Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
File:                     j9-HylMGV5hEdkUlX4KbU7wdohU.mft (raw, json)
Hash identifier:          mZtrGshNugjGqZ0ilW7KFiFlwEzecOun+CnTQzpRlro=
Subject key identifier:   2E:62:B5:9C:0D:52:73:0E:EB:3A:35:8C:7E:54:A2:F4:3F:86:7C:3C
Authority key identifier: 8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
Certificate issuer:       /CN=8fdf87ca53065798447645255f829b53bc1da215
Certificate serial:       019FA86247564EADE79D505A97177A4F5271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
Manifest number:          091E
Signing time:             Tue 28 Jul 2026 11:00:40 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:40 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:40 +0000
Files and hashes:         1: aiNfAtwLgUKsL4qA7akVZhQU1bA.roa (hash: Hw2VjFxuxUBTnIvwm5B0o1nhy9vvmSj+hAxZVQnZIws=)
                          2: j9-HylMGV5hEdkUlX4KbU7wdohU.crl (hash: Zih/TIY2ijSoOg9RGU0UXKM89Mq3u5tYmfAXVCTlAU0=)
                          3: wRelCGO5kr4PionuAw4TmZeTb24.asa (hash: R4hwvYPLQTU3+ZW26hz18/RfC35G0WghkbbOHFf/yeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:47:56:4e:ad:e7:9d:50:5a:97:17:7a:4f:52:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fdf87ca53065798447645255f829b53bc1da215
        Validity
            Not Before: Jul 28 11:00:40 2026 GMT
            Not After : Jul 29 11:00:40 2026 GMT
        Subject: CN=2e62b59c0d52730eeb3a358c7e54a2f43f867c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:1a:ea:95:e6:cd:7a:ce:39:48:19:bd:41:
                    53:1e:bf:ae:5c:59:f2:39:64:df:1c:c2:1f:4b:52:
                    d2:34:91:e9:92:50:3c:5d:f4:4f:6f:6a:ab:7a:a4:
                    32:71:64:ea:5c:78:ab:b7:a9:72:12:74:42:a3:c0:
                    b6:44:fe:be:cf:b7:3c:b4:de:2c:20:a1:ca:42:7f:
                    6a:cb:e3:98:56:75:e0:f8:72:8c:ee:03:85:4a:70:
                    77:be:43:8d:3d:61:4c:b4:8d:e0:85:c2:ea:23:1e:
                    d0:41:5f:26:6c:9f:eb:bc:84:1c:73:7f:22:c4:08:
                    e7:9a:0d:22:42:b4:78:dd:34:82:31:bb:ab:9d:35:
                    82:f0:48:2c:a6:aa:c0:b6:14:51:47:29:2e:87:b0:
                    69:36:40:48:43:5d:ba:a3:41:29:6d:b4:c8:27:68:
                    24:74:e3:e7:72:fe:78:b8:94:95:7b:4b:c8:b8:62:
                    3b:ac:e0:2d:52:b1:e7:76:28:48:d7:c3:d3:83:4f:
                    7f:2d:28:01:f4:4d:68:a6:6d:82:6b:e2:d4:96:70:
                    1e:21:2d:7a:85:7d:6b:a7:96:5e:19:f0:48:07:ef:
                    d4:03:2f:85:f4:97:89:38:96:29:48:87:5b:94:10:
                    b2:9f:0b:e3:f1:55:a6:33:a9:9e:81:d3:39:bb:bc:
                    26:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:62:B5:9C:0D:52:73:0E:EB:3A:35:8C:7E:54:A2:F4:3F:86:7C:3C
            X509v3 Authority Key Identifier:
                keyid:8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:99:ff:cd:93:0f:a4:28:7a:02:0b:c0:e1:3e:4a:e0:1c:d5:
         25:fd:b4:7e:0f:4c:da:e9:5c:72:f2:f3:82:cb:42:9e:a9:0c:
         d2:69:54:79:79:e4:20:2e:44:0c:80:a4:24:dd:58:fe:b7:0a:
         03:45:ce:f5:0e:ee:e6:e0:67:10:9d:5c:cb:4b:48:ca:d1:5d:
         bb:06:09:69:75:57:08:d0:0f:46:f4:5f:7b:53:2c:cf:78:31:
         85:e8:5d:c1:b2:92:9e:5e:81:64:45:4f:86:fe:b4:92:4b:94:
         ec:f2:55:ad:04:81:93:66:52:d2:e1:b9:c2:b0:22:ae:30:f0:
         07:3a:ba:d2:b7:a8:01:f7:53:57:33:3c:72:6e:6d:85:80:c3:
         19:4a:62:8f:91:4f:96:c8:4b:e9:1b:4c:aa:a8:f5:db:67:a4:
         21:00:0c:1b:72:10:b4:9e:e0:de:44:8a:7a:7f:a8:b7:c7:0d:
         14:1a:e1:53:c5:25:61:2f:44:34:50:c4:ab:94:af:29:c4:82:
         65:50:64:9e:a5:99:2a:3a:19:44:0a:6e:58:1e:29:26:fb:b7:
         09:bf:46:26:37:3d:53:8f:69:4e:0e:d9:ee:c8:e3:67:20:23:
         d6:bc:37:6a:ea:55:72:2e:2f:c1:9e:5b:58:30:e5:e3:a7:37:
         6d:bc:25:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:48:29 2026 by rpki-client