Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
File:                     JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json)
Hash identifier:          /kAxn5cYDhiEq5S8niOQnC5Q2ISCllwPj/9BzOqZZC8=
Subject key identifier:   D8:3C:6B:DD:68:CD:DE:0E:83:82:C1:E0:68:58:12:DE:46:57:F8:4C
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Certificate issuer:       /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial:       019FAB2C54AAD3D2796DA55FD8ABDAB7D12F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
Manifest number:          1A13
Signing time:             Wed 29 Jul 2026 00:00:36 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:36 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:36 +0000
Files and hashes:         1: 17xPyZlJEOUx5zEX8ZO8erx4H74.roa (hash: o78ZIjezoB+5hFnpSV2hhbyqsGtrTAReQHzLkPsSMs8=)
                          2: 1HSk7ol-NPF4p9rYRcl-Q6JPZDo.roa (hash: +FiTw/39WUh9LOAGYF5ppee39UlTfw1pjYmCcmzZE8I=)
                          3: 1wsMVCeL93UzN5b0Yvsk2yYuWLA.roa (hash: 99X69fNFzFuCPq29Xhv4yLun4KnsOh44dtaBCjapBbQ=)
                          4: 2RHKEFUbX-V0Mf6y31Iq5dGlemY.roa (hash: 22aNA0RqHM/lo1ZuXKI24lPSyNZYgt9FvnHMilKuHJY=)
                          5: 2q-y1nHjenu9twtcEVm8uPj-ddE.roa (hash: kKq4uoPjr9yzILuLqmWkg6QD55vf8pDPM+f+YLfRhpg=)
                          6: C58HKVenwwmbh1jkwoeqIUWdglo.roa (hash: dbM/VaOE1y6PqBg/KjdbXvgt9ovsuviuBnEC3nra0Jo=)
                          7: Ebg0ux5rcibv_t_FMLVeGO1p-6s.roa (hash: /4FrUXbz6Hz/uPMenmCysdLSPs/BOSlhWYQVSb8RAn0=)
                          8: GEKxvGic2KzXVJsj3dcok72CGco.roa (hash: aFBfIqFU6Ts846KW9SXo+ReP3IL9/U988JwYsIxQACw=)
                          9: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: DyRSiFjP7M4wpjgzeXWYbc9EUK2dOJdwLOTGceD7xJ0=)
                          10: TN_g4sfmmPrHK_oZ30J7gNWtpIY.roa (hash: m5dgi6YlmiEMbhGuQK1tT2ie/bg//bcOLn6xqpAH6Zs=)
                          11: U_DCEtPw_hUMwrzj8r6wUIXBPig.roa (hash: zOV0/cSp312KHscfdmAUHtLOyMQW+m7fH0EzuAciKbU=)
                          12: WPjlp9q2_irNOFHbvH1KxHiPhtg.roa (hash: nGNubH07FwuuTBRkZu6sDa2SbPeua6Dt0ORJDlPOSMk=)
                          13: XVl9Jn76mWQ8ncaJ_wDuumCSFsA.roa (hash: Hs6XsuXHPXeVRFbGDUcPFLc6y5U4gwmlkZ/AR7/NeXE=)
                          14: Z4vujc4mTXhPndammz45zIANRW0.roa (hash: iSNocQx0/MLP3lIr+stuE/8ev5dC4Sgm8xsOYztbkkk=)
                          15: js8xc1HEU1XUI0sBZfF0bl5Ntsc.roa (hash: AdO5qS0u+S/3mUbxDukdjf7Jfxyoy7D8xgFedRy81VA=)
                          16: k_MSpCKVnChWzSccoFJBjl40Vo8.roa (hash: VdSgjLWna9h9svrbMMSXJmkEe/+wqNq0RNqZ0DwPUZc=)
