Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
File:                     J7irrCClmMyksS9ddV2OiTIfTsk.mft (raw, json)
Hash identifier:          /bpUm60nyX6+KeTuFelLf30CsB+klWS6aCY6corCf0s=
Subject key identifier:   65:D0:E7:52:16:5A:FD:89:B1:AF:48:6D:D0:D3:E7:1A:F6:C3:E5:F2
Authority key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
Certificate issuer:       /CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Certificate serial:       01A0DC16BF863A79C6EDBFDD5961D2233D30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
Manifest number:          13E7
Signing time:             Sat 26 Sep 2026 05:01:13 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:13 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:13 +0000
Files and hashes:         1: EXA4SpEwX1vQWpFirH7mk4IJU8M.roa (hash: Lyc+y0k9pCkViy1JNMhW8hiC3bm7cXEkAowTAltTXTA=)
                          2: J7irrCClmMyksS9ddV2OiTIfTsk.crl (hash: SWIcRg0dMih2G5AXWYu/f3HPYlApAQzDx87q71JTqV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:16:bf:86:3a:79:c6:ed:bf:dd:59:61:d2:23:3d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
        Validity
            Not Before: Sep 26 05:01:13 2026 GMT
            Not After : Sep 27 05:01:13 2026 GMT
        Subject: CN=65d0e752165afd89b1af486dd0d3e71af6c3e5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:80:07:e0:57:fd:a3:c4:e8:54:87:4f:79:4f:
                    9a:ef:d2:3b:67:6c:2d:b3:78:01:35:09:1e:4d:d5:
                    3b:f5:24:d2:40:91:90:4b:5c:8c:af:f6:db:2d:0d:
                    27:cd:87:59:af:74:c4:1f:f2:92:16:50:0e:4e:a3:
                    c7:31:5f:0e:d2:de:47:cf:d8:30:83:f8:a4:db:cb:
                    76:82:df:d6:b7:b6:d6:f6:00:17:db:54:a8:cc:43:
                    05:86:fe:18:95:8a:a2:bb:f1:77:da:ac:f2:74:9e:
                    49:fb:da:37:09:09:3e:9b:77:b9:da:0c:f3:e2:cf:
                    f3:ea:e6:6a:8f:1f:4d:73:ec:4a:27:7a:9f:8c:ae:
                    33:9a:d8:14:01:f5:10:e8:5f:37:dc:4d:92:36:76:
                    79:7b:d2:42:89:9b:32:ec:70:c5:9e:31:6c:2e:88:
                    2a:ca:3c:63:df:c8:bc:da:38:db:b7:c8:4f:20:90:
                    b6:93:f5:fd:23:f9:29:b0:79:e7:72:8b:b5:b7:15:
                    cb:a7:89:2b:f4:61:c2:42:bd:b9:02:93:66:7d:2c:
                    eb:19:d1:90:60:fe:8b:9e:e2:60:53:9b:95:0a:87:
                    c3:02:e5:25:37:05:ce:40:09:a9:23:38:3a:25:fd:
                    e1:32:59:4d:07:f6:d3:bb:31:c5:fd:44:c6:f7:21:
                    48:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D0:E7:52:16:5A:FD:89:B1:AF:48:6D:D0:D3:E7:1A:F6:C3:E5:F2
            X509v3 Authority Key Identifier:
                keyid:27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:26:ad:16:ab:d8:bb:0b:54:96:d0:b7:22:5a:d3:16:f5:09:
         9b:6a:8d:77:f9:50:f5:7a:86:c1:ed:ce:32:89:8a:3e:e6:9a:
         d8:bf:37:eb:ca:5e:9a:22:07:85:c8:04:87:5b:83:eb:e2:cf:
         59:01:f6:16:e0:de:2d:3d:33:84:21:54:4b:e6:df:28:66:94:
         33:da:0e:54:23:03:59:96:54:d3:49:13:ea:09:69:5b:e5:33:
         01:d0:ef:f4:ac:16:61:3c:ce:40:bd:e2:68:a2:37:09:8b:ca:
         b3:2b:4e:17:8f:1c:a7:ed:af:d1:a6:f1:e8:18:e7:6f:e2:29:
         e9:11:5a:c0:36:ce:f3:a1:30:d9:64:aa:df:12:8d:5b:27:f1:
         ba:e5:a6:84:b0:af:0e:97:54:c8:f5:08:91:08:85:98:f0:26:
         75:8f:25:9d:27:75:4c:07:9f:0d:c6:67:8f:aa:99:7e:a5:6f:
         54:26:0e:c8:26:18:23:bc:c8:f3:18:78:57:ca:d9:96:ab:4d:
         85:11:77:e5:b4:8a:f0:56:fd:a1:d3:54:da:47:4b:4a:0c:09:
         bf:d6:58:9f:c5:37:c4:da:38:20:61:42:8d:00:58:65:a2:32:
         ec:1a:20:61:0c:a0:2a:0f:ba:57:de:31:34:62:29:eb:92:cd:
         9b:ac:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:05:56 2026 by rpki-client