Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File:                     JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier:          nmLGH7xgK8/cX97GyYC6XVQyQvxKZV7dr3Pa6AWr4Zg=
Subject key identifier:   1F:38:E5:CB:5F:CC:81:00:65:78:9B:5F:DF:8B:A0:CC:49:76:B0:84
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer:       /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial:       019FAB6379A18FBB2CC1418EE1D79AB09B5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number:          1272
Signing time:             Wed 29 Jul 2026 01:00:50 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:50 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:50 +0000
Files and hashes:         1: 68M1iA2v1hZrN-WYmwaUYqloW_k.roa (hash: Lu1vR1WuACYYOAE0lbWO8n33EaanCEqHclq+Bu+0jM4=)
                          2: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: kCqVkzcELynydATDYdbLOPz6tBTv78pO1m4LqprF2Zo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:79:a1:8f:bb:2c:c1:41:8e:e1:d7:9a:b0:9b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
        Validity
            Not Before: Jul 29 01:00:50 2026 GMT
            Not After : Jul 30 01:00:50 2026 GMT
        Subject: CN=1f38e5cb5fcc810065789b5fdf8ba0cc4976b084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:d0:68:31:34:6c:46:70:25:de:52:57:e5:
                    94:03:70:18:aa:af:31:c8:b5:d9:db:2c:11:d9:9e:
                    00:52:99:e8:29:5f:f0:9f:07:63:1c:60:78:43:a2:
                    dc:04:92:d4:d0:67:7a:09:38:65:e8:8c:8f:32:c9:
                    97:3b:60:13:75:f7:69:75:e2:10:8d:f8:93:6e:90:
                    90:43:33:16:38:59:91:65:61:12:53:40:59:a6:c7:
                    83:bc:28:f3:ce:ab:33:1f:2e:61:58:10:37:d5:e5:
                    ff:29:f6:df:e4:8c:73:67:d6:62:ca:6a:77:a1:5a:
                    2b:87:38:db:de:40:78:75:cd:cb:f2:c0:81:bf:30:
                    d0:91:c4:28:ee:0d:8b:23:2a:ec:87:c9:d9:41:e0:
                    bd:77:43:50:5c:c2:cf:1c:ad:25:a8:c4:cd:86:2e:
                    f1:e8:2e:bd:d9:b9:a4:0e:35:41:8c:99:9b:fc:1a:
                    19:b4:c3:f6:74:10:ee:4a:35:aa:bb:0a:e6:72:11:
                    4a:d2:aa:db:41:d8:de:28:58:ab:56:16:7a:de:68:
                    76:f5:55:30:dd:19:65:08:15:45:56:71:82:10:39:
                    ee:aa:bd:75:f7:f4:04:d4:d7:69:3b:9b:bc:67:ef:
                    f9:32:8f:41:7c:2c:10:14:13:26:ac:6c:f6:67:de:
                    d3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:38:E5:CB:5F:CC:81:00:65:78:9B:5F:DF:8B:A0:CC:49:76:B0:84
            X509v3 Authority Key Identifier:
                keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:be:e1:c8:ef:c2:6a:0d:77:5a:8d:42:e5:5e:c8:d4:bb:5a:
         3d:b7:70:40:6a:8c:2f:7d:2c:d6:de:e8:ac:94:aa:8e:f5:9e:
         8b:e7:96:0f:40:db:72:4e:18:8b:e1:68:cc:7f:19:75:cc:51:
         ff:19:b0:29:52:f8:d9:bd:33:20:df:06:1a:ae:17:c8:ff:15:
         ac:e2:21:92:4d:99:90:ff:93:53:2c:15:85:72:c6:58:5f:4c:
         c7:c9:fe:5e:52:2f:25:62:40:bc:8b:2a:ad:c6:1d:eb:c7:1b:
         e8:e1:6f:9b:34:10:b2:7b:c6:63:b0:e5:9c:17:15:eb:ec:ba:
         17:dd:ad:c6:d0:ef:7a:f8:ea:90:96:2e:e9:18:54:ed:ec:35:
         47:b7:62:54:8d:4d:49:cc:9f:ac:8d:0a:aa:f1:43:7c:f0:56:
         f5:10:e5:ee:fc:99:1f:0a:6c:60:54:6c:35:e2:e7:b7:f0:7d:
         51:a7:9a:60:b3:90:35:1c:ba:c8:34:34:91:66:92:a8:ff:df:
         44:3b:2e:3b:53:7d:76:35:30:fc:3d:72:da:80:29:c9:e7:2f:
         fa:ff:00:f3:2b:8e:7c:72:24:d0:17:f3:4d:2e:06:69:14:75:
         78:4f:15:0a:95:77:9a:bd:11:17:b1:6e:29:ed:29:2a:40:e4:
         1f:33:5b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:01 2026 by rpki-client