Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
File:                     J_whhWzY4Denu4xjkqYZghOotPY.mft (raw, json)
Hash identifier:          8x7pm32AsxGiQ42yUwb2vEzzvQq/LkBVNe4dOEZzQxM=
Subject key identifier:   21:81:81:53:5F:B9:87:97:7E:BE:37:2E:93:0B:71:83:BC:20:CA:6B
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Certificate issuer:       /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial:       019FA9E2AC778E7E7E572B8F3EF6FAE98BA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
Manifest number:          10B4
Signing time:             Tue 28 Jul 2026 18:00:32 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:32 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:32 +0000
Files and hashes:         1: J_whhWzY4Denu4xjkqYZghOotPY.crl (hash: mlD5CVbRgMc/eLGcsQ5FUpDJODafmRUYgvutxN6cjCo=)
                          2: Zl9UixuUH0GLR4R_JPyHH_dGJ1Y.roa (hash: bKOmByPp72MyiwK2dxQMPNiiDG6ujdM2vWNSfqTcD8I=)
                          3: evUKjjQ-64urf3ID9QQeEJmSrho.roa (hash: jHjvWcJHTbQkaqv1cxn7W2VQ1dY8D8A2yCIoe6SeCXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:ac:77:8e:7e:7e:57:2b:8f:3e:f6:fa:e9:8b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
        Validity
            Not Before: Jul 28 18:00:32 2026 GMT
            Not After : Jul 29 18:00:32 2026 GMT
        Subject: CN=218181535fb987977ebe372e930b7183bc20ca6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:89:bf:29:2e:c7:f9:3a:30:0b:26:81:43:
                    4d:ba:64:6a:25:73:a3:48:f1:1e:b6:be:f9:7d:8f:
                    0d:96:d7:ed:2d:4c:57:09:89:ac:c0:a2:8b:4a:5a:
                    bf:5f:fa:20:aa:27:5e:f9:63:09:ea:e8:0d:f5:9b:
                    b0:1f:9e:27:8a:2b:d2:ed:5b:c1:42:d6:9e:db:8b:
                    25:1a:11:79:01:37:b8:cb:fb:13:65:19:e4:e3:15:
                    eb:63:63:e5:2d:2b:e1:10:be:cb:76:54:12:e8:30:
                    65:f4:53:71:c3:ae:7a:ec:36:fa:e7:01:bb:82:f9:
                    4a:3b:8f:2c:02:90:05:c6:2c:7e:b0:9d:2d:fb:4b:
                    68:30:54:19:dd:21:ca:ce:7b:67:20:d2:9d:d7:1f:
                    6c:96:3b:1f:44:bc:87:3e:a3:70:d4:a2:b3:9b:4e:
                    3f:d1:e9:68:4a:e5:1a:ae:95:24:13:b3:b5:ef:43:
                    45:b7:6a:85:f2:a0:72:c9:34:56:bb:9c:86:bd:26:
                    ba:27:d6:b9:f4:e7:68:6a:e0:6e:b3:d3:31:11:fa:
                    15:83:e6:0b:84:43:95:7d:fa:cc:99:af:dc:55:c4:
                    ad:ba:fb:42:19:bf:5a:af:ec:14:da:17:f7:1f:b4:
                    99:5a:33:22:41:16:49:c3:a1:af:78:d8:a6:5f:d3:
                    bd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:81:81:53:5F:B9:87:97:7E:BE:37:2E:93:0B:71:83:BC:20:CA:6B
            X509v3 Authority Key Identifier:
                keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:34:32:29:2a:c2:2c:87:8e:9f:d8:21:f4:fd:9f:8e:7e:96:
         b3:8b:bf:b9:ca:26:e9:8e:c5:3e:f0:41:d2:b8:a9:88:00:b7:
         4a:5b:8c:07:da:16:02:10:30:4f:5f:1b:79:e6:69:96:cd:99:
         03:0f:4f:39:58:22:a5:cf:5d:24:4c:18:ad:f9:83:72:8e:8b:
         6a:e1:88:8f:d9:96:36:93:b4:b5:50:d0:a3:e3:6a:4e:2b:90:
         35:1b:06:67:64:32:bc:7c:6e:e8:77:fb:92:d9:45:14:4f:36:
         32:a2:65:e7:16:fe:23:52:c1:15:6e:98:5c:e0:5f:f8:6b:d5:
         45:33:0d:22:27:5a:17:9d:0b:70:63:34:55:31:51:07:7e:ef:
         bf:f7:d1:76:e4:d1:9f:9c:99:c3:23:e0:bf:1e:04:86:b6:34:
         cd:00:a3:bd:10:43:5a:2a:4a:14:f7:2b:a4:f4:cf:0b:51:a6:
         c8:8c:b1:82:8d:c0:ff:55:0b:63:f1:d9:46:53:1a:dc:ac:ab:
         bf:39:9d:3a:98:94:1d:bd:5c:7c:84:9f:f7:ee:a1:02:dd:47:
         9a:20:57:d0:48:18:a9:b1:10:33:2e:24:41:5a:d1:ab:4a:7f:
         b0:f5:00:08:0e:4f:e5:dc:02:6e:ca:29:a9:ec:b7:54:49:a3:
         4f:6f:28:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:42:04 2026 by rpki-client