Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
File:                     Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft (raw, json)
Hash identifier:          R+ZchQTBd6fqI3dSCz3jUeR5FbpPynU3bG0QEeM65vU=
Subject key identifier:   10:74:59:32:F9:FC:50:B5:27:93:D6:39:2F:41:28:C9:BA:94:51:52
Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Certificate issuer:       /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Certificate serial:       019FA7BDE63F824215CB46490ECA72388B9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
Manifest number:          19D8
Signing time:             Tue 28 Jul 2026 08:01:07 +0000
Manifest this update:     Tue 28 Jul 2026 08:01:07 +0000
Manifest next update:     Wed 29 Jul 2026 08:01:07 +0000
Files and hashes:         1: 1tq3O762pd4piMgBW1bA4-OkYdE.roa (hash: 5SImQwh0Wwz5tGyZ+mkSamCxnSlJbvkXrVz7wNpOrGA=)
                          2: Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl (hash: S640dLaF6o6kG9x7vcQ5Vcpiw5wdYYHT+XVbvVp+Q8Y=)
                          3: Qkt4P-3ZvRUFITOdiTeOKgCxrkw.roa (hash: 3rqF0FN3C+u7VPFtuecMJP1cP04f2T4s71febW5rYck=)
                          4: T7Qloq1sVKmUvN2otUd3yqvPvi0.roa (hash: Z426zyvv0yt+vgk/xSAFr9Ff02ANySvAKoQ2RQiwE0A=)
                          5: kARVIlDBzF4gPohT6gRNl9dMH18.asa (hash: 7z/wKyEmpLOrAKMSn18/fQVblHqra7yUenbRNRt2qQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 08:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:bd:e6:3f:82:42:15:cb:46:49:0e:ca:72:38:8b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
        Validity
            Not Before: Jul 28 08:01:07 2026 GMT
            Not After : Jul 29 08:01:07 2026 GMT
        Subject: CN=10745932f9fc50b52793d6392f4128c9ba945152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:11:6b:82:de:8e:00:ad:ed:2c:ca:d1:dc:
                    65:61:5f:84:6f:8b:6c:2e:20:fe:3a:38:74:5c:cd:
                    69:b9:c5:af:cc:3e:b7:64:97:50:c9:9b:15:75:14:
                    87:4e:0c:43:c0:67:9e:51:79:31:da:20:8a:b4:59:
                    e5:b2:37:af:d7:11:a5:cf:9a:c2:fb:b0:08:c2:9c:
                    9a:19:b0:3f:09:4f:06:1e:37:0c:82:52:c3:24:b2:
                    6e:a1:01:b1:fc:2e:a1:43:c9:fe:50:19:97:45:d3:
                    9c:fa:19:57:b8:8b:64:23:93:c6:86:05:21:07:88:
                    25:9e:e0:bd:70:85:2b:9a:73:b6:24:32:f5:3e:24:
                    91:43:25:1a:cc:0c:bf:dc:75:71:df:40:e5:8b:de:
                    fe:94:fc:68:39:3e:27:36:a4:4d:2b:f9:01:d0:2c:
                    0a:59:e0:b8:03:7b:83:fb:87:32:f9:cb:cc:e0:f7:
                    4a:24:40:ac:8c:80:2d:27:79:62:1e:35:9f:ec:f4:
                    63:56:a0:f7:02:4a:23:e6:74:b1:4c:99:ee:a3:be:
                    00:c8:6d:f3:62:79:f3:50:5b:3d:09:d9:75:01:f2:
                    18:0a:91:c2:2c:dd:75:3b:ed:82:cc:29:ab:6e:e7:
                    b9:9e:7b:47:7f:a0:f9:43:40:1a:cc:21:75:53:1d:
                    9e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:74:59:32:F9:FC:50:B5:27:93:D6:39:2F:41:28:C9:BA:94:51:52
            X509v3 Authority Key Identifier:
                keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:24:13:24:84:5d:cc:45:03:31:9a:b8:df:61:5a:6a:0b:13:
         72:60:06:a1:67:e0:a4:c3:00:27:b5:83:91:ce:92:f7:ac:60:
         6a:f4:33:2c:00:16:50:bb:ba:0e:d7:a9:74:9f:ae:35:a6:85:
         e3:de:de:08:26:a6:c3:a0:82:2a:61:b6:0d:a2:cb:a6:11:f2:
         b4:6a:9f:e0:8b:14:dd:b0:1c:f3:45:33:1f:d0:25:66:6c:f6:
         57:21:77:3e:a8:73:6f:66:5b:2f:f0:fd:2e:b1:1a:4f:04:41:
         00:63:f1:ee:23:00:d1:b7:ce:3a:67:b5:3f:59:a7:55:7c:a6:
         13:1a:cc:9b:bc:9a:07:e0:27:09:e0:0a:07:95:df:86:43:53:
         df:71:f0:94:25:4d:cd:3d:12:4d:fd:e5:d2:8b:f9:be:1a:16:
         12:bb:4a:99:92:24:c3:83:22:66:4b:97:2b:7f:a0:bc:52:61:
         19:62:00:87:d8:b0:3a:e8:e6:1a:f3:c5:a4:ef:c5:ad:f2:c7:
         da:11:b3:50:da:96:96:f3:3d:a8:4c:f9:dc:03:53:c2:27:ab:
         c4:43:60:7e:32:50:3c:37:5a:3a:ec:f8:47:30:6b:80:95:39:
         95:89:1e:f7:61:d1:90:e7:58:63:68:59:56:7d:58:f1:0f:a8:
         e0:90:12:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:52:44 2026 by rpki-client