Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
File:                     jc19OY_EZuEhvEX69Q3YfDa7yW0.mft (raw, json)
Hash identifier:          4T0bclH9CBoeLMGM803aoizidQfpST3y4m/WCegNLGk=
Subject key identifier:   19:FC:52:E4:27:34:53:A3:4C:02:F7:85:70:D8:55:AC:7B:5C:B2:F8
Authority key identifier: 8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
Certificate issuer:       /CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Certificate serial:       019FAA19A6E4A22E62047EEA8E57FA739247
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
Manifest number:          0590
Signing time:             Tue 28 Jul 2026 19:00:35 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:35 +0000
Files and hashes:         1: iYRjHQAbJIp2oowSGAKJD6LLKmw.roa (hash: OcorZbUCquJDtFh4AjtJAw2ooEcP9az5ezvyYCaccyU=)
                          2: jc19OY_EZuEhvEX69Q3YfDa7yW0.crl (hash: GEBvA6kmm19l6Sfru48a4r9Rd+q5IuwTw7X8VXwz28k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:a6:e4:a2:2e:62:04:7e:ea:8e:57:fa:73:92:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
        Validity
            Not Before: Jul 28 19:00:35 2026 GMT
            Not After : Jul 29 19:00:35 2026 GMT
        Subject: CN=19fc52e4273453a34c02f78570d855ac7b5cb2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fa:07:81:7f:e9:28:fb:e6:49:dd:dd:61:54:
                    fd:53:97:04:95:1c:d9:53:ef:0e:35:6f:55:98:c5:
                    9c:fd:3a:09:fa:c2:32:91:0f:7e:69:ca:af:f4:03:
                    1a:60:46:db:99:a7:70:14:9c:b0:e0:c2:d5:13:3e:
                    36:bf:5b:ba:cf:5b:7a:28:d5:da:6e:53:27:b6:23:
                    53:d6:e0:d4:47:5d:22:9a:0f:00:58:d2:8d:5c:24:
                    02:d8:83:df:74:ad:5e:42:ce:da:02:c2:1d:a7:90:
                    d0:7b:3a:4b:80:9a:33:7d:72:b2:18:8b:7f:2e:d1:
                    91:72:8f:34:09:d8:a8:9c:13:9f:b5:01:f8:90:1d:
                    e6:ea:f2:a3:6f:f9:68:61:3e:ed:e0:6e:f9:b2:c3:
                    5c:3a:fd:6f:ab:81:9c:9c:61:02:a0:0f:6f:71:91:
                    d0:9d:8b:2a:1f:f7:90:1b:35:5c:fe:9a:09:f4:01:
                    ac:00:56:5f:16:5d:cb:22:31:c4:12:ec:44:cd:13:
                    57:12:87:08:44:35:b0:5b:a8:69:25:57:ed:7f:57:
                    fa:4b:06:36:6c:57:97:3a:71:ef:b4:3c:09:5d:ea:
                    3a:79:6e:3e:9d:b9:8c:1e:9b:77:ea:2e:1d:63:3e:
                    14:a2:3b:fd:25:91:1f:4e:2a:53:7d:dd:38:8f:dd:
                    8c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FC:52:E4:27:34:53:A3:4C:02:F7:85:70:D8:55:AC:7B:5C:B2:F8
            X509v3 Authority Key Identifier:
                keyid:8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:2e:ab:dd:c4:bf:26:26:d2:57:15:9f:ab:c9:86:36:68:fc:
         97:96:4e:4e:ef:af:33:16:2f:26:3b:8d:3b:4c:ec:75:ae:ce:
         9c:98:1d:dd:cf:98:d1:a1:76:cd:9a:05:a1:9f:c4:54:81:ce:
         93:18:94:bd:14:96:41:58:46:c8:88:f0:54:76:24:3f:2e:82:
         dd:88:ce:39:80:de:e1:49:57:8b:ea:4a:6f:c8:78:95:17:cc:
         91:92:ad:df:4f:b3:94:54:6c:5d:e4:eb:d5:09:da:c6:4d:49:
         99:d3:3d:b3:03:bf:5c:fa:ec:5f:75:3d:b0:87:25:13:f3:87:
         34:e4:90:e4:61:2d:c0:3a:d6:36:9a:3a:6c:9b:56:d0:f3:69:
         61:f4:9b:00:7a:d4:6c:d5:eb:72:af:55:6a:29:a3:08:e9:f9:
         f5:66:97:16:3f:66:0e:f9:28:e3:52:b5:39:c4:1f:e3:3f:80:
         85:27:36:22:3d:97:43:bb:40:99:9a:51:25:68:b9:1b:63:ef:
         f2:48:f9:b3:29:0c:41:7b:54:04:22:51:f8:7e:8b:61:e8:05:
         75:1e:63:52:dd:07:11:83:f2:ef:c8:c7:63:7a:59:9f:8f:5e:
         81:4f:82:02:60:9c:59:ac:a8:10:d2:e4:36:65:ea:3a:43:97:
         e0:d0:20:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:25:52 2026 by rpki-client