Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
File:                     JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft (raw, json)
Hash identifier:          flfg8I7JsVUWTUhZ7DeW79dBCUnU+ScgdacQKQ7pbyU=
Subject key identifier:   15:7A:CA:DE:2F:88:94:A9:B7:57:BD:29:DE:37:36:68:1A:37:14:6F
Authority key identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
Certificate issuer:       /CN=26c672da72a34cc282adc40f282676de75117654
Certificate serial:       01987D8AA04A34F298CDE87231D19FF44EDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
Manifest number:          026A
Signing time:             Wed 06 Aug 2025 04:01:33 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:33 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:33 +0000
Files and hashes:         1: 3T-1XN6_cwuMNW22iL1_AA25sSU.roa (hash: zx2BF5CFYR8Sr363pI6NcjPdMBZx2ThD7Wo/N06Wwyo=)
                          2: JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl (hash: U5CYosK0i/qadFPYzgx32VvQOPAHC+qdwHsa+LKa7Ik=)
                          3: kB78k7d7cNChEiOEdhutVluA5Eg.roa (hash: a/qillBjMak//HIfJthslOlVYybCavMHPJc8Tn/8qiM=)
                          4: wDk7LmI6cHqgPwoPiReork5n7TM.roa (hash: f4jrE7YABghrHsA4bobpIqsKuhp5LdVQIAwVcPaNdyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:a0:4a:34:f2:98:cd:e8:72:31:d1:9f:f4:4e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26c672da72a34cc282adc40f282676de75117654
        Validity
            Not Before: Aug  6 04:01:33 2025 GMT
            Not After : Aug  7 04:01:33 2025 GMT
        Subject: CN=157acade2f8894a9b757bd29de3736681a37146f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1e:38:8f:eb:aa:17:a2:10:ea:38:de:e3:bf:
                    4e:fd:f6:8d:3d:71:f7:02:46:df:e7:d3:da:59:3b:
                    57:d5:ba:b7:bd:89:0e:0b:81:ca:42:eb:44:75:a3:
                    3d:f0:56:4e:29:45:12:45:2a:d0:ef:89:25:6d:ef:
                    39:ce:b7:cf:d4:e1:6f:53:3b:eb:1a:67:0b:61:a8:
                    10:69:e8:b4:ad:38:38:c6:54:90:9b:63:2c:b8:0d:
                    7a:7a:8c:e2:bb:a6:2f:35:23:a9:2e:5a:f2:59:0a:
                    30:49:cc:6f:b9:df:d9:e6:49:9b:41:d8:5b:cf:62:
                    30:19:16:99:2d:fa:d2:eb:4a:b4:49:43:1a:6e:99:
                    19:26:ae:78:d9:cf:59:5c:51:6a:ea:12:59:68:ce:
                    b3:53:c1:e9:7f:49:00:10:95:b6:d3:56:7b:7c:cd:
                    47:6d:37:71:ce:b4:6c:e0:76:7f:30:68:ed:d9:0d:
                    48:d0:b0:ee:c9:6c:c2:71:22:a8:01:c5:2e:06:00:
                    0f:64:88:92:08:37:53:01:40:d6:9d:53:12:bb:a9:
                    ee:12:13:85:b5:ff:3c:ca:8d:ff:c9:2e:5b:41:79:
                    63:42:f2:ac:02:64:0b:ef:ce:dd:a5:64:25:e1:b5:
                    81:28:ab:e8:a7:74:fe:1e:8f:ec:66:cc:41:c7:0b:
                    cb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7A:CA:DE:2F:88:94:A9:B7:57:BD:29:DE:37:36:68:1A:37:14:6F
            X509v3 Authority Key Identifier:
                keyid:26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:bc:c1:2e:d7:86:b3:84:41:82:27:0c:4b:55:67:54:69:73:
         c5:ab:31:45:fe:82:1d:1d:8e:fe:c5:dc:de:ec:ec:43:2b:4e:
         3a:cd:34:81:92:50:c3:10:32:4c:bb:52:12:f0:32:25:b2:22:
         aa:09:38:b2:11:45:c0:3d:11:44:34:95:bf:6f:e6:c0:2c:ca:
         0c:3e:69:bd:99:37:1c:69:95:ae:2f:71:ff:26:f0:4e:69:d6:
         d5:74:00:c9:35:a5:70:d9:cd:dc:58:96:15:98:6f:e3:84:56:
         74:c7:4f:73:e9:a9:76:77:2e:a7:07:0e:d9:98:e5:d1:81:55:
         4a:f5:62:b5:07:95:96:72:8d:07:49:d4:46:db:11:3f:60:51:
         dc:6b:6d:89:60:c1:c9:ff:dd:ea:69:df:8d:c4:92:9c:4a:8e:
         98:ba:7b:a8:e0:54:a7:c4:80:26:ae:15:03:c4:ba:5f:14:b8:
         4c:60:07:ab:04:26:7c:99:42:d7:28:e5:4b:3b:42:b0:d4:50:
         10:6c:b7:91:bf:52:6e:bc:88:c9:4e:a0:11:c6:90:5d:75:d6:
         45:19:7e:b6:d0:91:28:49:f4:88:fd:17:aa:f0:fd:f9:45:c9:
         65:c9:37:28:16:9b:78:4f:52:0c:27:28:d1:e4:88:3b:02:24:
         34:28:40:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:05:13 2025 by rpki-client