Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
File:                     JGDLdNAZgkw0siOu1McJqFeyxgY.mft (raw, json)
Hash identifier:          kPhsmcb7IBjlEai8xOtaskB6APHgde0EsPGuj6qauIo=
Subject key identifier:   92:C2:38:45:23:BD:E1:39:56:73:8F:60:0D:BA:60:D4:14:FC:A8:33
Authority key identifier: 24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
Certificate issuer:       /CN=2460cb74d019824c34b223aed4c709a857b2c606
Certificate serial:       019FA7BE1659ACA4F82E0BFF790E69B40536
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
Manifest number:          0850
Signing time:             Tue 28 Jul 2026 08:01:20 +0000
Manifest this update:     Tue 28 Jul 2026 08:01:20 +0000
Manifest next update:     Wed 29 Jul 2026 08:01:20 +0000
Files and hashes:         1: HQKEQGzJ8V_M4AMZFBCGwcAArQQ.roa (hash: TmKJc0/C+P9Rrj+HXzJL2J/O3BBKY350jNbCd9YcASM=)
                          2: JGDLdNAZgkw0siOu1McJqFeyxgY.crl (hash: lyaWPGrw1m7rJXSew9UZn+UouHSwx8pLC9S9C/2/6cg=)
                          3: Velvuh1gpno0shkJ5khFZZ1M9Fs.asa (hash: UtodF06r6O5PXRmMGWwd695ZbvpBr88baOFS+6FV2hI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:be:16:59:ac:a4:f8:2e:0b:ff:79:0e:69:b4:05:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2460cb74d019824c34b223aed4c709a857b2c606
        Validity
            Not Before: Jul 28 08:01:20 2026 GMT
            Not After : Jul 29 08:01:20 2026 GMT
        Subject: CN=92c2384523bde13956738f600dba60d414fca833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e0:53:04:1c:23:1e:b3:aa:6b:89:b0:e4:da:
                    2c:6a:51:ad:6b:df:f4:bb:64:a9:c4:af:48:69:44:
                    60:86:57:fb:e2:d0:34:9a:25:99:d7:61:1c:37:3f:
                    03:57:ac:5a:8a:b8:25:4c:cd:af:99:d1:cc:72:fe:
                    79:f8:fd:ba:af:29:99:1c:c3:df:6d:57:16:b6:3b:
                    94:8a:cb:57:c8:e9:b2:6b:4b:85:41:5b:67:66:96:
                    47:e0:05:54:8a:c7:cc:c5:e0:ad:9e:32:5d:ce:78:
                    8e:9d:36:90:68:27:32:48:a2:bd:68:34:36:32:33:
                    0c:9b:e1:c7:0c:63:8e:a5:5b:28:4a:ac:e1:6b:6b:
                    56:03:0f:b2:f1:df:6f:59:46:2b:1a:d8:62:6c:34:
                    3f:17:cb:ba:36:a4:f1:ae:a8:f4:fc:cf:40:2c:4b:
                    08:d6:11:33:a2:f9:ed:60:fd:fc:88:65:ea:2c:af:
                    0a:c6:09:48:09:b8:10:50:c4:ce:71:73:9b:50:a7:
                    97:1d:db:c8:ee:e6:0d:4c:a3:6a:1e:ca:12:98:5d:
                    6c:b4:3d:d2:94:05:6b:17:21:3f:7e:70:a9:35:2f:
                    f7:ba:64:c4:2e:4e:97:5a:c4:7a:9b:de:a3:b1:4c:
                    55:db:9a:b7:e1:78:31:23:93:5f:eb:07:6e:ad:67:
                    7e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C2:38:45:23:BD:E1:39:56:73:8F:60:0D:BA:60:D4:14:FC:A8:33
            X509v3 Authority Key Identifier:
                keyid:24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:36:33:36:b2:b0:40:04:b7:d9:a9:c3:f8:20:b3:ed:5b:93:
         a6:36:3c:0d:a8:1d:07:f4:cc:40:48:d4:14:5e:57:58:23:74:
         7f:1f:e1:ea:33:fe:94:c5:0d:54:c2:6f:b8:50:57:8e:0e:da:
         0e:83:f6:65:1e:5f:d3:02:76:44:a1:6b:e9:b8:d5:7a:b4:52:
         76:02:6d:dc:fb:dc:a4:86:9c:b8:58:51:06:d7:87:ba:60:5d:
         1d:c4:85:e5:63:52:69:6e:fc:6b:a4:83:70:f0:63:9c:f0:ad:
         a7:72:a9:dc:78:17:0d:3a:f7:fa:a1:e4:f7:75:3e:58:4b:f4:
         cd:2c:2e:c4:15:e7:b2:38:c6:54:81:95:01:e5:aa:b7:ac:57:
         11:9c:5d:e0:1a:74:27:fa:92:16:74:77:a7:58:ac:b6:29:ca:
         c8:19:12:82:b0:87:8e:d1:af:75:0f:99:dd:11:ab:7b:f2:2b:
         98:9f:60:56:ce:31:f7:80:5e:a2:3b:73:5e:f6:3b:ca:38:d7:
         4a:29:01:f0:7f:84:ca:dd:ff:d0:e7:69:0f:d4:45:4e:df:ce:
         0e:73:f1:06:0a:53:a4:b6:4b:e1:d9:29:af:d8:4f:cf:71:02:
         2d:bf:25:16:20:d8:55:c1:3b:7d:6c:f9:7e:49:f2:66:0e:fc:
         a1:5c:fe:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:40:20 2026 by rpki-client