Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
File:                     JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft (raw, json)
Hash identifier:          B5hwCcY6Sbo8fXkCSw3XmcuLIHrndLo2bgeyOAq4gTw=
Subject key identifier:   D6:05:6B:4D:9F:0D:4C:DB:3E:16:30:3B:C7:54:F7:3A:07:E0:B1:25
Authority key identifier: 26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B
Certificate issuer:       /CN=26251cf7d8d6d057dc64715ba836299df39fd85b
Certificate serial:       019FAD8915B4D292D722CB7F32AA6CBA3D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
Manifest number:          033A
Signing time:             Wed 29 Jul 2026 11:01:10 +0000
Manifest this update:     Wed 29 Jul 2026 11:01:10 +0000
Manifest next update:     Thu 30 Jul 2026 11:01:10 +0000
Files and hashes:         1: JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl (hash: 1oeU2j4E6yXEkAiz7FZbWSQ07fKapnE1Qnyy/q+dSCA=)
                          2: fX-rHvxMS7rGe-P0kdh6qBCV0kw.roa (hash: YxEpHCuxMU6/BR/ByERCcyICEyXZ5/Zrc7JTg1hXiro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:89:15:b4:d2:92:d7:22:cb:7f:32:aa:6c:ba:3d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26251cf7d8d6d057dc64715ba836299df39fd85b
        Validity
            Not Before: Jul 29 11:01:10 2026 GMT
            Not After : Jul 30 11:01:10 2026 GMT
        Subject: CN=d6056b4d9f0d4cdb3e16303bc754f73a07e0b125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:47:7c:b6:92:5a:66:b5:22:a8:32:7a:1c:
                    88:a4:b8:71:06:66:ef:89:af:be:d9:a0:69:5d:a6:
                    03:6a:50:ae:f3:18:91:29:2c:c7:ae:17:f6:2d:c7:
                    c5:a7:c5:38:7f:94:89:95:32:a1:37:5d:a5:b6:50:
                    b5:82:7f:4e:e9:37:63:39:9e:dd:d1:14:4e:25:81:
                    d6:c5:a4:2b:9b:be:1b:58:97:be:da:66:9f:20:63:
                    5d:ef:2f:2f:5b:7f:f1:28:2a:ea:79:8c:0a:00:5e:
                    87:42:e4:6b:45:25:7e:bf:a6:7c:03:7c:a0:4e:95:
                    f3:98:b3:db:55:3b:74:54:00:64:ec:d8:d5:65:44:
                    41:8a:39:61:84:2f:f4:8b:59:13:da:68:c3:b9:5f:
                    a5:4a:0e:c0:24:07:82:7b:a1:3d:e9:0a:89:71:b6:
                    56:6a:a5:1a:12:7a:4a:cd:56:43:d7:7d:23:cb:f4:
                    f9:b9:b0:9a:68:9d:bb:10:e8:4b:96:6d:3a:9c:5a:
                    74:c2:55:b9:aa:71:ae:82:56:0d:55:d1:6b:26:d4:
                    51:c3:50:86:05:4f:ab:0d:aa:5b:e9:21:f5:b6:1a:
                    e9:69:ec:49:29:49:b5:bb:5b:c3:e8:ba:18:12:e5:
                    c8:db:b3:52:5a:23:a5:46:e4:5c:a8:b5:5e:ce:7a:
                    b4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:05:6B:4D:9F:0D:4C:DB:3E:16:30:3B:C7:54:F7:3A:07:E0:B1:25
            X509v3 Authority Key Identifier:
                keyid:26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:7a:95:81:58:bc:55:2c:b8:b2:0e:58:bd:c1:a6:80:f1:08:
         b1:bf:6f:9e:56:36:ee:c5:99:0c:45:0f:e5:03:79:cf:67:11:
         61:09:e6:95:c4:4b:bd:de:38:ed:7d:d8:3c:33:d9:e9:ae:f9:
         0a:72:66:52:7e:39:ac:2e:21:80:bf:08:eb:d2:ed:16:f6:c0:
         ee:6a:bc:16:e7:cc:c4:6f:46:09:5f:f1:97:fe:22:21:25:84:
         af:fb:d8:3a:41:18:33:a7:a2:10:b2:f0:93:a5:2a:68:b2:ed:
         97:0b:e7:5b:22:ff:15:44:75:3e:19:cd:5b:e8:3c:a6:be:2b:
         a3:93:04:08:d4:39:ed:4e:d8:05:0e:d3:05:a9:42:df:50:ef:
         ab:b2:9a:84:f8:d4:38:54:86:4e:a7:07:32:3a:2b:00:cd:38:
         bd:df:23:01:ca:82:c4:0a:b2:a7:c0:b4:a5:f3:28:72:79:f5:
         88:df:ac:af:96:f4:cc:d0:0f:08:5d:48:7c:26:11:67:74:53:
         f6:0e:00:29:ed:2b:c0:08:08:60:b0:66:70:94:cc:c9:aa:90:
         49:cb:ac:30:ef:5e:4b:38:c0:5e:85:7d:21:b2:aa:4a:db:50:
         42:28:e0:11:17:29:59:39:d6:23:e0:54:69:d5:b3:90:87:f0:
         03:a1:68:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:28 2026 by rpki-client