Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
File:                     JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft (raw, json)
Hash identifier:          t3Gst6Svui95bFioSyrFQUSsJX2gxoD/VwWjHVPdUiY=
Subject key identifier:   10:EA:3F:B4:81:E3:F0:10:5D:CB:04:EC:00:6A:8F:CF:6A:4E:37:67
Authority key identifier: 26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6
Certificate issuer:       /CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
Certificate serial:       019FAAF5F90FF4CE6067C980D1178F72D62C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 23:01:14 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:14 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:14 +0000
Files and hashes:         1: 1-etkEpJT5huTCkvp4nk0dydE9KA.roa (hash: eid4ChJhHIbdTu3ltYjDcXJHFhgZsYu7s5rAP/A4Ugo=)
                          2: JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl (hash: XWnx6P+1nO5p6vc6GKV0ZdN0ym/uueufFIRMiUiXEl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:f9:0f:f4:ce:60:67:c9:80:d1:17:8f:72:d6:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
        Validity
            Not Before: Jul 28 23:01:14 2026 GMT
            Not After : Jul 29 23:01:14 2026 GMT
        Subject: CN=10ea3fb481e3f0105dcb04ec006a8fcf6a4e3767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:45:43:b8:8b:97:01:75:0d:ec:7c:86:ae:
                    e5:59:c9:f9:e2:b0:14:a6:5e:9d:69:40:73:d6:cc:
                    0a:87:c9:07:21:17:bb:f2:80:a9:be:ee:af:b7:15:
                    2c:43:99:39:0a:0e:4f:2c:a2:84:aa:78:9f:f5:eb:
                    31:44:2e:cf:0f:a2:75:97:09:ec:ed:2c:66:24:84:
                    a2:3e:f0:3a:4c:22:bb:17:6e:a7:65:23:63:35:e3:
                    45:b9:84:80:c7:5f:28:ce:10:07:e7:40:b0:bb:74:
                    05:29:9e:44:78:01:26:bf:92:c5:85:1c:f7:ae:0f:
                    69:34:13:f5:37:a0:92:5e:39:2d:81:60:83:07:35:
                    97:01:2b:17:05:50:74:84:4e:81:28:eb:5c:42:e6:
                    fb:eb:62:8e:83:bd:e3:a5:b9:f3:0a:43:0c:d0:13:
                    94:5c:a5:a9:0d:8d:33:47:68:cc:b0:63:5a:96:e0:
                    05:68:66:7a:05:1e:76:fc:02:3a:33:98:9b:41:59:
                    46:47:8b:2c:34:1e:b2:da:c5:ae:be:ec:e1:f1:28:
                    c4:9c:2d:40:ae:3e:17:b4:0d:f0:8c:f0:09:83:18:
                    2b:67:20:24:f4:f5:fd:b9:61:e1:d0:76:4f:20:b3:
                    85:7a:1a:54:db:93:b0:c2:cf:02:7a:7a:19:e7:19:
                    e0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EA:3F:B4:81:E3:F0:10:5D:CB:04:EC:00:6A:8F:CF:6A:4E:37:67
            X509v3 Authority Key Identifier:
