Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
File:                     JI9eJvHAj0SGyZEci2Cerotst00.mft (raw, json)
Hash identifier:          sBqrl6X2phIww56ZTmHiPTV+GLqEzDIX7p69anRJMKo=
Subject key identifier:   AB:D3:8A:E0:1B:DA:2B:E7:08:D8:78:57:24:0C:28:18:77:5A:8A:84
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Certificate issuer:       /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial:       019FAAF5D46A617F61F1CB990A2DA5FBB374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
Manifest number:          19D9
Signing time:             Tue 28 Jul 2026 23:01:04 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:04 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:04 +0000
Files and hashes:         1: 9WiLMBOOIFui37XsSkkIFcDbunw.roa (hash: 41f5PwE35LBjKoYTvONiL6ypIZadvUiy3rHjOLDko1A=)
                          2: C0xNgAEq_VkYSa0gjqSo4X9OgDk.roa (hash: rs9H4EjX84lTTLv+iIvf+6h9tBHNg+MMsrqn9SRaoow=)
                          3: JI9eJvHAj0SGyZEci2Cerotst00.crl (hash: 6ZzSkaNG8BH8ryerdhk1VzQQ0KffeW5muMBioYj/Z1A=)
                          4: PpAX2uR7dOm-fqI5gBjMqcI_sj0.roa (hash: hBH45ktoJ8q7ItYmiVnvXeZkIWerDTCntuxa+oH08yo=)
                          5: XVbyZDeAu74wqWgE4Lug0IJ0xJ4.roa (hash: G5/qOs1gotpqFOvbgNgnzqAQEWPvAJWudCVSYuYf4PQ=)
                          6: gVsFB1HmrHHx_F0oTpBh0qNylSQ.roa (hash: 0WvPL4gzlPSQJArhjHg92bA8wa85QK1qdsvxPM8R9XY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:d4:6a:61:7f:61:f1:cb:99:0a:2d:a5:fb:b3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
        Validity
            Not Before: Jul 28 23:01:04 2026 GMT
            Not After : Jul 29 23:01:04 2026 GMT
        Subject: CN=abd38ae01bda2be708d87857240c2818775a8a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4f:c3:3c:f4:52:08:8f:2f:d7:34:b1:c3:17:
                    a5:3c:b5:9e:39:c6:ac:66:9e:ea:53:a2:07:b9:78:
                    74:bd:fc:19:39:d8:0c:a2:d5:d2:cc:da:7a:ad:2c:
                    f3:06:f1:cc:4c:a4:94:ec:3e:4a:06:68:45:7f:ee:
                    19:36:91:3f:21:4f:65:29:9c:dc:74:89:53:ef:12:
                    46:4f:4b:16:63:4f:5b:97:1b:d4:60:9e:02:61:89:
                    72:b3:62:8f:3a:db:7c:ad:11:4a:ac:56:1b:52:f3:
                    1a:cb:ae:53:f3:b0:1e:c4:00:36:2d:ef:c2:1d:e1:
                    ce:18:42:4b:b7:16:41:a8:cd:08:fe:1c:b1:75:b0:
                    02:41:37:68:70:93:da:9b:87:52:b9:68:0d:4c:9c:
                    ea:01:a0:11:0b:d6:a1:de:be:18:5c:54:1a:dd:ce:
                    1c:14:90:48:11:b2:55:ab:de:64:c6:67:23:24:3b:
                    72:3e:ba:e4:ef:21:21:cc:9f:de:86:bc:d5:8d:eb:
                    98:6c:2c:75:6b:cf:f4:e5:0f:2f:d4:48:4d:31:12:
                    59:8c:41:06:ec:df:50:fc:a9:d1:f6:29:6b:43:9d:
                    34:7f:82:46:74:cc:4d:cd:a5:c3:f3:ed:ac:4b:ff:
                    f9:96:37:13:f1:3f:13:69:ce:95:40:5e:7b:d1:f4:
