Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
File:                     jcayOVFjzkewNvrgKnH5SIBL9V8.mft (raw, json)
Hash identifier:          OKq4Rup6QAfqMYRcns0hzXcPmCHLkG7Fo/wXZJIwCo4=
Subject key identifier:   F5:09:32:01:70:9A:FF:93:E3:9E:1A:70:81:15:AA:1F:E2:7E:F8:AC
Authority key identifier: 8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F
Certificate issuer:       /CN=8dc6b2395163ce47b036fae02a71f948804bf55f
Certificate serial:       019FAB99F05FA3A96FEFD6B64559C2A38BA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
Manifest number:          013F
Signing time:             Wed 29 Jul 2026 02:00:20 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:20 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:20 +0000
Files and hashes:         1: UqSLybQPqtyf12w058GGJrCrwlE.roa (hash: ay496TJzckN/WV79yGM4pv+K/GRv47GhhBgHEduwC9o=)
                          2: jcayOVFjzkewNvrgKnH5SIBL9V8.crl (hash: 9PnD79JCTs6tWnudAW/yjygrpyoRvCs5T4Kj7Dxqe0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:99:f0:5f:a3:a9:6f:ef:d6:b6:45:59:c2:a3:8b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc6b2395163ce47b036fae02a71f948804bf55f
        Validity
            Not Before: Jul 29 02:00:20 2026 GMT
            Not After : Jul 30 02:00:20 2026 GMT
        Subject: CN=f5093201709aff93e39e1a708115aa1fe27ef8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:8c:df:27:44:e7:e1:6c:8f:7b:6f:bc:74:
                    a7:c3:1b:44:04:e2:75:14:f4:52:8a:09:52:13:6a:
                    31:4a:32:3a:19:f8:a8:e7:ea:43:12:c6:96:65:4d:
                    1f:61:96:62:3e:ee:ee:27:c5:c3:68:df:76:b5:5f:
                    d8:7a:91:39:c4:07:af:c9:b5:ad:2a:fb:1e:57:58:
                    4f:5b:59:38:53:aa:d0:e9:ee:97:2a:ad:58:68:2e:
                    8d:8c:1c:af:9e:66:6f:2e:19:f2:60:f1:1e:75:f1:
                    46:e9:bc:8d:ae:7c:c7:0f:1a:87:b4:8a:4b:62:d3:
                    7a:1f:2b:12:89:5d:68:b3:98:77:a6:4d:e8:67:e4:
                    3f:7b:89:d1:95:31:db:99:54:95:c7:50:fd:d5:31:
                    03:92:31:5e:f1:b0:7e:89:fd:66:ee:62:45:da:6c:
                    42:92:98:fa:b1:0e:be:a4:53:53:8d:bf:d9:63:90:
                    ba:19:85:74:7b:16:60:dd:fa:c1:16:fe:e6:7c:ac:
                    37:2f:ca:cb:53:fe:d1:4e:fc:90:8f:23:41:4c:f6:
                    f8:bc:9e:14:8b:e5:a6:2b:05:58:e6:90:38:dd:93:
                    20:47:e3:aa:56:65:24:cc:44:cc:6c:e2:12:34:de:
                    42:0a:b3:70:65:d6:ac:cc:89:af:07:84:de:a3:dd:
                    41:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:09:32:01:70:9A:FF:93:E3:9E:1A:70:81:15:AA:1F:E2:7E:F8:AC
            X509v3 Authority Key Identifier:
                keyid:8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f1:db:27:a4:70:53:fc:43:51:bd:e9:4d:d0:88:fb:b0:2c:
         fd:38:65:73:e8:e8:38:78:27:04:c1:fb:fc:2e:9b:10:39:d9:
         0a:cb:54:19:2d:06:84:a0:02:3d:74:8c:2e:1d:7c:1a:98:a1:
         b8:d6:6f:8f:64:11:a8:0b:b2:d7:cb:1f:ad:a0:b7:a0:50:82:
         95:05:a6:f1:a8:c8:a7:53:ff:f9:c7:a6:de:7a:d8:77:c9:bb:
         0d:1f:0c:cd:4e:5e:69:a3:3f:d8:2f:16:d8:b9:f5:be:a3:d5:
         96:b2:3e:63:58:68:0e:e9:af:22:25:16:9b:3a:1d:bc:05:f5:
         fa:42:a9:5e:09:b5:6d:aa:32:ae:71:a7:ab:84:0e:6f:e5:8d:
         02:3a:73:e9:ee:9f:d1:ae:c2:cc:61:9d:47:14:ba:61:10:93:
         34:9b:4f:c7:2b:56:78:b7:5e:2c:64:bd:e7:98:9e:6e:5c:1c:
         8e:66:78:fe:5e:38:10:ac:b6:f3:d6:6d:95:af:10:bd:d2:1c:
         81:24:b1:2f:e6:d7:a7:d8:98:30:99:82:6e:4a:7c:dd:52:32:
         6e:dd:42:35:8d:19:bc:03:d8:4c:7d:9f:10:f6:50:aa:78:a1:
         09:d3:c4:e7:1a:ee:64:19:4d:d9:eb:fa:72:37:1f:ec:67:25:
         13:be:5b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:00:34 2026 by rpki-client