Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
File:                     JYYj7MjcuRPRAiipRgqG5mDLj7I.mft (raw, json)
Hash identifier:          M7dttIVqkmMNUyzt5q6/AhN6Rt1u7iyUuTvhRBUxX4k=
Subject key identifier:   8C:ED:86:13:80:1E:8D:91:ED:0E:A6:7F:EE:E4:42:41:5F:C1:C7:07
Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
Certificate issuer:       /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Certificate serial:       019FAB6320ED48A840139142D0D844F83369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
Manifest number:          19D2
Signing time:             Wed 29 Jul 2026 01:00:28 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:28 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:28 +0000
Files and hashes:         1: 27iJL7tabeRZf9si2vPA81cwEnc.roa (hash: xWHsz8ye7DjPUgv12m50umXvY8HUT0fQ38UrVHv9Jwc=)
                          2: 6zmwp0Ty38xOLaz9dzA80B6hzAM.roa (hash: OlOuB/7WZRu3jgahb4J4hkXzTMRNqdoXbJ2s7Ooyi+Q=)
                          3: JYYj7MjcuRPRAiipRgqG5mDLj7I.crl (hash: 3PkfaehYMLdEtreuDouCgycbwOIfEClzlcZwhDNP3TE=)
                          4: Txl_hQPriUVq_Buu0gTEPI2kg_g.roa (hash: svJCwy5lyL58vBvH80bdWo+cEP+N6WrO0t2/0pD94JY=)
                          5: e4fvp8yWlAX8buHeYzF-90rR6Bk.roa (hash: cr5m93AUTTeXzPXmKSQPnNEYJwCdKzbaLZUVJBf9U6g=)
                          6: ljr109WhqKfeYcH-MhSgPoSjR9U.roa (hash: RdTZwN02aq7Yl4Y75F8xayBDhsLyfJXGJDu35AD1V7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:20:ed:48:a8:40:13:91:42:d0:d8:44:f8:33:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
        Validity
            Not Before: Jul 29 01:00:28 2026 GMT
            Not After : Jul 30 01:00:28 2026 GMT
        Subject: CN=8ced8613801e8d91ed0ea67feee442415fc1c707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:83:a3:a5:a6:e7:fe:92:3d:03:5c:9b:79:
                    91:2f:ec:4e:94:a8:77:6e:ae:01:f4:1e:a9:89:c8:
                    d3:ff:05:ae:1e:f1:06:c2:c3:a7:47:fb:fe:38:81:
                    d6:a7:7f:0a:3d:c2:c9:4b:50:b4:d4:53:78:e6:7e:
                    16:62:d0:65:a7:01:f6:5a:21:20:77:29:82:54:0d:
                    f3:b1:b2:d9:83:fa:1c:f8:b7:fc:1e:5c:7f:e8:e1:
                    f2:5b:1d:b3:35:d6:12:ff:92:79:c7:49:0f:f7:69:
                    a4:0c:0c:3f:81:07:5b:f2:59:03:4b:12:ec:99:e0:
                    01:ff:23:cf:d9:27:76:23:9f:ec:a4:e8:bd:73:44:
                    42:ce:dd:78:71:d3:61:5b:06:c2:79:8b:7b:ac:f0:
                    43:3b:2b:ab:59:83:c8:63:57:5d:ec:31:06:7f:45:
                    17:0a:2f:5d:59:e6:78:bc:12:23:73:5d:f4:0f:0c:
                    4e:fc:91:72:5d:42:03:96:38:aa:f1:7c:6b:30:fe:
                    1d:df:1b:7f:0e:7c:a3:a9:3a:ce:3f:be:a7:69:5f:
                    25:d2:92:79:85:eb:55:5c:c2:ce:9d:4a:f2:bd:f8:
                    d0:7e:c2:db:0a:65:44:58:aa:a5:b8:9c:46:5f:47:
                    37:e8:20:44:29:1b:1e:cf:a4:9c:e7:a3:43:fb:6e:
                    a7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:ED:86:13:80:1E:8D:91:ED:0E:A6:7F:EE:E4:42:41:5F:C1:C7:07
            X509v3 Authority Key Identifier:
                keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:43:c1:0f:a2:cd:eb:60:5a:c1:6a:a2:f8:2c:59:21:dd:88:
         a0:08:6c:37:15:c3:28:3e:fe:e1:dd:e9:be:64:4c:7f:62:f4:
         cb:b7:09:1b:d4:47:52:8e:7b:da:4e:cd:04:b8:af:ed:7b:ff:
         1a:65:66:e1:58:90:90:79:96:41:b8:78:06:87:80:18:9f:b4:
         32:3b:3d:eb:b4:c2:6e:83:b3:52:6f:29:f6:14:09:d8:69:da:
         12:2d:f0:e0:b4:99:5d:6d:05:a1:2c:25:3a:7a:08:2b:b5:98:
         ba:d0:17:12:a1:b0:b6:ee:dd:c8:e3:12:3b:27:bd:29:b9:0c:
         70:98:99:27:a0:a5:ec:c1:bf:8d:1f:bf:cc:7e:c7:cf:79:71:
         39:ce:f0:09:cf:51:f4:ce:9c:9c:8e:f0:88:6b:7f:ec:58:e4:
         3b:8a:94:7e:cd:dd:20:db:bd:26:7b:fc:66:ab:70:b8:ea:f7:
         46:f4:21:8e:ce:84:7a:3b:9c:18:14:56:c8:2c:8b:64:09:36:
         f7:7d:55:87:c5:e6:d8:6b:5e:17:3f:66:56:3e:3c:27:e1:b9:
         a2:8f:0d:50:69:28:25:ee:d7:69:13:b9:d7:ae:52:41:c6:3b:
         33:b2:b1:d4:cf:7f:2a:b3:11:94:de:e2:40:67:4a:6c:8f:f4:
         52:c0:33:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:46:21 2026 by rpki-client