Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
File:                     RjXaOiCHnlX-loU-DXru_1M4bos.mft (raw, json)
Hash identifier:          qdJyjQR24Rpb3cJPn6A1QsBDFmfXC3dc/EIvwTzJmoA=
Subject key identifier:   B6:15:3A:F4:9B:BF:CC:C4:A9:24:E0:5C:95:F0:CD:DC:1B:30:93:20
Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
Certificate issuer:       /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Certificate serial:       01A0E02A9A3E67210E1C5D5005642132D9DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
Manifest number:          0E7A
Signing time:             Sun 27 Sep 2026 00:01:23 +0000
Manifest this update:     Sun 27 Sep 2026 00:01:23 +0000
Manifest next update:     Mon 28 Sep 2026 00:01:23 +0000
Files and hashes:         1: RjXaOiCHnlX-loU-DXru_1M4bos.crl (hash: 21sc1BLoSwtGXLqqrS/uFNQh8VssthBaPGbq93lYSYE=)
                          2: tkGMYK-FRtNdjWKXGGPcl_0HZd0.roa (hash: nr1Jnpu4QEF6XYpXhVbFfyVrl4MGqSq9qg3cEdw2q4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:2a:9a:3e:67:21:0e:1c:5d:50:05:64:21:32:d9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
        Validity
            Not Before: Sep 27 00:01:23 2026 GMT
            Not After : Sep 28 00:01:23 2026 GMT
        Subject: CN=b6153af49bbfccc4a924e05c95f0cddc1b309320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:eb:a7:b2:df:30:28:6b:f0:a5:9c:22:49:
                    7c:b4:bf:a0:ae:d6:e8:5b:69:a9:de:e3:f8:97:79:
                    c0:9a:b7:00:25:02:9b:ff:d2:2c:c5:3b:07:f4:dc:
                    58:2f:aa:1a:f4:cc:e2:9e:8a:89:04:17:dc:08:7b:
                    60:a4:f4:10:0d:70:8a:9b:aa:88:30:36:ac:be:f7:
                    75:42:a7:67:a0:f4:d2:4c:6f:41:82:cc:64:93:01:
                    01:a9:2f:40:fa:8d:14:ec:06:3f:70:07:0c:ac:5f:
                    7b:65:ea:48:18:45:e7:d4:6f:58:19:3d:b9:96:b0:
                    67:0c:65:5a:1a:fb:70:55:d7:6f:b7:98:80:11:4b:
                    c4:65:07:c5:66:71:d0:3e:85:fd:25:02:f2:2f:f4:
                    66:3c:af:da:62:ea:41:79:1c:1d:91:17:0b:bf:98:
                    4c:06:1f:c6:b5:21:c3:cb:20:55:a3:5e:15:ca:26:
                    88:1c:99:8b:18:12:f6:f3:63:e3:c2:2d:b6:6f:2f:
                    c1:2c:c7:9b:1f:50:15:b8:0a:b3:c5:90:e3:40:fe:
                    d0:41:e9:37:56:b8:a9:95:55:61:07:bd:b5:a7:de:
                    4b:ad:c7:83:9b:8d:9f:86:2e:87:46:75:c1:0c:a8:
                    a9:c2:aa:f9:20:f3:1d:5c:cf:53:34:c7:af:85:53:
                    d1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:15:3A:F4:9B:BF:CC:C4:A9:24:E0:5C:95:F0:CD:DC:1B:30:93:20
            X509v3 Authority Key Identifier:
                keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:30:da:50:47:6c:03:9e:ab:f6:d1:5c:5e:d9:01:98:c6:10:
         0a:39:fd:67:39:44:3a:0f:c1:0e:8a:02:3c:76:1d:27:2b:0f:
         18:54:24:5c:2e:23:8b:3b:52:04:a5:d4:5f:cb:ef:2b:0d:b2:
         29:66:11:ef:a0:c2:7a:00:a1:3a:cd:fd:a0:d7:c2:f2:ba:01:
         18:03:b7:02:db:50:7a:e9:7c:aa:68:95:74:ae:fd:23:6d:47:
         02:1a:ce:d2:07:ee:a7:22:01:cb:36:5e:05:a3:8f:6c:e7:aa:
         14:f6:66:25:fe:e7:64:7d:20:95:47:cf:89:d5:17:7c:a6:f7:
         4e:37:fa:a2:de:c0:88:e0:4d:42:37:8c:ab:69:fa:8b:b1:92:
         b4:03:f9:4b:91:25:5f:cb:8f:2f:3a:07:be:c0:00:bd:d3:1a:
         d2:4e:60:4d:71:01:39:0e:6f:8f:93:4c:20:b2:8b:17:1e:5a:
         53:3a:44:26:9c:52:18:0c:e4:4c:e1:06:b9:0f:c5:b4:6f:1a:
         6c:55:ad:5c:91:07:8e:8b:15:fc:62:43:ad:8b:2d:57:af:db:
         92:c3:e4:db:e6:af:39:dd:c0:a3:0f:d8:67:3a:57:88:4e:79:
         67:30:a7:5b:ca:4d:c7:20:07:21:5f:78:ba:01:af:65:01:f1:
         48:07:06:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:17:14 2026 by rpki-client