Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.mft
File:                     4JnuB4Iu8qzpw1b3tCyur_JclpI.mft (raw, json)
Hash identifier:          0Mmf4nGqlX3ZpUqL+OGuOIco4joUf2nmpsrVOCzXUBo=
Subject key identifier:   2B:12:0B:4A:A3:9B:76:A1:20:69:08:4A:E5:BD:8B:89:47:EE:E3:37
Authority key identifier: E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92
Certificate issuer:       /CN=e099ee07822ef2ace9c356f7b42caeaff25c9692
Certificate serial:       01A0E92ED5DB8758880216E7C0055B57E552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.mft
Manifest number:          07EB
Signing time:             Mon 28 Sep 2026 18:02:35 +0000
Manifest this update:     Mon 28 Sep 2026 18:02:35 +0000
Manifest next update:     Tue 29 Sep 2026 18:02:35 +0000
Files and hashes:         1: 4JnuB4Iu8qzpw1b3tCyur_JclpI.crl (hash: oCFr2IZMhvz/uWV4PzTQyOa3NG2wyvtixgg4pt0z0vI=)
                          2: DoGyB14STWX2UR3bzJmke-eTFHA.roa (hash: iwd7dmYym0QI3TFrvU2UUskQhhf5/cQs6EpNXGc3O7c=)
                          3: GfbboUejcygKy17brSOfqZ4eDdk.roa (hash: irmYduqzlmbNFPfYewI8h6OX66ddl6UWbAcAOEYjSfk=)
                          4: W3mDWk-yX43SfEuIDPvSS8D3nbg.roa (hash: 6Fp0tYMbgERrKCohYpQJdAdM9X8lrB8a3jTQb1AWLyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 14:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:2e:d5:db:87:58:88:02:16:e7:c0:05:5b:57:e5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e099ee07822ef2ace9c356f7b42caeaff25c9692
        Validity
            Not Before: Sep 28 18:02:35 2026 GMT
            Not After : Sep 29 18:02:35 2026 GMT
        Subject: CN=2b120b4aa39b76a12069084ae5bd8b8947eee337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c9:6c:5a:c0:ce:59:7c:ba:a4:7a:6d:0b:20:
                    d9:cd:0c:90:e2:d4:a7:19:96:86:e4:6a:01:3d:b4:
                    ed:e0:95:28:5f:49:4c:fb:f9:3d:ef:59:95:6a:c0:
                    9a:06:44:d2:fc:5b:f2:4e:7c:66:c3:4a:99:89:03:
                    46:be:8e:7e:8c:6f:c9:ea:24:d3:95:c8:89:a5:e9:
                    cd:3c:6d:8c:27:28:3b:f2:77:08:1f:0a:c2:0b:0f:
                    56:91:8b:ab:ea:77:f1:dd:0c:72:9e:28:b8:c1:20:
                    50:ac:cf:4a:52:df:78:22:74:66:6e:60:8a:6b:91:
                    54:a0:fb:66:5b:b8:7c:0b:71:b6:e6:40:6b:8a:d0:
                    2f:8d:18:32:2d:97:fa:9a:55:9f:73:1e:63:bb:25:
                    a6:64:d2:ab:3e:ff:e2:24:f5:8d:04:b1:d2:53:1e:
                    19:5f:a5:ab:ce:92:c7:ac:5f:06:0d:3a:e3:cf:ac:
                    83:de:b7:8a:e5:11:1b:08:c3:da:d6:21:24:4e:b6:
                    fe:8b:40:72:cf:38:d2:ce:ea:6c:79:cc:3d:e0:e2:
                    a3:19:41:c9:11:da:35:54:c0:65:6c:1f:70:30:3c:
                    18:7d:bb:8b:ab:52:1f:6b:48:10:c5:02:16:79:eb:
                    ae:64:ce:c2:e7:1c:9f:c8:b8:9f:79:d7:fc:53:f6:
                    de:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:12:0B:4A:A3:9B:76:A1:20:69:08:4A:E5:BD:8B:89:47:EE:E3:37
            X509v3 Authority Key Identifier:
                keyid:E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:4f:1e:ef:b0:9f:ce:a6:55:d3:a3:a8:c6:96:6b:aa:0d:2b:
         ed:33:11:f3:7e:01:74:d1:37:c4:6c:e6:7c:19:f9:04:30:2c:
         5d:a6:9b:5f:3e:1e:77:d6:d5:49:c8:34:e2:40:35:2d:dc:50:
         93:99:cc:f3:1d:49:78:39:5a:e9:92:b2:8c:0c:a0:47:c8:46:
         ac:08:4e:ce:87:98:6b:91:c8:7e:19:a4:54:15:c9:27:71:49:
         f8:a4:03:6c:4d:bc:2d:32:07:9b:46:ec:19:ce:30:88:c8:09:
         db:39:6d:9c:bb:a5:12:f6:e0:96:fd:5a:65:f4:07:07:f2:5a:
         05:54:05:4f:fd:1d:35:f0:e7:05:bd:1c:db:36:5e:40:88:95:
         43:4c:b1:dd:6e:9b:85:bb:77:03:45:cb:1a:8d:d9:7d:8c:46:
         7a:08:89:9a:69:22:8f:84:24:0b:e5:b4:16:09:0b:02:5b:85:
         5d:70:76:0c:f7:d9:db:52:39:2b:ab:80:d4:d5:19:d0:f2:da:
         7f:24:0d:59:70:54:d1:27:94:cc:98:ae:c3:0a:1b:90:ec:64:
         1e:71:f8:20:4c:25:e5:c9:c1:b3:30:f9:53:21:ca:19:9a:ce:
         7f:2c:31:16:aa:b7:87:59:38:e6:68:f4:60:d2:70:f4:6b:e2:
         fb:ed:84:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:40:24 2026 by rpki-client