Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
File:                     JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json)
Hash identifier:          IOhrwqDYWlsitBMyT2T97M3a0b7ETdINM9WhmyEy3+8=
Subject key identifier:   F6:71:1E:5E:4C:DA:D8:FD:06:FD:C4:EA:9B:1B:FD:72:B1:62:95:8A
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Certificate issuer:       /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial:       019FAAF54D4CC0102F41FBC2A27E5AB6E2DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
Manifest number:          17B0
Signing time:             Tue 28 Jul 2026 23:00:30 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:30 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:30 +0000
Files and hashes:         1: 5tyTgc_srf_03kELs6a4U2s2DWk.roa (hash: wbWsBOeJNFN6rAIBpjdQWOFJx9S5x9ucHlt9PYYje98=)
                          2: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: t7Dg+7BRVPHD8243k4l3ZkPvauIh3L6ndaE/ohrJhUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:4d:4c:c0:10:2f:41:fb:c2:a2:7e:5a:b6:e2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
        Validity
            Not Before: Jul 28 23:00:30 2026 GMT
            Not After : Jul 29 23:00:30 2026 GMT
        Subject: CN=f6711e5e4cdad8fd06fdc4ea9b1bfd72b162958a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:65:dd:3c:a1:ff:32:06:98:e0:85:e4:3d:61:
                    f6:b4:04:d4:20:af:4e:ec:b0:7f:48:3c:b8:8e:61:
                    5a:6b:25:6a:51:d4:ee:96:d4:6e:ac:33:9e:74:bc:
                    39:eb:6f:a4:bf:65:2c:13:44:33:15:71:cc:e5:85:
                    27:71:37:0c:aa:de:14:a7:59:59:ed:a3:d2:0c:d0:
                    80:f9:49:aa:a8:fd:02:34:2d:2c:23:cc:03:f4:7e:
                    7d:5c:e5:47:62:86:af:b2:2f:9b:72:f8:3e:60:9d:
                    73:33:72:48:c8:50:bd:62:82:df:62:7b:9a:40:68:
                    70:bc:85:a6:e1:16:52:83:a8:1c:c2:ff:ea:0d:9f:
                    15:23:4f:47:cd:b7:b1:8f:08:a7:8e:6c:78:80:98:
                    9f:03:48:52:d1:3d:5f:ab:70:c6:37:f5:3a:30:11:
                    99:cf:40:eb:5b:e6:8c:e4:05:50:a5:af:9a:fc:8f:
                    dc:2e:0a:d8:29:c3:0c:e6:18:31:8d:62:12:40:45:
                    fc:19:22:a7:72:94:d6:8b:fe:1a:78:dd:37:bc:03:
                    65:c4:b9:06:09:7f:f7:3f:77:b5:7d:f6:34:61:13:
                    84:70:31:96:ea:2c:ee:26:b8:99:73:43:5c:36:51:
                    51:6b:8b:75:92:97:fc:f5:01:71:6d:b8:e6:2b:42:
                    35:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:71:1E:5E:4C:DA:D8:FD:06:FD:C4:EA:9B:1B:FD:72:B1:62:95:8A
            X509v3 Authority Key Identifier:
                keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:11:b0:fd:4e:aa:31:19:7d:d2:6f:f0:8f:dd:6e:50:55:4e:
         ca:74:3f:e1:3f:dd:35:ab:03:87:d5:51:77:71:5b:f8:02:03:
         0a:6a:f2:d9:9c:7d:f9:1f:46:de:4a:1c:f9:9c:80:a2:b9:53:
         94:74:d3:00:cf:27:9a:96:6f:2d:8d:f4:87:bc:22:1c:b0:a3:
         ee:41:96:19:ed:6f:b5:c5:82:28:f5:27:94:f6:d7:94:14:aa:
         d4:4d:ad:59:75:0e:50:e4:25:8c:8e:f2:21:73:52:84:a2:28:
         6b:4e:41:89:ce:4f:8d:a9:2a:cf:51:56:7d:4c:79:cd:34:43:
         30:41:6a:42:f0:49:e2:db:90:87:44:05:c1:07:ea:d2:90:a9:
         6e:0f:b3:02:f2:65:0f:4d:b5:18:1e:25:80:7f:66:f1:38:09:
         02:c9:73:e2:3a:24:84:94:0a:b7:59:e8:12:a4:4b:ac:b2:40:
         18:db:0e:99:83:54:94:47:8f:e7:dd:f8:d6:12:b8:ea:bb:05:
         d7:f4:8c:af:42:d6:6e:8a:e4:56:c0:c8:8d:1e:f7:83:7a:25:
         46:6c:90:17:bc:20:64:cb:5d:4d:91:d0:32:3a:8e:91:a0:13:
         23:cb:84:c3:61:bf:35:57:b9:8e:1a:03:4d:35:6d:bc:9c:1d:
         2f:56:1e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:05:40 2026 by rpki-client