                keyid:26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c8:f9:52:2f:8f:6d:50:30:b3:cb:71:ed:3e:f4:5b:6b:dd:
         0a:e1:ff:58:29:0d:6b:ea:f5:29:f9:65:4e:76:b9:7d:8f:d2:
         fa:89:dd:f3:ea:e1:8c:14:97:07:b1:60:f3:fd:e8:74:1c:40:
         c0:70:a7:1f:e4:5c:62:3b:a5:e0:cf:f8:2e:9f:4c:8b:86:14:
         fe:77:15:1c:78:d5:f1:31:b0:62:c9:59:4c:1b:83:61:a1:46:
         1d:69:91:d4:c6:b5:59:4a:55:be:4e:c2:b5:e4:2b:3f:b0:4b:
         e5:f8:b0:25:15:cf:b7:90:b0:07:48:77:aa:c2:6e:96:df:32:
         58:81:07:5f:31:ab:e5:ea:59:44:ff:16:c5:67:f4:6e:af:99:
         46:7f:8a:98:89:5e:c9:7c:64:94:4b:aa:07:f6:17:8c:ca:09:
         f2:fe:86:31:b5:bd:31:65:f7:10:e2:bc:7c:9e:f4:47:53:a0:
         f9:53:90:db:27:02:06:f6:28:62:bb:c3:05:4a:5a:d9:c2:41:
         cb:11:28:b4:02:b5:32:37:25:b2:6a:7b:12:97:da:ac:27:c0:
         fc:51:3e:8e:f0:14:1a:18:2f:2a:77:0c:f4:06:f7:4b:b2:cf:
         c8:58:22:10:d3:91:b9:db:67:e9:23:e7:7e:94:9f:af:f1:e7:
         56:3c:3f:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9fkP9M5gZ8mA0RePctYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YjljZWIxMGMyYzhjMDBkMTYwOTk2MDNjYzExYmVkMDA1
NDdiZTYwHhcNMjYwNzI4MjMwMTE0WhcNMjYwNzI5MjMwMTE0WjAzMTEwLwYDVQQD
EygxMGVhM2ZiNDgxZTNmMDEwNWRjYjA0ZWMwMDZhOGZjZjZhNGUzNzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGVFQ7iLlwF1Dex8hq7lWcn54rAU
pl6daUBz1swKh8kHIRe78oCpvu6vtxUsQ5k5Cg5PLKKEqnif9esxRC7PD6J1lwns
7SxmJISiPvA6TCK7F26nZSNjNeNFuYSAx18ozhAH50Cwu3QFKZ5EeAEmv5LFhRz3
rg9pNBP1N6CSXjktgWCDBzWXASsXBVB0hE6BKOtcQub762KOg73jpbnzCkMM0BOU
XKWpDY0zR2jMsGNaluAFaGZ6BR52/AI6M5ibQVlGR4ssNB6y2sWuvuzh8SjEnC1A
rj4XtA3wjPAJgxgrZyAk9PX9uWHh0HZPILOFehpU25Owws8CenoZ5xngRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDqP7SB4/AQXcsE7ABqj89qTjdnMB8GA1UdIwQY
MBaAFCa5zrEMLIwA0WCZYDzBG+0AVHvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnJuT3NRd3NqQURSWUpsZ1BNRWI3UUJVZS1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iYzk4Y2ItOTcxZC00YjA0LWI4MWUt
YjYxMDU2ODQ2NmIzLzEvSnJuT3NRd3NqQURSWUpsZ1BNRWI3UUJVZS1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9iYzk4Y2ItOTcxZC00YjA0LWI4MWUtYjYxMDU2ODQ2NmIz
LzEvSnJuT3NRd3NqQURSWUpsZ1BNRWI3UUJVZS1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8j5Ui+P
bVAws8tx7T70W2vdCuH/WCkNa+r1KfllTna5fY/S+ond8+rhjBSXB7Fg8/3odBxA
wHCnH+RcYjul4M/4Lp9Mi4YU/ncVHHjV8TGwYslZTBuDYaFGHWmR1Ma1WUpVvk7C
teQrP7BL5fiwJRXPt5CwB0h3qsJult8yWIEHXzGr5epZRP8WxWf0bq+ZRn+KmIle
yXxklEuqB/YXjMoJ8v6GMbW9MWX3EOK8fJ70R1Og+VOQ2ycCBvYoYrvDBUpa2cJB
yxEotAK1Mjclsmp7EpfarCfA/FE+jvAUGhgvKncM9Ab3S7LPyFgiENORudtn6SPn
fpSfr/HnVjw/bw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:04:30 2026 by rpki-client