Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File:                     jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier:          6htXOS7+DAO1O5iG6tF8JK8dt2vwdufONpwVJqJY2KQ=
Subject key identifier:   EB:55:25:84:1E:A4:42:59:0B:DF:2A:3B:15:A9:2E:B6:6D:DD:40:D5
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer:       /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial:       019FAB635147B1C8AE23792FF8AFE6F91CDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number:          1248
Signing time:             Wed 29 Jul 2026 01:00:40 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:40 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:40 +0000
Files and hashes:         1: hJ4yBwRAkPSn0hZDZUYf9X3bnuA.roa (hash: SieYkKpzIy6oq5VVbN7rTFUvyMh99g+Bi6wzQEIEdkQ=)
                          2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: DqDEO2R9ReWjXHWJWP4zrOaY8Ir9itb5bgmI5vURVek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:51:47:b1:c8:ae:23:79:2f:f8:af:e6:f9:1c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
        Validity
            Not Before: Jul 29 01:00:40 2026 GMT
            Not After : Jul 30 01:00:40 2026 GMT
        Subject: CN=eb5525841ea442590bdf2a3b15a92eb66ddd40d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6f:10:62:c9:8d:ea:b7:b7:60:93:36:ca:f2:
                    0c:af:19:36:22:5b:0e:df:e8:fc:eb:4a:2f:c8:6c:
                    30:85:6f:4c:27:f7:e1:37:96:63:86:78:a4:40:2a:
                    f9:ba:97:0c:06:be:da:83:0b:7d:8f:02:79:58:56:
                    ac:b3:19:cf:73:6f:eb:3d:16:3a:d4:af:71:d5:4e:
                    84:04:aa:7f:83:3a:dc:f3:62:51:b9:ab:85:17:3d:
                    f5:d0:b8:ed:04:8e:89:2b:96:52:63:e5:0c:d1:35:
                    36:12:56:79:fe:7d:19:7a:c2:6f:aa:26:b8:88:69:
                    3f:34:94:a5:2e:ab:fb:c2:5b:8e:b1:e1:f8:ac:e4:
                    2c:ec:6a:73:32:55:2a:e0:42:f0:41:67:92:3e:b1:
                    76:07:bd:3a:0c:5f:4f:07:3f:1f:17:56:9e:de:4f:
                    97:55:3f:dc:2e:46:68:c7:b6:c7:76:e9:1a:95:15:
                    15:4f:ee:73:2e:17:dd:bc:60:b9:c3:ca:9f:73:48:
                    5e:28:6d:1e:f7:fa:a5:93:9e:d3:37:60:22:a4:0b:
                    48:b6:54:05:73:3a:fe:67:d6:97:b6:c7:91:b6:d1:
                    d7:bd:0a:89:7c:8c:7e:f3:ba:5f:5f:e0:03:68:67:
                    af:6b:1b:56:75:0b:8c:9c:f2:3b:96:dc:0c:09:35:
                    ed:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:55:25:84:1E:A4:42:59:0B:DF:2A:3B:15:A9:2E:B6:6D:DD:40:D5
            X509v3 Authority Key Identifier:
                keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:24:ea:4f:46:9f:73:44:ea:24:a1:d9:49:c2:af:99:36:a2:
         ce:43:a0:35:3c:8e:0d:39:23:0a:aa:92:71:e1:90:0d:01:15:
         6b:40:c8:8d:af:bd:7f:03:62:a7:09:5e:c5:7b:ff:b0:73:1d:
         01:e6:9a:a3:8d:48:73:7a:88:21:5e:28:aa:42:4c:dc:e5:4a:
         4e:ae:b2:a2:e8:db:ed:72:8e:8f:ff:86:27:6b:62:91:65:91:
         17:c1:e4:cf:9b:54:1a:b3:40:c2:df:18:d8:7e:b9:2a:15:9b:
         7c:42:f9:20:5a:d8:a5:6d:40:5d:e6:98:09:4d:f6:cd:07:ce:
         ee:37:ac:02:f6:4a:6c:1f:fb:37:83:30:dc:09:1e:37:68:e9:
         f2:c4:4a:51:3f:99:85:a7:3f:66:e4:39:18:af:4a:19:10:e7:
         65:07:c9:1c:89:78:00:88:5c:d1:be:c5:4f:b1:2a:5b:72:d1:
         d8:28:f3:36:09:52:f3:c1:e2:52:e5:86:cd:0e:8c:31:3f:0e:
         ea:58:92:ac:dd:96:ff:80:23:ce:53:a0:ea:ce:b2:fd:17:4c:
         4a:ce:a1:04:f4:3b:6e:ea:56:df:62:2c:68:4f:82:00:8e:ad:
         f2:da:f4:0f:97:22:40:5f:f6:76:45:08:ea:f3:35:db:66:45:
         9d:24:03:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:37:18 2026 by rpki-client