Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
File:                     JKmv_35_6wbhjeksJzVjuYAzMWs.mft (raw, json)
Hash identifier:          EoicEVfH/ey48p0YjQwt8TcgB06E3aZDHmQOpYo7Fes=
Subject key identifier:   F9:DE:00:86:5C:7F:29:5E:32:6B:5B:48:1D:2D:EE:BC:C2:9E:18:37
Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
Certificate issuer:       /CN=24a9afff7e7feb06e18de92c273563b98033316b
Certificate serial:       019FAC7684EFD034F6D1484525059B07C442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
Manifest number:          04C0
Signing time:             Wed 29 Jul 2026 06:01:16 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:16 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:16 +0000
Files and hashes:         1: JKmv_35_6wbhjeksJzVjuYAzMWs.crl (hash: IU27dTBq6mTZKqL8WVfTDuC9XRmuD5tvIbJdHolCrAs=)
                          2: OcGLgpdPjEji6rhRKA3ndoUPng8.roa (hash: uMbYxwC7JX58tZin/DJJELLb9OvFN38e9zDdfuZgxac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:84:ef:d0:34:f6:d1:48:45:25:05:9b:07:c4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b
        Validity
            Not Before: Jul 29 06:01:16 2026 GMT
            Not After : Jul 30 06:01:16 2026 GMT
        Subject: CN=f9de00865c7f295e326b5b481d2deebcc29e1837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:5c:9e:8f:2f:02:9a:a4:be:de:54:ab:fe:e9:
                    ea:65:5a:a8:00:4c:78:32:58:6e:46:29:97:46:89:
                    9c:24:c0:29:5d:47:95:e3:1a:ad:4d:d1:9e:02:4a:
                    11:7f:85:91:5a:eb:53:2d:dd:1a:e3:3b:53:53:7e:
                    49:04:1b:8d:91:4b:4c:07:ac:c8:5f:1f:a7:5f:9e:
                    82:82:16:11:88:ce:ae:72:8a:6e:0f:48:55:18:d2:
                    4e:b6:1d:41:d8:39:e6:6d:7e:7b:d5:d8:11:7b:4d:
                    fc:49:ee:54:7e:6e:1a:20:2e:87:b7:0e:12:c6:58:
                    1e:0a:c2:70:fc:c6:53:e0:3e:9f:ab:1d:a4:d1:41:
                    9f:2b:83:a6:f4:70:7d:4a:85:a0:07:57:ec:83:ba:
                    fe:7e:59:ec:fa:eb:d2:0f:36:15:5a:8e:bd:cf:69:
                    2e:fe:1a:73:6d:20:f1:1a:ef:97:2c:fc:7b:7b:9a:
                    c9:61:43:f2:0f:ef:02:ad:f8:9e:5a:95:df:7f:11:
                    0c:57:8a:3a:11:6e:f1:47:91:b4:82:62:7c:eb:9e:
                    50:c6:7a:7a:37:02:9a:0b:45:1b:12:db:f7:0d:0b:
                    c3:35:b4:83:28:df:cd:21:93:91:ef:12:43:c7:08:
                    be:56:09:e0:06:e7:63:fa:68:07:9d:1b:05:69:e0:
                    60:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DE:00:86:5C:7F:29:5E:32:6B:5B:48:1D:2D:EE:BC:C2:9E:18:37
            X509v3 Authority Key Identifier:
                keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:99:5f:22:75:16:ae:0b:4b:3e:fe:cb:62:62:21:6b:1e:7d:
         28:07:33:dd:ae:56:4e:9d:a5:47:11:5f:b6:2e:bc:19:40:72:
         73:64:bc:1c:2f:1b:df:d7:17:e7:1a:96:88:25:89:3d:e5:bb:
         f6:8f:54:f4:3f:55:8e:b9:8f:32:df:32:69:08:4b:98:23:4e:
         da:ec:0e:64:0d:4a:89:96:9f:37:9f:46:8b:6f:bb:91:34:bd:
         b5:02:c9:f2:6d:86:f4:a8:8a:c9:fa:45:e9:16:26:96:1d:9c:
         6e:1c:b6:17:64:b1:1e:24:88:dc:b9:82:3e:0c:d2:8f:cc:0e:
         63:76:07:cb:0c:4e:13:08:d7:e4:e6:59:a1:8f:49:af:8e:d4:
         75:d4:d0:1f:80:9a:90:fd:15:3a:9c:8d:61:b5:a5:b0:86:fc:
         2a:ba:06:a5:4d:7d:56:81:7e:9c:2b:79:14:f1:02:c6:1e:36:
         b4:a2:ea:62:92:1c:92:66:3e:c7:d8:77:81:97:23:df:4c:d2:
         62:69:f7:7a:e6:b6:70:b4:15:12:75:21:65:f9:2a:24:3a:6e:
         63:a2:6a:52:75:d5:97:52:e9:4b:13:6f:6b:aa:b8:c7:48:fd:
         96:2e:65:48:7d:63:c5:76:a4:dc:1d:30:71:dc:0c:2d:c1:aa:
         af:bf:e4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:55:19 2026 by rpki-client