Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
File:                     jHtuGDyNUsxGBbqLXa3cZjJik-w.mft (raw, json)
Hash identifier:          CWgvhCKcUFhLmy3RY7t3BhQuNvf55fzJYNrv90yziz0=
Subject key identifier:   7E:1E:56:82:BC:71:05:18:EA:EC:17:BD:26:A1:BE:73:84:C4:81:26
Authority key identifier: 8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC
Certificate issuer:       /CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec
Certificate serial:       019FAAF60FA4D2459614652AC7DE3036A655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
Manifest number:          1950
Signing time:             Tue 28 Jul 2026 23:01:20 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:20 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:20 +0000
Files and hashes:         1: W9QORcGeUP3iLWU0X9nRIs0WJkY.roa (hash: hIl0UXb0kykXac0sKp+S7Vm2Hm+hm3Ey7N0z0BeyVKw=)
                          2: jHtuGDyNUsxGBbqLXa3cZjJik-w.crl (hash: HEg7c4rJkXXJHOUWRbNnDQtMh7ow+t/B1FHk8/Vj7uM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f6:0f:a4:d2:45:96:14:65:2a:c7:de:30:36:a6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec
        Validity
            Not Before: Jul 28 23:01:20 2026 GMT
            Not After : Jul 29 23:01:20 2026 GMT
        Subject: CN=7e1e5682bc710518eaec17bd26a1be7384c48126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:70:32:27:b4:ae:c8:43:e6:20:2a:a9:2a:
                    f2:80:7d:33:20:4b:94:63:c5:8f:8a:dd:19:17:74:
                    bc:12:ad:90:65:58:e7:20:a3:41:e5:03:83:85:7f:
                    04:11:52:83:47:4a:19:2d:4a:db:b1:af:d4:f0:a8:
                    ee:93:e7:33:34:33:0c:31:7c:a1:d9:62:93:d3:0e:
                    cc:fa:e6:18:df:5c:f9:14:d7:6e:9a:70:04:c7:10:
                    f0:6d:37:80:ca:be:09:54:06:d0:2e:57:75:66:91:
                    1c:2f:b5:a3:31:4d:30:92:a9:3f:cc:69:da:00:34:
                    df:b2:3f:cf:03:b1:f5:c0:c2:33:1b:4b:0c:a3:20:
                    ea:31:d0:04:27:6b:cf:5d:ea:f1:33:2e:a7:1c:55:
                    fd:79:56:08:b2:f1:5c:26:cd:be:6c:77:80:ed:8b:
                    0a:b0:1b:4b:b3:ae:40:5c:1c:d4:21:d0:c6:64:57:
                    3a:50:14:d9:3c:b3:e7:7a:6d:a6:6c:e2:32:90:9d:
                    0a:c2:cb:5b:e1:0e:05:d9:b8:2c:ad:7d:b8:26:94:
                    1d:a3:cb:c5:3e:b2:d5:98:c1:ac:26:29:00:04:6f:
                    3d:a6:50:71:0b:93:50:58:39:90:aa:44:6a:80:f8:
                    2f:5c:9a:01:44:20:b8:5b:b6:58:a9:78:62:84:22:
                    19:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1E:56:82:BC:71:05:18:EA:EC:17:BD:26:A1:BE:73:84:C4:81:26
            X509v3 Authority Key Identifier:
                keyid:8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:77:be:82:6c:8e:5f:f5:70:46:7f:78:c6:32:45:1b:a4:82:
         f9:d3:62:6a:ef:cb:98:5e:41:74:ea:88:20:35:aa:23:bf:b1:
         42:0a:b4:73:fb:92:6b:e2:81:7a:54:4c:93:66:06:4d:a8:50:
         c9:e7:10:b6:f2:3d:c3:90:29:14:0c:5d:c8:28:21:8c:95:62:
         7e:73:63:ee:61:77:1c:cc:1a:0f:83:d6:08:40:b0:5f:74:d1:
         a3:53:0b:ac:42:b0:9e:87:9e:e1:98:1a:72:e4:3c:c3:b3:1c:
         5c:92:47:7b:fb:fa:c1:32:cc:8b:c0:61:aa:3b:34:a5:90:9a:
         7f:75:21:1f:87:e0:dc:83:e1:f9:fe:69:36:12:0c:b5:1b:c9:
         fb:70:72:f4:85:7c:18:4c:71:dd:9e:4a:dd:4b:e6:d8:11:20:
         33:b5:af:f1:6d:6e:61:4d:a1:8f:e3:af:8a:23:e5:3f:d4:c1:
         d9:c2:17:39:35:e2:cb:54:6b:0b:19:51:2c:b5:f2:89:92:7e:
         8e:00:dd:a1:60:66:d9:ea:4c:d3:ea:f8:c2:dc:37:50:f2:db:
         e2:9a:ab:bf:18:ac:a8:94:16:24:da:e0:bc:c3:58:2a:de:fb:
         cf:03:22:83:0a:e7:c5:a7:3e:80:93:aa:05:e2:fb:f4:8f:80:
         06:ee:67:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:28:16 2026 by rpki-client