                    7f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D3:8A:E0:1B:DA:2B:E7:08:D8:78:57:24:0C:28:18:77:5A:8A:84
            X509v3 Authority Key Identifier:
                keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:25:92:c2:db:46:7b:7b:80:a4:8f:93:6b:ca:d6:ad:f8:47:
         29:2c:65:a8:2f:45:d2:46:0d:40:46:e8:37:94:28:d9:ce:74:
         a3:23:68:4f:89:db:43:04:60:0f:06:8b:c4:98:b8:97:56:8c:
         25:5a:d7:9e:de:da:2a:6b:36:48:36:45:8a:f1:df:d6:e3:40:
         e8:ed:c4:ec:9a:36:d4:fd:72:a5:13:54:a0:50:f5:18:31:f6:
         1f:fc:b3:b4:75:ea:cb:b4:d7:f4:7b:90:77:d7:6a:08:4f:02:
         64:cd:07:5c:45:1a:a3:56:9b:62:c5:be:35:cf:14:96:9b:87:
         f5:49:12:9c:e0:9c:4b:b0:eb:30:d5:cd:f5:40:cd:be:1a:e5:
         fc:b6:91:00:61:c1:99:f3:81:8c:ba:7d:c7:1a:06:68:ff:69:
         72:9a:65:c0:78:1f:f5:0e:00:1b:65:0c:1e:ca:41:72:89:f4:
         86:ae:ed:27:6f:bf:5c:e0:82:53:48:31:c7:f6:43:06:5f:4c:
         b4:24:df:d8:bf:2a:ba:52:54:ec:9f:91:86:98:3f:71:d8:7c:
         bd:63:95:03:ad:75:b1:ba:61:16:bd:fb:e4:f6:5d:a3:90:77:
         ce:b3:61:7f:f8:2d:48:50:c5:b8:d5:e9:95:88:90:bf:66:6c:
         3f:4d:d7:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9dRqYX9h8cuZCi2l+7N0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0OGY1ZTI2ZjFjMDhmNDQ4NmM5OTExYzhiNjA5ZWFlOGI2
Y2I3NGQwHhcNMjYwNzI4MjMwMTA0WhcNMjYwNzI5MjMwMTA0WjAzMTEwLwYDVQQD
EyhhYmQzOGFlMDFiZGEyYmU3MDhkODc4NTcyNDBjMjgxODc3NWE4YTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0/DPPRSCI8v1zSxwxelPLWeOcas
Zp7qU6IHuXh0vfwZOdgMotXSzNp6rSzzBvHMTKSU7D5KBmhFf+4ZNpE/IU9lKZzc
dIlT7xJGT0sWY09blxvUYJ4CYYlys2KPOtt8rRFKrFYbUvMay65T87AexAA2Le/C
HeHOGEJLtxZBqM0I/hyxdbACQTdocJPam4dSuWgNTJzqAaARC9ah3r4YXFQa3c4c
FJBIEbJVq95kxmcjJDtyPrrk7yEhzJ/ehrzVjeuYbCx1a8/05Q8v1EhNMRJZjEEG
7N9Q/KnR9ilrQ500f4JGdMxNzaXD8+2sS//5ljcT8T8Tac6VQF570fR/CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvTiuAb2ivnCNh4VyQMKBh3WoqEMB8GA1UdIwQY
MBaAFCSPXibxwI9EhsmRHItgnq6LbLdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkk5ZUp2SEFqMFNHeVpFY2kyQ2Vyb3RzdDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kYWU4YjAtOTdkMC00OGQ0LTliMjYt
MDEzN2IxZjc1ZDAyLzEvSkk5ZUp2SEFqMFNHeVpFY2kyQ2Vyb3RzdDAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9kYWU4YjAtOTdkMC00OGQ0LTliMjYtMDEzN2IxZjc1ZDAy
LzEvSkk5ZUp2SEFqMFNHeVpFY2kyQ2Vyb3RzdDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCWSwttG
e3uApI+Ta8rWrfhHKSxlqC9F0kYNQEboN5Qo2c50oyNoT4nbQwRgDwaLxJi4l1aM
JVrXnt7aKms2SDZFivHf1uNA6O3E7Jo21P1ypRNUoFD1GDH2H/yztHXqy7TX9HuQ
d9dqCE8CZM0HXEUao1abYsW+Nc8UlpuH9UkSnOCcS7DrMNXN9UDNvhrl/LaRAGHB
mfOBjLp9xxoGaP9pcpplwHgf9Q4AG2UMHspBcon0hq7tJ2+/XOCCU0gxx/ZDBl9M
tCTf2L8qulJU7J+Rhpg/cdh8vWOVA611sbphFr375PZdo5B3zrNhf/gtSFDFuNXp
lYiQv2ZsP03Xig==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:33:54 2026 by rpki-client