Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File:                     JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier:          DpeNFXCaKHUH4g6XTv2s0xRYWafHYekdUyU9AUG+jpA=
Subject key identifier:   78:13:65:D0:38:A7:E5:77:38:2D:CD:F9:14:5B:74:D1:4C:B1:6B:5F
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer:       /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial:       019FA7BD88599680C79B32B097F6D6A1C20F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number:          1844
Signing time:             Tue 28 Jul 2026 08:00:43 +0000
Manifest this update:     Tue 28 Jul 2026 08:00:43 +0000
Manifest next update:     Wed 29 Jul 2026 08:00:43 +0000
Files and hashes:         1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: Ct68OG0lb/m2Sbs7c2P2g9b7FssHr+5lVafFjXcXGTE=)
                          2: QT5YaQtwh10kjLMseFaZ5StOfCw.asa (hash: mXFjq/NajihGSXsqBXu5vBTGi2iI8iMdEQGHWiYPM84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:bd:88:59:96:80:c7:9b:32:b0:97:f6:d6:a1:c2:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
        Validity
            Not Before: Jul 28 08:00:43 2026 GMT
            Not After : Jul 29 08:00:43 2026 GMT
        Subject: CN=781365d038a7e577382dcdf9145b74d14cb16b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:72:e4:b2:b3:ff:83:bd:7b:d9:1b:91:00:1b:
                    3b:e5:ee:ea:fe:89:23:d8:89:af:0f:54:e4:c2:a8:
                    f5:7a:cb:8b:4c:67:cb:8a:7b:2f:91:66:74:0e:c0:
                    70:3b:36:71:64:73:0a:29:7d:9b:23:df:1a:6d:61:
                    e6:24:31:60:c5:2d:98:91:38:ba:66:8a:80:4b:e1:
                    4a:51:6c:3f:32:a0:65:67:34:57:ce:de:b9:9d:2d:
                    2b:ff:b7:87:b4:26:ff:f4:37:c3:65:d8:5a:06:f2:
                    8a:3f:1e:58:1a:33:1e:60:ee:63:58:98:22:43:c1:
                    38:5e:5b:fd:f5:49:28:74:b2:f1:d5:58:fb:2e:fb:
                    92:24:44:86:6a:de:46:a0:95:f7:ab:08:64:47:84:
                    9d:46:aa:50:de:2a:08:4a:8c:54:8b:c9:9e:36:2e:
                    f8:65:1e:07:e8:09:a4:74:d3:ac:f2:ae:12:56:25:
                    21:20:82:0a:0b:ba:29:cf:16:3e:d3:29:9a:fe:e7:
                    ed:c3:00:be:7f:c5:08:25:de:6d:ea:3a:d2:21:4e:
                    f8:2b:d1:ea:af:31:96:64:f0:ca:6c:31:74:62:d3:
                    bc:74:e7:0d:72:39:2a:21:0e:f1:26:db:46:1a:77:
                    0b:54:14:b4:32:43:29:9e:23:23:4f:55:ef:bb:45:
                    4d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:13:65:D0:38:A7:E5:77:38:2D:CD:F9:14:5B:74:D1:4C:B1:6B:5F
            X509v3 Authority Key Identifier:
                keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:66:58:00:43:43:33:89:94:28:1a:3e:dc:30:4c:dd:d4:33:
         d2:98:4e:98:b9:d0:a4:bb:4d:8c:0f:0e:a5:75:2d:70:e2:c4:
         c0:18:57:57:54:ee:bb:be:47:a2:4a:74:85:45:a9:cc:20:8a:
         43:93:1a:57:5e:2a:99:f7:9a:2b:da:80:40:e1:2b:f4:c9:d6:
         dc:66:fa:20:b5:2c:94:e4:94:c1:0a:76:b6:71:3c:07:cd:b1:
         2b:71:e8:a9:09:2c:8c:da:83:e8:dc:01:16:16:c1:b5:21:9d:
         94:55:f8:ef:af:77:56:18:b8:66:c2:b8:f0:ef:b5:e9:f3:fe:
         57:39:54:f3:0b:cf:01:b8:e5:88:c4:ce:11:d8:4c:88:49:22:
         80:a0:d3:23:d6:6e:23:13:2f:ea:15:f6:c3:e7:58:3e:55:00:
         5a:57:5a:28:e2:80:b6:42:89:b2:55:eb:de:26:ff:37:58:0c:
         86:be:42:c8:55:e9:06:a2:29:c6:94:62:fb:ee:a9:82:a5:01:
         07:c0:b9:2a:27:ba:3a:19:50:d3:59:9b:1e:e9:78:ff:4f:ae:
         fc:1d:54:41:a9:32:ef:80:ce:fc:b3:54:7b:c8:f7:74:55:48:
         7b:e1:69:80:06:a0:f2:3f:f8:be:89:0c:5c:01:2a:cb:32:be:
         a5:0b:89:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:16:25 2026 by rpki-client