Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
File:                     j4aF263_sB3czmxNgql_M8BA7S0.mft (raw, json)
Hash identifier:          0aZVlbFIYHLrFAZCESEmcCnZqXqJKMyjmRz7dFZypJo=
Subject key identifier:   C6:38:D6:3A:2F:B3:37:AB:D9:C8:52:B5:85:10:8E:FF:A8:6F:C5:D4
Authority key identifier: 8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
Certificate issuer:       /CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Certificate serial:       019FA78648F8CE7EBBB0DB09A4F7A60003EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
Manifest number:          19D0
Signing time:             Tue 28 Jul 2026 07:00:23 +0000
Manifest this update:     Tue 28 Jul 2026 07:00:23 +0000
Manifest next update:     Wed 29 Jul 2026 07:00:23 +0000
Files and hashes:         1: 6hjRC5CVze9zc5X-ahmmHNfkYUE.roa (hash: MyI+C5KzfoPCsm1Iwk5YmiKlS7nD2ofoSW1+cSi8FPo=)
                          2: 7K9m9Kycpc1qpPWI_C3HXeWSciA.asa (hash: mkrh2h8wld/NXnmNI/HnVxSUQPGYzzYW0qlsCvuzWyk=)
                          3: gzObw2J4J3BeeVX0bL5o0YuIhUc.asa (hash: D5KeTzlvp8nEOE8QlkcJQrt0bgljUWnLu1dF7FqKvu8=)
                          4: j4aF263_sB3czmxNgql_M8BA7S0.crl (hash: xiQbHQB6d37mn0XWUb/fylsR+SOuBgPZpK1hGZZj4aA=)
                          5: tXAbUuk7SL2rOH5gbCm1KKsZ2vI.roa (hash: /jEXCHymtq+ciP4tXZBHOUmRqWEl2SIJoHoomzd+470=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:86:48:f8:ce:7e:bb:b0:db:09:a4:f7:a6:00:03:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
        Validity
            Not Before: Jul 28 07:00:23 2026 GMT
            Not After : Jul 29 07:00:23 2026 GMT
        Subject: CN=c638d63a2fb337abd9c852b585108effa86fc5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f5:b6:ff:fd:0b:f5:83:17:41:c4:63:61:28:
                    9b:79:17:bd:ae:ef:be:63:a5:3d:27:d0:5a:23:fd:
                    46:37:d1:05:58:16:c9:46:5c:2b:88:e6:c6:b3:a4:
                    f8:4e:44:01:99:44:09:5c:0a:28:4b:e5:a9:1d:aa:
                    43:b7:64:6b:3d:09:5f:e2:fd:fc:6c:9f:c1:eb:82:
                    bd:82:54:80:9d:bf:aa:1b:49:cb:25:bb:63:8a:44:
                    62:bd:9c:ee:23:64:e8:6d:ea:b9:e7:b3:fa:b7:82:
                    67:83:7b:35:35:de:55:6c:16:3b:54:02:3c:7f:e7:
                    a7:0c:a1:58:72:6c:c7:f5:4e:a3:8d:4e:e9:eb:65:
                    5e:98:4e:ee:ce:f9:78:aa:d1:97:72:d2:11:ec:03:
                    1c:12:0d:b4:07:2d:c3:0d:70:36:79:95:60:82:68:
                    34:e3:6e:de:96:f8:93:92:ae:ba:a0:09:77:09:9a:
                    dc:91:a2:4c:04:5f:fe:c2:c6:1b:bb:82:06:1b:3d:
                    96:36:56:72:07:08:a1:f0:70:94:e7:ca:d9:d1:2c:
                    33:6e:4c:b7:03:f8:85:6a:ae:75:37:4a:b2:71:e7:
                    3a:4c:d0:32:1f:9a:a7:9d:83:fe:49:4d:0c:04:ac:
                    59:fa:8e:6a:8a:dc:25:07:5e:78:a0:4d:d6:fa:92:
                    04:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:38:D6:3A:2F:B3:37:AB:D9:C8:52:B5:85:10:8E:FF:A8:6F:C5:D4
            X509v3 Authority Key Identifier:
                keyid:8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:82:5f:17:20:3a:66:95:1e:fe:79:17:88:68:80:49:2c:22:
         4e:73:17:f0:c4:db:52:b4:3e:2b:ca:3b:ee:ed:52:45:0f:eb:
         ed:5d:74:83:66:bf:b7:e4:93:35:65:12:75:a3:dc:46:a0:fb:
         81:21:ff:6d:ba:6e:d6:de:b9:b3:64:06:b9:51:35:bc:87:4b:
         f8:23:ff:8c:23:7f:a0:00:a3:02:a2:cf:0c:f9:a1:68:7d:c1:
         a3:bf:04:2f:18:68:42:19:74:c9:89:34:2d:e1:fa:3f:2d:bf:
         2a:25:44:2f:25:ab:cb:c8:0d:cf:bc:9e:4b:28:93:23:c5:2e:
         aa:3a:0d:c5:af:6e:ab:59:ef:f8:28:e4:07:a4:1d:ff:54:1e:
         12:c6:fa:11:21:2b:f3:7f:4f:95:cd:50:ae:c3:a8:53:4d:37:
         d7:91:0a:9f:77:dc:2a:54:fd:5f:83:07:16:39:9a:06:77:aa:
         b7:bf:af:41:59:1a:33:a0:47:94:86:bb:2f:66:28:80:f8:7c:
         07:8e:8c:c9:ae:12:1d:73:db:cb:38:cf:9c:47:9f:73:2d:4d:
         79:2a:c9:4a:fd:3e:3b:e1:e3:5f:06:b0:12:5a:cf:6c:18:ab:
         a8:63:0a:5f:a8:50:3c:31:5d:92:28:da:68:5b:e9:ec:e8:64:
         36:86:4d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:04:32 2026 by rpki-client