:f0:ae:2b:2d:36:5b:11:0d:
         74:ac:8f:28:22:4d:20:68:01:35:e7:5c:c1:01:38:2c:a5:61:
         18:f9:1b:49:ea:2f:72:6a:ab:e9:ca:5b:f4:06:f7:83:3c:93:
         7e:ae:8d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:11 2026 by rpki-client