Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File:                     JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier:          tXLX/gWHhBmaYTxKVb3G6GMmwiJr2xkmUR86L2QBghw=
Subject key identifier:   1E:15:2D:69:4A:C7:1A:58:C2:AE:FF:1D:DB:32:EB:E7:D9:D5:BD:1A
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer:       /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial:       019FACE49FB71085EF402233271565734DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number:          19D2
Signing time:             Wed 29 Jul 2026 08:01:31 +0000
Manifest this update:     Wed 29 Jul 2026 08:01:31 +0000
Manifest next update:     Thu 30 Jul 2026 08:01:31 +0000
Files and hashes:         1: 8mE4y9-glZyuFs0R4Pgt7x0a8gw.roa (hash: +d8h1ReixbytM7dwnoMVnYFyX1CBsG+Ttn0J0PbNE80=)
                          2: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: zm9HB+1Gs4dWcRrqK+P3bbnnayQT7c7dkkE3T3t6kNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e4:9f:b7:10:85:ef:40:22:33:27:15:65:73:4d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
        Validity
            Not Before: Jul 29 08:01:31 2026 GMT
            Not After : Jul 30 08:01:31 2026 GMT
        Subject: CN=1e152d694ac71a58c2aeff1ddb32ebe7d9d5bd1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a6:4f:7a:7f:3c:13:1f:9f:ce:94:98:89:a3:
                    e2:1d:8a:2f:e7:1c:5e:85:9e:e6:90:24:00:b8:c6:
                    4f:be:c8:6d:80:ef:4d:d0:ec:b4:25:10:55:94:f6:
                    a0:bd:75:c6:fa:83:ed:c0:f0:24:c8:53:03:6a:7f:
                    2f:64:fe:f2:cc:11:93:bb:17:86:1f:0a:9f:16:07:
                    98:2d:41:9d:3b:71:2c:85:7a:95:cd:a2:db:c4:a5:
                    0a:fd:08:5b:29:e6:11:47:f3:43:49:36:de:ad:59:
                    79:0d:06:e7:e7:1d:6f:e4:dd:da:14:1c:99:4b:5d:
                    d0:fc:52:a4:ef:6f:72:a0:8e:92:44:25:7a:f2:ab:
                    aa:dd:f0:72:65:df:9b:bb:b0:15:02:09:02:75:0d:
                    5a:44:07:0d:60:8e:f5:5c:c1:69:7a:9b:4d:2c:72:
                    f0:2b:03:b8:4e:38:04:37:ee:30:8e:17:2a:02:e4:
                    2e:22:90:48:b4:d7:d8:e0:37:8d:63:5d:7e:c6:b2:
                    ed:a0:b2:e2:e2:cf:e3:66:5b:57:48:13:10:fb:cf:
                    f2:05:8e:22:ae:98:60:3d:1f:26:e7:0e:ef:f3:d6:
                    07:81:c3:c8:08:ff:6c:d3:c7:76:83:a8:4e:dd:3a:
                    f7:e6:4c:cd:c9:61:db:96:fb:e6:43:74:ca:78:a1:
                    fc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:15:2D:69:4A:C7:1A:58:C2:AE:FF:1D:DB:32:EB:E7:D9:D5:BD:1A
            X509v3 Authority Key Identifier:
                keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:81:39:dc:2f:a7:c3:75:dc:1f:6a:ed:9e:cc:2c:3d:aa:16:
         43:54:ca:1d:38:0b:ea:42:fc:50:cf:7d:80:e1:63:b9:73:f0:
         e1:97:8e:07:9a:37:f8:45:b9:86:ce:10:31:03:6a:6e:46:08:
         8a:56:37:2c:e7:09:e0:bb:41:40:5a:29:6e:fa:c0:17:03:51:
         cd:f5:b3:46:32:d1:c0:44:8b:49:c4:8c:2a:ef:79:80:29:fb:
         0a:38:62:0b:f5:8d:fa:89:ea:5d:ae:62:b5:a1:9d:f0:7e:a7:
         df:0a:5d:84:5b:06:23:eb:78:bc:cb:98:69:04:23:66:3b:2d:
         1f:98:2d:d5:4c:d6:89:9c:6f:ae:56:35:46:e4:b8:d4:92:c5:
         6a:cf:a5:fb:79:32:b9:8a:9d:01:c3:2d:eb:48:73:82:c6:18:
         89:61:05:0b:7e:4d:e2:b2:36:41:5d:5a:70:1a:71:de:64:f9:
         5d:84:13:80:29:3d:74:4f:62:fe:7c:35:60:fc:35:0a:92:b5:
         ff:8a:7e:96:7a:9d:de:dd:1a:5b:da:a1:38:84:fb:97:5f:f2:
         d7:1e:3f:33:60:8a:ee:74:7c:23:2b:e9:46:76:a5:a6:33:bf:
         13:03:e2:85:8c:38:32:de:e9:e5:4e:cc:60:03:34:44:ed:51:
         de:e3:1b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:16:00 2026 by rpki-client