Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
File:                     JrFSTsAdz0BfRBcYKe1nopkqpC0.mft (raw, json)
Hash identifier:          IwGDiN7eFC+6pHj32IunFySd6HGPriVBcBUouZL01U0=
Subject key identifier:   3F:05:73:AF:64:01:C6:BD:72:6F:22:5F:1B:0D:57:7D:88:61:34:B7
Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
Certificate issuer:       /CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Certificate serial:       019FAB633710650577D811A5D7846689786E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
Manifest number:          0703
Signing time:             Wed 29 Jul 2026 01:00:33 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:33 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:33 +0000
Files and hashes:         1: JrFSTsAdz0BfRBcYKe1nopkqpC0.crl (hash: /HEHIaIyeo7FtYXhhAIcdVhq+nXiA6e728moj5swR3U=)
                          2: _Y_601F6eAt7O-baCpdg3BQDJXc.roa (hash: vyG9YG54wVQIAnIU/YKZPIrIY0HUdh61Oh6KNWA0bnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:37:10:65:05:77:d8:11:a5:d7:84:66:89:78:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d
        Validity
            Not Before: Jul 29 01:00:33 2026 GMT
            Not After : Jul 30 01:00:33 2026 GMT
        Subject: CN=3f0573af6401c6bd726f225f1b0d577d886134b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8b:40:74:48:73:2f:33:63:f5:75:c9:2a:4c:
                    50:23:09:ec:ea:15:10:9a:af:b5:7d:3d:99:06:dc:
                    5b:79:aa:ed:a1:67:66:1a:00:c1:0a:f7:ce:f1:1a:
                    4e:e1:f0:0f:56:e8:3c:de:dd:1c:ea:83:fb:7d:d5:
                    1b:f3:71:f9:d4:58:16:f6:69:92:1e:b5:6d:69:fb:
                    84:67:52:e6:e3:0f:db:9e:df:e7:8f:d3:c0:f3:eb:
                    ad:b2:73:d2:35:3c:f5:5f:47:2c:06:65:88:85:88:
                    a8:fb:f5:b5:33:67:33:68:74:f9:a5:d0:68:52:a9:
                    26:49:d6:1d:8c:61:9c:aa:6b:2f:f4:d8:30:45:2e:
                    a0:f8:bd:ef:f3:9c:fb:86:10:72:4f:2d:7f:c6:99:
                    d3:44:8b:fa:63:d2:e0:b9:07:72:0e:04:39:e6:40:
                    02:31:65:01:13:1b:37:58:51:a8:74:4c:bf:08:7d:
                    72:8a:c0:03:55:0b:d1:3d:ff:91:75:c9:6b:8d:02:
                    55:65:86:d5:83:1b:7d:64:35:16:fa:5b:46:fd:c4:
                    e1:9c:ca:af:2e:fa:1c:2a:7c:7b:ef:75:2f:0c:dd:
                    4f:ab:cc:0a:ac:33:85:05:83:0e:a6:f6:0e:f3:5f:
                    0d:ae:43:c9:81:d4:88:ef:7f:58:9a:14:a9:38:63:
                    7e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:05:73:AF:64:01:C6:BD:72:6F:22:5F:1B:0D:57:7D:88:61:34:B7
            X509v3 Authority Key Identifier:
                keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:22:e7:de:c3:8f:00:38:82:c8:24:e9:2d:ac:27:34:88:e3:
         6b:7c:80:22:18:0c:4f:15:56:c7:95:98:ff:5a:27:b7:cb:06:
         16:20:17:11:7f:bf:d6:52:1e:95:72:fc:c7:92:9a:52:d6:e1:
         ac:05:4a:60:e4:83:06:aa:f1:89:2d:94:1d:82:3f:69:80:e4:
         c5:30:2b:31:d7:90:f3:27:c6:06:33:f2:2a:4c:68:0a:6c:a5:
         b5:fb:bb:5f:f7:9a:5d:61:83:88:f9:8d:aa:28:80:28:08:27:
         c4:62:75:4f:8d:c2:0c:45:00:b0:66:c0:1e:f5:87:d9:e0:46:
         3a:99:e8:cd:db:92:8d:84:fa:1f:c2:2a:45:7b:84:27:2e:84:
         6f:28:2c:2d:9a:9e:d1:6a:0e:49:5a:8d:de:28:ff:d3:3e:8b:
         1d:9a:cd:31:a1:09:98:f8:35:38:e2:18:d0:c4:ed:b5:65:fc:
         22:49:f9:68:c6:f1:98:f7:fb:6b:39:b2:45:b7:6e:75:be:75:
         9e:0d:a2:e6:ee:dd:93:d8:d3:d3:ed:05:99:06:fa:a5:54:2d:
         35:e2:f8:6d:67:a5:19:ce:0f:05:42:eb:ef:98:99:e9:8c:d1:
         03:b9:01:fc:d9:1b:b8:03:bd:a6:27:73:cc:96:4e:2c:f6:24:
         30:51:0c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:36:32 2026 by rpki-client