Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
File:                     jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft (raw, json)
Hash identifier:          ve+nOC9jnT2lbsJB69shkOi6MoWJO75NceW9aYFDaBw=
Subject key identifier:   CD:D7:B1:1E:AF:5B:51:96:EC:4B:95:49:E8:EE:AD:28:8D:7D:D7:87
Authority key identifier: 8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E
Certificate issuer:       /CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
Certificate serial:       019FA7BD71AAA5E35FB07FDF8C26AE5AAE30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
Manifest number:          02A0
Signing time:             Tue 28 Jul 2026 08:00:38 +0000
Manifest this update:     Tue 28 Jul 2026 08:00:38 +0000
Manifest next update:     Wed 29 Jul 2026 08:00:38 +0000
Files and hashes:         1: 8sncQGN_dofXozDeejTadUl8wRs.roa (hash: SW1+/cf3HtR0IB+S11zpo2LhAnvKL4afLlJ8vSGUHZ4=)
                          2: KK2fVvhYxOpAItc8n8GBk8_156E.asa (hash: f/2lJ7lV+SEIySTOe5SGEpN2tTypjAm/4YNh+sLBbuo=)
                          3: UtXzH5Oi0AulZFx0l8qig6QKaPg.roa (hash: 1qkvw5zb1r9z9CjOBe9UqDsw7BNtoAEFm0cGx+TLWUU=)
                          4: jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl (hash: AuPYCLDo5hZ6PwedXYsVydc/u7TbN4BzRdyqGj9zcrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:bd:71:aa:a5:e3:5f:b0:7f:df:8c:26:ae:5a:ae:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
        Validity
            Not Before: Jul 28 08:00:38 2026 GMT
            Not After : Jul 29 08:00:38 2026 GMT
        Subject: CN=cdd7b11eaf5b5196ec4b9549e8eead288d7dd787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:70:61:95:c1:95:ab:49:26:77:67:6a:a3:3f:
                    58:5c:a8:0a:e8:16:93:fc:59:e0:ac:95:0a:74:63:
                    d6:b7:cf:90:55:7a:ce:51:e9:00:5d:2d:1e:dc:4a:
                    fc:a3:31:95:a0:b8:6d:20:e9:29:8e:96:1d:af:de:
                    07:e8:c8:51:61:34:cf:c7:b9:a0:29:d4:e2:50:09:
                    c7:72:af:4c:38:6b:1f:cc:dc:bf:ba:5b:59:86:9f:
                    29:41:e5:f4:ff:1e:b6:3e:38:68:ef:31:3f:af:9e:
                    f4:18:e0:02:8b:3c:25:96:28:34:59:42:7b:0e:41:
                    4d:f4:23:02:c3:34:f9:bc:aa:04:be:cb:34:fd:68:
                    9d:5c:cb:d6:c6:55:a1:d0:2c:7e:0b:9c:1a:79:70:
                    23:d5:c9:c8:00:ae:08:1d:e9:88:1a:1a:14:83:e1:
                    42:b6:26:5c:a5:fe:ea:36:a7:2d:f5:86:c2:2d:61:
                    fb:07:c1:7d:ef:82:5d:a1:4c:5d:86:5a:c4:e3:64:
                    f2:de:75:61:ad:ce:2f:e9:59:bb:7a:cd:f5:17:ce:
                    bb:45:77:35:27:5d:ab:19:08:69:6c:74:26:74:65:
                    d4:8c:35:02:f1:3c:be:65:ca:ba:a0:55:42:eb:a9:
                    15:d7:43:9e:4a:0c:19:0d:51:12:6e:c5:e1:f7:9d:
                    26:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D7:B1:1E:AF:5B:51:96:EC:4B:95:49:E8:EE:AD:28:8D:7D:D7:87
            X509v3 Authority Key Identifier:
                keyid:8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:81:97:72:a8:58:0a:fe:27:e9:c2:93:83:62:65:bd:0e:ff:
         fe:b6:5e:4c:fd:0b:12:6b:cd:ac:8e:b8:d1:d3:c3:7b:ef:6e:
         c6:19:a3:c9:d2:65:15:cc:ec:fe:d4:0c:50:e8:27:ea:6f:09:
         1b:8b:c2:f2:cf:c7:2e:3b:09:9a:10:5d:7a:86:e3:ed:f6:4d:
         1d:09:0c:16:57:80:ed:27:a6:2a:dd:ad:24:f9:73:c8:d6:90:
         db:f7:b8:3b:61:fb:5e:4f:29:dc:df:5c:69:25:b4:a2:63:9a:
         78:6e:bf:8d:fc:00:27:9b:91:43:60:4e:5b:70:9a:98:b5:d5:
         71:dd:50:c7:a3:3b:bb:ee:27:50:28:80:bf:05:9c:60:fd:3b:
         89:fe:e7:09:cf:ec:0e:4c:f6:b6:c0:26:d8:83:b8:0c:1d:99:
         2b:5c:3c:f3:38:90:c7:03:4d:82:b9:d6:67:09:c0:05:6b:c3:
         bf:41:c3:41:da:13:d9:5a:ec:1b:e0:93:c6:f0:68:79:7b:80:
         61:9e:6d:56:93:b3:c8:1f:a3:15:06:18:76:ad:80:ff:8f:d7:
         da:46:52:6f:18:2d:69:e5:e4:0c:58:64:c7:83:12:49:ab:dc:
         76:dd:99:bc:fe:d3:53:f7:7b:b5:9c:a4:90:58:35:86:6d:8c:
         c3:4c:97:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:43 2026 by rpki-client