                          17: xyAifHL4yJafsXbZXrkrgodDKkI.roa (hash: 5dlJ/03oKMrYHI2ijFPlXqVyiklmxqeJzGBSWajGiKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:54:aa:d3:d2:79:6d:a5:5f:d8:ab:da:b7:d1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
        Validity
            Not Before: Jul 29 00:00:36 2026 GMT
            Not After : Jul 30 00:00:36 2026 GMT
        Subject: CN=d83c6bdd68cdde0e8382c1e0685812de4657f84c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:c3:b5:b5:7d:e3:0a:ef:88:57:4d:03:4f:7f:
                    82:7b:de:b1:88:cf:80:50:84:42:a6:e3:30:71:76:
                    9e:48:03:7b:ec:61:a5:92:cb:44:cd:d1:8a:e1:39:
                    5e:f5:4d:3e:c4:ac:fe:f4:31:2a:e2:af:63:d5:4c:
                    7f:aa:7c:30:df:a6:af:08:1a:1b:f5:94:40:6e:15:
                    f4:0a:81:cb:fd:91:0d:21:7f:e1:05:8f:c7:52:c8:
                    15:77:a8:01:b9:b8:5a:9d:27:b6:5f:50:5f:eb:b8:
                    f0:a9:c8:32:69:58:0c:81:2c:62:10:0f:0f:67:7e:
                    50:a8:57:e3:c8:ce:9f:bc:29:c8:b3:c9:8b:7d:fd:
                    d3:be:5f:38:9c:d8:41:a6:94:22:8a:60:8c:9b:64:
                    4d:e0:1c:91:6c:77:4b:cf:1b:c2:63:6f:5a:18:16:
                    9b:80:58:62:de:be:17:86:50:10:de:cd:c9:27:1c:
                    c2:da:10:01:db:48:3a:ef:f2:2e:0e:f7:1f:b8:bf:
                    d7:f9:03:2e:58:c5:65:a6:76:a7:9d:6f:30:fc:58:
                    ff:4b:59:9e:50:e3:0b:e1:57:7c:9c:77:5b:53:bc:
                    84:d3:89:89:e0:6f:bc:ad:25:58:9a:76:ae:20:f3:
                    15:3f:6f:bb:5d:be:dd:da:e9:1e:4f:4a:60:7a:27:
                    5f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3C:6B:DD:68:CD:DE:0E:83:82:C1:E0:68:58:12:DE:46:57:F8:4C
            X509v3 Authority Key Identifier:
                keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:02:f6:e8:fb:c6:60:f1:b9:58:56:cb:12:b3:c9:a1:a3:78:
         ea:79:29:a2:6f:c4:81:f9:7f:d4:a2:2a:b6:e3:23:e7:45:aa:
         f6:7f:40:69:b8:c4:c5:e9:8b:6b:e6:54:01:35:49:f3:26:00:
         45:6f:7c:05:3c:3d:f1:96:7b:20:55:ed:1b:9b:b4:e8:2a:c6:
         55:fd:c7:5f:a1:8c:09:9e:e0:66:3a:ad:fb:01:82:bc:b4:5e:
         87:1e:a8:c7:cc:20:5f:28:88:84:34:44:93:a2:e4:93:d2:04:
         2a:eb:b8:19:5d:79:0a:77:8e:56:6e:5f:61:66:4b:de:af:a6:
         94:54:55:2a:57:91:87:a3:48:9e:65:68:6e:d3:f5:3d:5d:6e:
         73:80:d9:2e:af:5e:64:34:36:b8:2b:c2:56:3c:e3:e9:a6:83:
         d1:9f:41:3d:ea:14:e4:da:52:e9:52:c8:4c:34:39:0f:16:a9:
         fb:62:0e:ff:b7:12:11:7c:22:a8:17:23:ba:4d:44:16:51:6b:
         75:cc:9c:d7:a2:e1:52:62:55:1e:48:13:b1:6d:5b:14:48:c0:
         65:ff:a9:50:96:4c:c1:ec:34:4d:89:17:d1:26:e7:90:b9:63:
         c4:85:2f:8d:f9:ae:5c:12:a3:2a:d8:15:72:9c:2d:cd:b8:77:
         3b:f2:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:32:05 2026 by rpki-client