Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
File:                     JRIoadDqT5h6tR-5eRgA2EBamjw.mft (raw, json)
Hash identifier:          ahtGIYadshuuLI24x7gVJqVSe48aq4bLj8L5HtNl0MM=
Subject key identifier:   C4:26:A0:A7:B3:D3:1B:45:7E:07:6A:D4:28:0F:BD:86:98:66:1F:DB
Authority key identifier: 25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
Certificate issuer:       /CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Certificate serial:       019FA7F49A65E811B15373EAAB3B8859D509
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
Manifest number:          0454
Signing time:             Tue 28 Jul 2026 09:00:52 +0000
Manifest this update:     Tue 28 Jul 2026 09:00:52 +0000
Manifest next update:     Wed 29 Jul 2026 09:00:52 +0000
Files and hashes:         1: JRIoadDqT5h6tR-5eRgA2EBamjw.crl (hash: KNLexjOyzryuPXb18oVLE3Tcn1l29flh7V/E8Nu6EHU=)
                          2: JgOZ0B6kGENlyzqwBYmWTZ0eqeA.asa (hash: MnLzIjpYn5ytA57TMiMqdC+VomZRxdxgoPU6s8lAhVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 09:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:f4:9a:65:e8:11:b1:53:73:ea:ab:3b:88:59:d5:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
        Validity
            Not Before: Jul 28 09:00:52 2026 GMT
            Not After : Jul 29 09:00:52 2026 GMT
        Subject: CN=c426a0a7b3d31b457e076ad4280fbd8698661fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:04:fd:fe:d2:9d:d1:50:2a:c5:11:ad:a9:17:
                    f4:1f:f9:f8:3d:bf:71:f5:9b:7a:36:0f:e9:c9:f1:
                    d6:e0:70:7b:c3:59:e6:fc:b4:be:bc:4c:d5:3f:7d:
                    87:b1:3a:16:cd:97:ec:41:5d:72:bd:5b:b6:b0:ec:
                    9b:7b:98:1c:a4:cf:0d:98:03:40:e6:22:d1:cb:ac:
                    89:01:47:78:40:cc:d0:4a:00:43:95:06:e7:52:8d:
                    cb:b6:b5:2c:16:22:3d:ba:68:53:b3:14:07:44:9a:
                    4f:91:53:37:49:78:99:2e:85:72:87:53:f0:9d:f0:
                    c6:a4:26:39:01:45:54:6d:1c:12:f5:e7:6f:55:7c:
                    5f:c5:aa:8a:75:24:9e:5e:3f:2a:9f:8a:99:a0:09:
                    aa:64:ba:0f:74:7f:82:b1:f8:07:f2:6d:59:11:be:
                    93:89:74:69:ab:90:e3:40:f8:0e:91:4f:a3:f5:ed:
                    4d:1a:c5:d9:52:4e:56:12:7b:fd:08:82:b1:9f:6a:
                    6f:4a:a3:a9:e1:1b:77:b8:48:03:20:08:1b:6f:2f:
                    a3:f9:ea:e8:00:7a:78:ec:0e:2e:04:13:12:b4:f7:
                    9b:e7:af:5e:1e:34:d0:16:24:fc:04:4c:21:52:4e:
                    ea:23:fa:56:75:01:63:ef:d8:05:61:ca:d9:14:62:
                    f4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:26:A0:A7:B3:D3:1B:45:7E:07:6A:D4:28:0F:BD:86:98:66:1F:DB
            X509v3 Authority Key Identifier:
                keyid:25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f7:a3:80:6c:8c:05:66:89:db:48:7e:8b:a6:4a:72:db:8b:
         44:85:36:22:9f:31:0e:17:87:e9:91:bd:e6:e4:99:e3:a3:06:
         d6:f1:38:3a:54:3d:49:be:68:ff:95:8d:fc:43:40:e8:4b:6c:
         73:ee:f1:2b:a6:3c:1c:b7:fb:29:1e:c1:88:13:67:9f:e5:99:
         bc:3d:94:0b:14:46:c4:e2:38:f1:a2:ce:b6:ef:67:db:ba:e8:
         e4:c1:18:95:5a:4d:e9:95:fe:de:ab:16:ad:39:51:1a:8d:06:
         55:19:14:10:9d:01:8b:b7:34:b7:32:a2:f4:d4:a8:8c:72:95:
         4f:2a:28:29:0a:28:b8:8a:18:31:24:05:05:48:f0:94:c3:c5:
         bb:57:0e:41:83:74:59:a1:14:f8:8f:1f:06:13:27:c7:82:00:
         d8:a9:31:2a:67:cc:5d:39:4f:fa:95:51:1a:d1:10:56:af:49:
         8d:0e:93:d9:59:84:ee:0f:98:78:3b:70:75:46:94:15:ca:b5:
         ba:b8:04:e3:20:b9:8e:da:5a:cc:0b:fc:bf:67:c2:70:10:1f:
         7e:bb:29:30:3d:08:d5:c6:48:54:e3:52:2f:21:3c:ce:cf:d4:
         9a:5e:a6:5f:e6:47:9b:c7:b5:19:d5:da:e1:a3:0c:7f:41:42:
         8e:2f:fb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:14 2026 by rpki-client