Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File:                     jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier:          pud93RtuZmz3dBoJXyAUeX1+j1M0z+7xbuC1JGbcw/g=
Subject key identifier:   6D:EF:8F:46:EA:39:07:F7:4D:C8:BE:DB:35:FC:39:AE:85:4B:FA:6B
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer:       /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial:       019FAC08142B71352AD23B9309E278D2AAA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number:          0EB9
Signing time:             Wed 29 Jul 2026 04:00:38 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:38 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:38 +0000
Files and hashes:         1: hyIL6HSqJA6DV3TQ_73m49DFfWk.roa (hash: JSYCVb3jUqEMKnAogn+SHjD1TLvMtiN042d+14ciUi8=)
                          2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: jxl7NMhws8w4eGytvc1grLonYhPb7fu/n9o2izWEtWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:14:2b:71:35:2a:d2:3b:93:09:e2:78:d2:aa:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
        Validity
            Not Before: Jul 29 04:00:38 2026 GMT
            Not After : Jul 30 04:00:38 2026 GMT
        Subject: CN=6def8f46ea3907f74dc8bedb35fc39ae854bfa6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0a:29:49:03:93:93:86:e6:f8:4e:6d:4d:57:
                    49:1a:2f:e9:03:a2:39:4e:ae:ea:df:50:35:db:7f:
                    e7:da:5e:6b:75:64:46:3c:c9:f6:ad:52:57:5d:a5:
                    7e:99:a5:a2:cd:ca:01:df:be:da:2d:eb:58:83:37:
                    2a:4c:84:19:79:99:62:dd:c9:f2:3d:bc:d3:02:98:
                    b1:d3:c9:b9:40:cf:66:7a:97:dc:97:f7:36:cd:47:
                    83:90:6b:63:a9:ce:18:e4:66:8b:a1:35:f5:09:0a:
                    e3:e0:a3:5e:cd:d7:fc:d8:b2:5d:bb:26:22:5b:03:
                    b0:ba:ad:b1:11:37:79:d3:e9:51:79:51:a8:d6:8d:
                    d4:cf:3b:07:0c:da:de:43:40:e4:0f:48:5e:66:0a:
                    f2:22:16:ab:e3:28:3d:f6:c4:b4:3e:48:77:c9:05:
                    c7:8a:62:99:dd:3c:c3:4c:80:c9:cf:60:c2:34:90:
                    56:6e:d1:5d:a4:a9:4b:a8:f3:f2:5f:8d:d5:42:49:
                    1b:b6:85:76:c8:8d:65:9a:ce:5e:84:89:2e:11:a9:
                    ca:94:8d:34:4b:ad:86:98:fa:43:5d:7a:b1:be:0e:
                    58:ec:e2:57:99:17:37:37:97:55:db:cb:d3:87:c5:
                    27:0e:cc:c0:a2:a4:2b:11:e3:01:37:48:f2:03:a4:
                    48:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EF:8F:46:EA:39:07:F7:4D:C8:BE:DB:35:FC:39:AE:85:4B:FA:6B
            X509v3 Authority Key Identifier:
                keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ec:40:34:57:21:02:ac:80:0d:90:02:17:9a:f2:b9:49:51:
         3f:76:aa:e8:e9:51:bb:35:02:39:d0:e0:7e:31:c7:7c:34:9d:
         3f:26:9a:20:09:49:ec:8a:bc:d8:f6:07:32:c8:52:e5:a6:57:
         54:d7:20:4d:08:99:83:9c:63:80:39:5b:5f:a0:72:17:c2:68:
         e5:8c:ca:27:7f:e5:02:ab:e9:bf:9a:c8:27:3d:05:10:2c:cb:
         a8:a2:17:b7:10:74:e0:be:ec:26:1b:29:c1:5c:3a:26:34:22:
         69:70:91:4a:6a:73:b3:fc:28:a5:39:c9:d7:8d:f4:97:4a:96:
         37:e6:48:54:d6:7e:de:f5:03:98:5f:73:07:43:c7:fe:f7:0a:
         76:fd:8c:76:ea:79:85:46:c4:4d:97:a3:01:ec:88:e7:b5:62:
         32:78:31:19:cb:92:e4:e6:77:aa:a8:eb:b3:43:89:0e:0e:0a:
         cb:ea:e4:e7:e5:1a:e9:2d:71:b8:57:7a:07:e7:a2:a6:60:6f:
         dd:ff:7a:bc:99:84:3d:1c:d6:c2:1a:6b:ae:6e:a1:df:b5:7d:
         8a:9e:d0:f4:4a:ee:31:94:43:f6:5a:b5:1c:14:d3:8c:67:e8:
         be:76:23:73:8a:a3:d1:9b:19:37:70:87:af:de:15:28:be:0d:
         3d:88:69:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:59:25 2026 by rpki-client