Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
File:                     jjvz0Ldl8upCRh0SN85-reQ7aK8.mft (raw, json)
Hash identifier:          SmWGhWmAo2gVwmympXdIDpAnJQXXbyOox8nbRqfuWkk=
Subject key identifier:   22:7F:AE:15:60:A3:61:29:43:80:41:66:EA:08:24:10:B5:88:4D:80
Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
Certificate issuer:       /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Certificate serial:       019FAAF530AF05E37D4D65D280ED906DB9C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
Manifest number:          0FFC
Signing time:             Tue 28 Jul 2026 23:00:23 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:23 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:23 +0000
Files and hashes:         1: K4KaGgPmLYRO5soG4eqjbkAncaI.roa (hash: +VJK/j11hj/8ZaPbxR19b24TkZkYatUXvpZgb0IWSzc=)
                          2: jjvz0Ldl8upCRh0SN85-reQ7aK8.crl (hash: IdElWa2mBj7WpCufWtJraTJVnOPgtgRtAhfvyxyYoEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:30:af:05:e3:7d:4d:65:d2:80:ed:90:6d:b9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
        Validity
            Not Before: Jul 28 23:00:23 2026 GMT
            Not After : Jul 29 23:00:23 2026 GMT
        Subject: CN=227fae1560a3612943804166ea082410b5884d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:20:b3:44:33:19:08:70:17:d0:2b:ad:41:
                    96:ff:88:ca:d5:1a:66:35:28:e2:94:b1:40:d1:05:
                    55:fa:b2:f4:d5:91:8e:de:b9:f7:35:a3:a2:39:da:
                    ff:9b:cf:eb:e5:48:d1:03:71:e8:29:e1:fb:3a:18:
                    e9:09:97:a2:c7:84:b6:f0:a2:a7:eb:e2:ef:a0:bc:
                    eb:20:41:d2:94:c1:30:7d:bb:01:ff:af:1a:be:03:
                    96:09:de:70:5b:04:63:35:46:82:89:cd:d6:f7:4d:
                    6f:48:22:fe:06:eb:22:f7:08:a3:c2:3a:ef:01:de:
                    cb:9e:70:70:e1:f6:5e:6c:8f:db:9e:70:ef:0d:3b:
                    5e:cc:b2:be:dd:32:de:83:0d:b1:47:43:5c:a9:a0:
                    b1:ee:33:11:e1:f5:b7:72:ba:7e:41:78:bc:bd:98:
                    25:7f:3f:ea:2c:10:3d:18:3d:9f:de:08:16:70:a6:
                    59:ec:55:68:26:2b:68:cb:aa:24:18:1f:4d:5f:d3:
                    f1:ed:fa:e5:56:80:ab:4d:e0:d7:46:c7:22:3b:ba:
                    d7:01:a8:f4:cd:8b:e7:f3:f3:d1:a8:2e:a9:59:62:
                    1d:df:07:67:d3:ea:c3:31:97:24:c6:7f:b8:4a:e4:
                    72:53:48:cf:fa:64:1e:03:d1:7e:4f:5c:4c:61:e4:
                    d5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7F:AE:15:60:A3:61:29:43:80:41:66:EA:08:24:10:B5:88:4D:80
            X509v3 Authority Key Identifier:
                keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:87:85:3e:92:12:aa:7d:86:7c:23:b4:3e:28:f4:0e:76:4b:
         26:4d:9e:8b:f7:0f:30:fa:fd:ff:c8:f0:95:df:90:8d:83:05:
         50:a9:0b:7e:c4:ac:99:c6:e4:2c:6d:b2:ba:05:56:32:1c:fc:
         9e:3e:e1:62:ce:bb:0a:50:fb:86:6a:43:2f:86:da:9f:1b:23:
         31:8b:69:5b:00:19:f1:8f:ec:b9:23:1a:f3:d6:17:13:e6:c0:
         8b:7c:79:6a:d7:81:51:1a:92:12:cc:55:90:b7:8a:b3:df:2f:
         cb:a3:04:1c:e8:42:c7:bf:21:7c:c5:71:bf:3d:1c:49:1d:2b:
         a9:40:e4:97:c2:df:1a:1a:0e:a6:23:74:90:3b:a5:60:a1:47:
         fd:58:d9:9c:1b:d5:44:90:10:e7:98:ce:63:5d:60:3a:8c:91:
         41:48:e3:6b:cb:50:b5:10:b4:1a:7e:a2:f1:38:24:4b:c4:73:
         23:eb:03:99:88:2b:08:9e:2f:c5:7c:09:13:0f:82:00:1a:e0:
         6d:68:c3:2b:99:ca:ae:e4:cd:1e:30:81:ab:1f:5c:60:5e:e8:
         e9:fc:39:8c:4d:3b:97:fb:25:b7:fc:d3:d5:ee:09:85:01:73:
         b2:84:2e:02:1f:b2:1e:28:dd:69:b7:52:58:14:bf:d0:e8:44:
         91:bf:0f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:03:21 2026 by rpki-client