Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
File:                     j1Gq0OQUir4_KouNQxjzS0VrZfE.mft (raw, json)
Hash identifier:          7liDakHkn2Bwi2CvManTNHlHEfcEysiQrRU4IzZP/+M=
Subject key identifier:   62:A4:92:14:F3:23:03:F4:B6:61:3F:DC:FA:2C:9B:95:32:F9:6C:E5
Authority key identifier: 8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1
Certificate issuer:       /CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
Certificate serial:       019FAC3EF5DCA9D8936A13F6E9D1BB5C46DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
Manifest number:          029D
Signing time:             Wed 29 Jul 2026 05:00:35 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:35 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:35 +0000
Files and hashes:         1: 5CYe2w6R8bIP53LSediQOkU8X6Y.roa (hash: 62hxmbI0Pt2Gc+kE97Qd4+IWL8YV1uOGUoBpSifMc4g=)
                          2: 6D-B1oT3Xej3PD_aAEPZhMH_WI4.roa (hash: BNTN6fDo238uP3+GkU68E9CQziGYvVq1d9TXOCCqbdc=)
                          3: AiyDVffautqfmFw0-sHwLnrdi94.roa (hash: NqMMGxy1WwFAXktdmGqyVpQBfDu1vxm8tC/DWTYXqCg=)
                          4: KTAAuRsqmRld1n4ZdiqcKLG_hbI.roa (hash: Z/rqoZBNVfDm70QTbYQ7hfqHZXGsKtZpgexuaPzb1M4=)
                          5: j1Gq0OQUir4_KouNQxjzS0VrZfE.crl (hash: wziPft2aEEnZTQSMqpG9+tPjYJ6NJ7XjpUIfGd3GWbs=)
                          6: lXUAxU6WVwpNoYD3PNJupX0IdnQ.roa (hash: 1IXDFDpAZ7cDUUd7sdHkzjt07vGwbPC7cOUCYW3+UFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3e:f5:dc:a9:d8:93:6a:13:f6:e9:d1:bb:5c:46:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
        Validity
            Not Before: Jul 29 05:00:35 2026 GMT
            Not After : Jul 30 05:00:35 2026 GMT
        Subject: CN=62a49214f32303f4b6613fdcfa2c9b9532f96ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:95:40:48:9c:11:57:3f:38:21:d7:69:20:
                    d3:2a:9c:47:51:12:16:57:b0:a9:3d:71:4e:f9:60:
                    ca:d5:68:5a:c8:b8:29:ef:0f:34:f7:0d:8f:0a:83:
                    2b:15:49:da:77:56:17:18:2b:4e:7c:61:57:d1:9c:
                    4f:b2:57:fe:a7:b5:08:aa:d7:2a:66:86:f6:db:57:
                    aa:a7:bd:6f:6f:76:57:cc:10:c0:d2:98:2d:74:3c:
                    99:1c:ac:ad:d5:dd:41:a6:8b:b5:ac:11:0a:83:46:
                    fd:55:63:94:ca:e9:bf:25:87:4d:88:cb:2e:51:32:
                    8e:5f:fd:8d:b5:f3:14:1b:6c:75:6a:da:ba:7c:77:
                    9b:71:67:a6:9d:bd:d0:c0:20:13:2c:61:c5:69:cc:
                    9d:7e:95:f3:75:74:37:cf:3e:74:ab:a4:af:e4:64:
                    05:ad:ec:45:e8:76:d7:b2:e6:b5:de:c2:4b:e8:58:
                    b5:fa:7e:e9:ea:d0:e1:c9:1e:74:26:db:54:05:7a:
                    c6:92:2f:ea:f8:8b:0a:c8:91:52:fd:dc:cd:e3:e0:
                    ee:ee:13:6e:42:23:6b:27:3d:37:64:c6:bc:60:62:
                    a9:6c:7d:3c:af:4a:66:0f:5e:73:d2:99:38:b5:1b:
                    65:d5:b6:9d:5f:0d:cf:4e:75:5a:4f:07:8e:91:3c:
                    01:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A4:92:14:F3:23:03:F4:B6:61:3F:DC:FA:2C:9B:95:32:F9:6C:E5
            X509v3 Authority Key Identifier:
                keyid:8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d8:85:b8:65:60:52:82:04:d3:a6:45:92:05:04:32:60:3d:
         79:16:da:5b:94:fb:bc:da:bf:08:81:23:68:ab:3e:5d:44:41:
         13:2d:76:c1:5b:f9:ac:9c:95:cd:47:05:8c:fd:17:70:61:90:
         14:7d:06:57:bd:02:3d:d3:b8:c7:21:c6:ff:f4:9c:88:e2:3b:
         ca:b6:2e:e0:fb:28:b7:1a:be:d0:00:87:22:47:ef:47:13:e8:
         ce:38:ae:3b:11:56:c7:e1:24:ac:79:00:23:3f:94:31:21:2b:
         b7:56:66:57:65:07:61:12:6b:97:df:b5:11:6b:c5:b6:b5:20:
         a8:bc:9b:43:5f:65:b5:da:4a:df:ec:0c:2d:3e:6d:fe:5a:8a:
         e7:c8:12:91:bb:00:20:6e:ff:83:d5:0d:2e:f8:48:20:97:be:
         04:2a:6b:51:9a:07:aa:9d:6c:5f:ec:12:32:ef:03:b3:d6:81:
         01:12:bc:7a:4d:f7:f6:f9:ac:b7:2b:9b:56:62:36:d6:ec:ab:
         1a:1d:a0:f1:1e:6d:15:5b:5e:f6:e5:ec:a7:e9:71:ed:b7:ab:
         22:15:b1:8b:c1:51:57:2c:f0:b1:92:b1:c1:eb:26:4f:14:2f:
         a0:a7:f0:fc:b9:34:a9:d5:5a:af:df:5c:d2:a6:55:1d:61:bb:
         b2:7e:ad:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:29:49 2026 by rpki-client