Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File:                     jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier:          4PCSVQlkVNV5XbWBkgGFwbK7B7oxUjyZ7M4JijGOn58=
Subject key identifier:   4F:89:48:82:02:EE:FD:AC:61:5A:37:86:08:04:E2:60:91:ED:DD:32
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer:       /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial:       019FA82BDCA2E501BE567A635766E3509E75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number:          19D2
Signing time:             Tue 28 Jul 2026 10:01:14 +0000
Manifest this update:     Tue 28 Jul 2026 10:01:14 +0000
Manifest next update:     Wed 29 Jul 2026 10:01:14 +0000
Files and hashes:         1: DW0L4TMX0k7NIxwBqURjmrgnl7k.roa (hash: 9bpHxyEG2FowJ+5wF/MX0mk7jznSAQlzUuYCWXpTFQM=)
                          2: MrTeH3244GhrsmktdFmsilQf7DQ.asa (hash: GC9kidXivmf55i4xsJViQsWGsdVImec2c8gAa1Wm8VM=)
                          3: fdMO8uKSbPAwkZWz81kW00ikw90.roa (hash: bDzUzfVEg3uUN6Y1DlBJvXf2YCZXufjYUiQMDPh+1vc=)
                          4: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: niAFwybNh1hPS+W5hpy53wgaKOSKRkXKCkFoyiDsOa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:dc:a2:e5:01:be:56:7a:63:57:66:e3:50:9e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
        Validity
            Not Before: Jul 28 10:01:14 2026 GMT
            Not After : Jul 29 10:01:14 2026 GMT
        Subject: CN=4f89488202eefdac615a37860804e26091eddd32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a3:8b:81:6e:5d:8e:06:b5:fb:1a:0b:91:b9:
                    8b:ec:ac:a5:7f:b4:31:95:b0:2d:94:a1:e5:28:92:
                    61:78:a6:29:e0:20:21:12:f5:9c:0c:3b:75:c0:93:
                    c5:e1:1d:19:66:12:f6:14:e4:ea:60:eb:07:ef:6f:
                    81:fa:ee:de:28:61:00:fe:ae:b6:10:fc:f6:f3:75:
                    c4:a9:14:57:ee:91:20:d7:7d:3e:42:08:69:4c:cc:
                    1e:cc:e6:66:4c:74:6c:f4:b2:79:b6:f8:1e:ff:36:
                    ef:ed:c5:ab:46:0e:39:ed:8f:7e:e4:97:1e:d2:c6:
                    19:31:89:ab:56:1f:7e:e1:6b:7c:b0:72:f9:14:ee:
                    6f:6e:48:4f:c2:aa:c0:b3:a2:54:6a:2d:9d:cb:cf:
                    36:80:25:87:37:a3:5a:3b:b9:81:72:51:8e:0f:05:
                    5f:6f:16:70:e5:7f:10:57:1d:2f:91:7c:8b:ae:05:
                    fe:39:d8:b1:00:13:64:d1:01:43:aa:7d:21:bf:ba:
                    e9:cc:56:5a:39:2b:7b:1b:f7:67:11:bc:7c:d4:8a:
                    83:8b:72:95:e4:30:ed:8b:db:0f:0d:ad:e0:fc:48:
                    ed:d9:a6:50:15:ff:4d:30:58:42:8c:29:56:39:f0:
                    d7:70:fa:cd:ef:1a:85:a9:5b:0d:1c:54:b9:ba:ab:
                    74:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:89:48:82:02:EE:FD:AC:61:5A:37:86:08:04:E2:60:91:ED:DD:32
            X509v3 Authority Key Identifier:
                keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:41:c8:cb:3f:15:15:49:72:24:15:f5:6b:62:b1:48:36:0c:
         dc:4d:56:88:9f:27:24:c6:9a:82:c4:9c:57:95:8c:70:0c:f8:
         b9:91:96:bd:34:81:b9:96:b2:28:ec:10:a9:4b:d9:83:91:63:
         1a:87:ca:51:d8:94:6a:fc:90:27:cb:7a:c7:1b:e1:c8:a4:a3:
         ef:ea:70:08:74:fb:f5:20:82:08:40:9e:ab:40:e4:ba:87:b2:
         f0:34:98:c8:c5:9b:0a:57:83:38:a3:54:b8:76:43:25:82:ab:
         da:fa:d9:1a:ab:9d:ac:11:7f:d8:4a:21:ba:4c:22:94:2b:b1:
         18:6a:b6:a9:09:e9:23:0a:30:32:70:85:a1:cb:a5:52:3b:27:
         b6:50:1a:9a:36:8d:97:1b:15:75:6f:87:bd:d3:90:ae:4e:1f:
         2c:26:1b:0c:6d:02:4d:2c:d2:eb:b1:65:a0:e3:12:c9:59:07:
         65:d6:ce:8e:0e:bb:c5:01:7a:71:f4:59:56:79:d2:ca:c5:10:
         87:6d:f9:cb:92:92:bd:91:3b:22:f8:c1:a1:81:b8:8b:57:50:
         df:ce:83:0f:f2:21:85:6d:44:10:b5:21:09:62:33:c2:9f:a5:
         77:a5:8e:ba:49:b6:20:e3:f3:68:d3:4a:b6:b6:63:2d:41:c0:
         ad:67:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:38 2026 by rpki-client