Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft
File:                     jXskLMdAYjU4IyQFjJHa_GOZACY.mft (raw, json)
Hash identifier:          3hIV9KghvFMb6KnOqTnFxRhMt3Wis0iWwhzEc56qu8Q=
Subject key identifier:   A6:E2:FC:C5:7D:F5:B1:A8:A6:D6:E7:0D:39:2A:FD:21:4C:56:8C:01
Authority key identifier: 8D:7B:24:2C:C7:40:62:35:38:23:24:05:8C:91:DA:FC:63:99:00:26
Certificate issuer:       /CN=8d7b242cc7406235382324058c91dafc63990026
Certificate serial:       019FA899BC7923D70A9F72CD0AFE62E5282C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft
Manifest number:          026B
Signing time:             Tue 28 Jul 2026 12:01:15 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:15 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:15 +0000
Files and hashes:         1: ViAGgGMP8tjX4dX7fa8-4EuXDPI.asa (hash: iudEKv9JULJb4ZORQPgBjMDE7t10hoMYz/3tClWkHX4=)
                          2: jXskLMdAYjU4IyQFjJHa_GOZACY.crl (hash: xoa7c8in0+adUqOFz5kzzURah+/3etbWhFlzi0iy0UM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:bc:79:23:d7:0a:9f:72:cd:0a:fe:62:e5:28:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d7b242cc7406235382324058c91dafc63990026
        Validity
            Not Before: Jul 28 12:01:15 2026 GMT
            Not After : Jul 29 12:01:15 2026 GMT
        Subject: CN=a6e2fcc57df5b1a8a6d6e70d392afd214c568c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:34:f2:b0:21:06:8c:bc:5c:b8:15:30:46:
                    9b:07:19:5a:31:63:cd:52:44:1a:fa:b0:c6:c5:5c:
                    a8:b8:f4:6f:94:6d:0e:42:c5:c0:49:1f:b3:8b:ca:
                    a9:6d:83:1a:64:1b:80:09:fd:44:27:14:3a:a9:8f:
                    62:89:a7:0c:07:cd:5d:3b:f5:99:86:24:da:2a:f5:
                    60:99:02:1d:91:a5:3d:17:c0:5e:32:bc:68:27:9b:
                    75:f0:2d:3d:9f:7f:23:f3:83:a5:36:c8:49:e0:c5:
                    0e:62:ee:a9:18:8a:9f:e5:6d:b6:93:7a:f4:41:66:
                    7c:d1:5e:1c:d0:11:75:d2:31:e6:bb:bd:c7:07:e8:
                    77:ab:ae:21:51:ce:4d:aa:4c:5c:b7:94:a1:e4:03:
                    24:7d:ec:4f:72:37:10:5b:fb:b9:c5:74:ef:2d:52:
                    dc:f0:b2:3f:24:95:8e:c0:ef:60:2b:06:d0:c3:d2:
                    f3:7a:51:ba:f6:07:4b:3d:d6:69:89:df:e8:7c:64:
                    34:9c:bf:f3:a2:c5:95:51:6f:72:8a:4b:41:25:fa:
                    d1:6f:3a:3b:f0:64:ca:26:91:5e:19:9f:fc:ec:fd:
                    8d:a8:0c:97:08:b9:22:23:35:f5:63:fe:03:1c:d6:
                    d9:a6:0f:06:8a:37:c4:a6:3d:c4:b4:22:d7:41:26:
                    ea:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E2:FC:C5:7D:F5:B1:A8:A6:D6:E7:0D:39:2A:FD:21:4C:56:8C:01
            X509v3 Authority Key Identifier:
                keyid:8D:7B:24:2C:C7:40:62:35:38:23:24:05:8C:91:DA:FC:63:99:00:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:71:e9:e3:f5:c3:fe:92:31:d0:00:fc:db:8c:7f:b9:26:7c:
         1a:90:cd:9d:a8:b4:3a:ee:0a:64:d7:2a:c3:c2:62:8b:f3:89:
         90:ea:28:be:26:61:87:83:0c:18:5b:fa:62:e3:b4:e3:4c:06:
         46:c4:59:6f:bb:6a:03:7d:9f:73:fe:e6:91:25:1a:42:34:d7:
         d4:f3:4c:cf:0d:2f:17:31:8a:a7:8c:47:88:ef:ba:fa:29:81:
         11:6a:fb:a7:83:0c:3d:1e:2c:8f:7b:e3:67:fa:a3:80:11:dd:
         03:3f:a8:78:83:72:4a:3f:8d:1c:a8:18:39:77:3e:7b:ac:7b:
         f8:04:32:0d:f9:22:4d:87:0b:19:32:42:a5:b8:64:fa:22:3d:
         5e:55:06:99:c7:02:95:c0:75:27:32:06:22:12:00:ff:89:83:
         00:16:2a:e7:f4:7b:90:17:42:7b:92:d2:97:fc:d3:55:2c:46:
         69:af:06:41:9d:cf:b8:de:f8:b7:eb:84:db:c3:69:c7:10:78:
         57:47:29:02:77:74:f4:c1:ee:e4:eb:12:1e:33:68:b1:16:98:
         6e:1d:5e:5a:92:46:73:d0:38:3b:29:3c:6c:5f:55:c5:df:5b:
         f7:45:93:2c:48:2d:aa:c3:fb:2f:d6:cf:04:d3:be:46:f2:b0:
         aa:1e:12:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:50:22 2026 by rpki-client