Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
File:                     JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json)
Hash identifier:          Gqq8bnrGQ27HvwG/A6qxeIPAEPfT5zKLRBlF08vNdsA=
Subject key identifier:   D7:8E:53:6C:2D:BB:BC:EC:43:0D:EF:C9:C5:C1:AE:4A:31:65:4B:62
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Certificate issuer:       /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial:       019FAC75BFEF5A29A31BA8954517FA235E34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
Manifest number:          0990
Signing time:             Wed 29 Jul 2026 06:00:25 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:25 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:25 +0000
Files and hashes:         1: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: 4nxOxd1YY999AD+jRTBFv4k5t8wDDIzsBCeLkOlV98Q=)
                          2: gW_qGfKQeIjCzm5uq8uaZ6bICSo.roa (hash: kRJ+XX/gU6aPLqrNsFhQwdwg4zAQl3rYc3y2VSOo9h8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:bf:ef:5a:29:a3:1b:a8:95:45:17:fa:23:5e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
        Validity
            Not Before: Jul 29 06:00:25 2026 GMT
            Not After : Jul 30 06:00:25 2026 GMT
        Subject: CN=d78e536c2dbbbcec430defc9c5c1ae4a31654b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:62:56:dd:3d:95:93:31:89:3d:f2:20:32:a4:
                    27:d2:b8:b7:47:e2:97:3f:a2:f7:9d:d9:10:28:02:
                    25:14:d7:b5:36:33:ab:11:13:9f:61:a0:2e:53:81:
                    90:90:10:00:4e:a4:76:f3:20:ff:9c:35:a6:4f:10:
                    cd:ce:0e:7d:0d:3e:99:ff:38:b7:fb:08:af:b9:eb:
                    c7:9a:d7:75:48:bb:9e:9f:4f:98:ed:fe:44:2e:10:
                    a1:fa:4d:a6:d7:17:d6:ef:c0:ee:93:bc:0b:91:c8:
                    df:85:0c:db:ce:df:4f:dc:2a:8b:ac:26:91:e6:a5:
                    a5:e5:a4:0d:b0:87:28:07:b9:da:4b:fa:ae:0d:69:
                    7c:68:e7:5c:a2:f1:83:6a:73:f5:88:ec:e2:2f:49:
                    77:41:84:69:0f:dc:c1:e2:f1:8f:c9:51:45:2f:e9:
                    ea:70:d1:65:d7:70:69:ff:f6:fc:36:f0:f3:17:dc:
                    9a:04:79:99:8d:ac:4b:78:88:af:35:d9:66:c4:60:
                    02:77:a5:56:f0:cb:ef:b0:7a:9a:04:fa:da:88:c7:
                    71:c2:e8:2b:b6:88:0c:df:cc:a0:74:8c:a6:97:05:
                    74:7e:85:1b:d9:37:70:76:fe:e7:0e:ae:88:1d:ab:
                    d2:6e:0d:50:a0:70:91:7c:7e:73:f8:54:10:aa:b4:
                    36:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8E:53:6C:2D:BB:BC:EC:43:0D:EF:C9:C5:C1:AE:4A:31:65:4B:62
            X509v3 Authority Key Identifier:
                keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:87:f6:d7:42:e3:1d:7e:d8:8c:fd:34:1c:ba:3e:41:ed:31:
         90:67:a7:23:ef:47:61:2f:6c:82:10:5b:e4:56:d9:e7:47:26:
         9a:9a:be:2d:23:dc:6e:cd:f9:3b:eb:3a:d2:25:e0:b5:87:57:
         17:52:20:b1:7a:ba:86:06:67:23:67:28:87:24:15:a5:06:63:
         af:4d:6f:30:b7:c1:e8:43:ff:04:3d:83:bf:21:0f:e3:63:23:
         b0:0d:42:fa:47:39:2a:1e:5b:e0:29:d2:ec:0a:25:54:83:92:
         9e:f5:2c:a6:ed:8c:46:35:0a:81:d5:63:ae:fa:a9:0e:74:14:
         09:a8:5e:23:87:68:00:55:88:c9:35:29:bf:f9:f0:3f:49:49:
         29:29:a0:cf:cd:52:3b:ac:10:cc:6d:b9:af:0d:a8:1d:0e:23:
         df:ee:5d:9d:01:81:3a:63:8a:39:22:c8:05:22:57:eb:ef:16:
         28:04:a0:8e:89:70:62:8b:d8:80:b9:ab:69:96:f8:d7:39:4d:
         5a:0e:31:4b:6a:32:69:d6:73:b4:f9:81:41:33:71:25:ea:a0:
         5a:39:cb:43:46:4f:0c:6d:cb:3a:d8:c4:b1:bd:71:95:9f:f7:
         63:fa:9f:10:f4:1f:8a:17:b6:e7:b3:3c:18:b0:a8:a6:4a:c2:
         2c:e2:b6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:42 2026 by rpki-client