Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
File:                     JYYj7MjcuRPRAiipRgqG5mDLj7I.mft (raw, json)
Hash identifier:          pVyrAi35bKI+l9Rc4erxU67MQZz+7BVLcD5nInJYRZk=
Subject key identifier:   E2:9B:60:D2:57:93:40:42:08:C8:C1:4C:92:FD:7F:FD:83:32:5B:6E
Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
Certificate issuer:       /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Certificate serial:       019FAD5188C1BA03A2DCAB0B1EF8F451EBDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
Manifest number:          19D3
Signing time:             Wed 29 Jul 2026 10:00:29 +0000
Manifest this update:     Wed 29 Jul 2026 10:00:29 +0000
Manifest next update:     Thu 30 Jul 2026 10:00:29 +0000
Files and hashes:         1: 27iJL7tabeRZf9si2vPA81cwEnc.roa (hash: xWHsz8ye7DjPUgv12m50umXvY8HUT0fQ38UrVHv9Jwc=)
                          2: 6zmwp0Ty38xOLaz9dzA80B6hzAM.roa (hash: OlOuB/7WZRu3jgahb4J4hkXzTMRNqdoXbJ2s7Ooyi+Q=)
                          3: JYYj7MjcuRPRAiipRgqG5mDLj7I.crl (hash: Cv3RAAJ7ycOaEg06hwFL4nAbntbL83NO1IMuaPc5nh0=)
                          4: Txl_hQPriUVq_Buu0gTEPI2kg_g.roa (hash: svJCwy5lyL58vBvH80bdWo+cEP+N6WrO0t2/0pD94JY=)
                          5: e4fvp8yWlAX8buHeYzF-90rR6Bk.roa (hash: cr5m93AUTTeXzPXmKSQPnNEYJwCdKzbaLZUVJBf9U6g=)
                          6: ljr109WhqKfeYcH-MhSgPoSjR9U.roa (hash: RdTZwN02aq7Yl4Y75F8xayBDhsLyfJXGJDu35AD1V7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:51:88:c1:ba:03:a2:dc:ab:0b:1e:f8:f4:51:eb:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
        Validity
            Not Before: Jul 29 10:00:29 2026 GMT
            Not After : Jul 30 10:00:29 2026 GMT
        Subject: CN=e29b60d25793404208c8c14c92fd7ffd83325b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1e:27:b9:0f:2d:ca:ba:c0:f7:9e:33:58:60:
                    8c:82:9f:50:a3:c0:bf:96:35:55:b2:b5:cf:7c:80:
                    38:53:14:91:db:2f:cc:ec:fe:f6:38:9e:23:e0:6a:
                    e8:66:96:33:3d:b7:0b:46:0a:d8:f4:5c:cb:50:58:
                    54:09:c8:63:93:ae:e0:bb:eb:7f:82:f5:83:3a:a6:
                    24:af:d2:d8:a7:ae:b9:a1:23:c3:bb:a7:72:3b:44:
                    8b:c7:68:3b:62:0c:58:53:60:7f:3b:2d:18:c5:30:
                    28:52:ce:65:cd:6b:9b:94:bb:44:4b:d4:bc:6c:92:
                    af:31:08:fc:e2:f5:fc:e0:29:9a:46:92:17:cd:1b:
                    70:8d:59:97:29:51:55:cc:1f:73:40:39:18:8f:bc:
                    7f:94:6e:ad:ac:83:3f:a2:1c:22:9c:60:ea:b5:66:
                    1f:40:aa:59:ef:5d:b4:dc:07:73:e1:91:55:4a:47:
                    6e:d3:f7:c6:4d:5e:2c:f8:53:6b:3f:7c:d9:bf:15:
                    41:03:42:2f:2e:b1:15:0e:02:cd:d6:52:e5:59:21:
                    b9:33:b5:9d:16:b2:f8:b4:82:38:2c:ca:f9:db:cf:
                    a4:5b:91:65:73:e1:4d:4d:e7:a6:b5:1b:e7:20:5f:
                    bd:ee:e5:b5:2a:12:5f:f2:a3:92:a8:d0:2a:27:f3:
                    48:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9B:60:D2:57:93:40:42:08:C8:C1:4C:92:FD:7F:FD:83:32:5B:6E
            X509v3 Authority Key Identifier:
                keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b0:a4:16:33:66:c3:b4:a1:fd:e3:96:67:2a:6b:ea:74:1d:
         88:d9:12:d1:ba:f0:b6:4d:da:a8:16:7b:d5:6e:bd:dc:19:69:
         cc:16:8f:d8:b4:79:5c:3b:58:16:92:d9:49:21:b2:f0:d7:5b:
         0f:8b:9d:30:0f:cc:ee:a2:31:4f:66:06:71:84:ab:66:05:c7:
         c0:92:de:70:64:c6:ba:e6:96:6a:0a:b1:27:ff:83:c4:d7:df:
         23:c4:a7:e1:12:29:7d:51:23:a4:cd:a6:cd:a7:90:7a:5f:c4:
         3e:41:1e:45:78:cc:64:10:32:06:11:db:81:34:4f:c9:fa:11:
         88:b6:fe:02:81:0f:4f:48:62:6a:73:c9:a3:fa:b2:7a:c5:10:
         e7:4f:bb:fc:90:3b:40:7a:a0:e7:f5:c7:0b:50:c5:64:37:eb:
         14:73:8c:fd:73:7c:9e:7d:e0:b1:e0:d8:11:66:8a:13:d0:3b:
         6b:d8:f6:b9:52:da:06:80:8b:a7:12:2d:d1:6e:00:ad:e2:35:
         99:fb:d9:52:af:20:fb:1d:1f:a3:0b:9b:3c:21:ee:cc:db:f4:
         08:9c:14:f7:8d:64:d8:21:ff:47:bf:a3:83:cc:7a:3f:dd:ab:
         20:df:6c:87:26:f0:ee:07:e2:0f:f9:8a:10:a4:a7:2e:f4:ef:
         a8:fb:2d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:27:17 2026 by rpki-client