Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
File:                     JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft (raw, json)
Hash identifier:          by2CKhDbQv+M3y4G5FvBa8BVrXPxBLBI6t/Ttnu6Qi0=
Subject key identifier:   5A:95:93:8E:91:2B:D7:AA:DC:95:54:44:A0:5E:55:72:3E:B0:BE:49
Authority key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
Certificate issuer:       /CN=255633182ddd558b41ba16c519ee461450ddddd9
Certificate serial:       019FABD10682AAC458003AF0387A2184E4EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
Manifest number:          03FF
Signing time:             Wed 29 Jul 2026 03:00:30 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:30 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:30 +0000
Files and hashes:         1: 0B6H5zkrFMKoeXCuwx2WOB_Z6tU.roa (hash: AMOeY2WBqIDOZyan24GKWqLsMD/oVDxNwHTF+9g2L3g=)
                          2: JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl (hash: qBIYiIDAnmrhUTFlwVCnNDw8NWs3A6VhYzYdxpavHJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:06:82:aa:c4:58:00:3a:f0:38:7a:21:84:e4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255633182ddd558b41ba16c519ee461450ddddd9
        Validity
            Not Before: Jul 29 03:00:30 2026 GMT
            Not After : Jul 30 03:00:30 2026 GMT
        Subject: CN=5a95938e912bd7aadc955444a05e55723eb0be49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4d:14:2d:f6:b2:c0:83:07:b1:a3:a1:38:ca:
                    79:b4:b9:be:e2:dc:b7:45:55:bb:48:93:60:4b:87:
                    6d:8e:37:e6:56:4e:34:52:51:ef:83:32:8d:a1:2f:
                    4b:b5:85:cd:d2:35:7e:41:98:a9:96:8a:b2:7e:44:
                    df:b9:ed:83:73:e4:ed:09:a0:ec:1f:a3:0d:f3:07:
                    6f:31:6d:c1:4b:84:2c:5e:87:e4:07:d9:7d:a5:22:
                    a4:95:c1:14:87:fb:38:65:53:5a:a2:5e:30:08:6f:
                    b7:28:dd:91:01:14:bb:a5:4f:2f:4c:02:b9:b9:7b:
                    c7:c2:96:40:75:6a:d2:52:e5:57:d0:43:09:cd:e3:
                    94:df:dd:be:ff:7a:69:1b:4d:43:d0:e9:bf:3c:1b:
                    4b:16:f7:c0:c2:bb:26:9f:20:85:54:68:f3:72:d1:
                    dc:9b:92:05:b5:41:78:b4:4c:b4:c4:d5:40:0d:e6:
                    1d:fc:d3:d9:d5:9d:bb:44:a6:ef:6e:ee:a9:a7:44:
                    d0:21:66:c1:67:49:62:c6:ac:c5:5d:7a:ec:c6:6e:
                    55:1f:70:db:cf:89:c1:86:fc:5d:73:e1:b8:64:cc:
                    4e:6d:9d:73:79:34:b9:ab:79:90:8f:e4:b3:c3:cc:
                    be:66:26:68:09:5d:e0:50:78:a3:89:15:73:87:f0:
                    72:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:95:93:8E:91:2B:D7:AA:DC:95:54:44:A0:5E:55:72:3E:B0:BE:49
            X509v3 Authority Key Identifier:
                keyid:25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:dc:15:1d:0d:8d:d2:5d:96:e6:f7:28:8d:a8:75:49:10:39:
         0d:07:dd:c9:83:51:55:4d:90:eb:f1:7b:54:e1:c1:bb:84:4f:
         2d:85:8c:40:8e:ab:bf:60:db:0a:87:62:57:3c:07:25:3a:f2:
         ab:92:ac:63:26:4d:a7:39:65:12:77:f3:98:eb:7b:96:ef:62:
         5f:52:f4:fb:c4:61:d6:00:64:d2:67:a8:29:39:63:9c:40:ec:
         e2:9e:92:40:8c:45:1a:2c:fd:82:46:08:6d:6c:b9:07:79:8e:
         14:43:57:d2:e4:15:c8:a6:69:05:6c:96:d0:c3:a3:9b:31:07:
         85:a7:a9:a8:62:65:1a:e4:d4:6a:89:cc:7d:c5:8e:b4:34:59:
         96:a3:14:c6:41:12:67:be:ee:97:a7:0a:43:af:b1:0a:70:ea:
         36:fc:9b:74:e7:a0:b5:c2:fd:dc:4b:65:0d:22:7c:f7:47:a0:
         f8:40:65:e3:4e:2b:fc:89:b9:04:ed:bd:45:35:8a:c5:94:a7:
         1a:e7:c0:64:3d:f0:d4:2f:5d:97:38:9f:de:33:b1:eb:0b:74:
         d0:20:c9:c3:7e:9c:00:07:7d:4c:bb:65:d4:92:f2:fb:78:1b:
         06:18:f5:74:64:db:e7:60:c2:35:cb:78:3c:d8:d3:37:a7:c5:
         e2:4f:bb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:11:25 2026 by rpki-client