Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
File:                     jSmNY5cKsDzfv1FPoOjtITEJhfE.mft (raw, json)
Hash identifier:          AbE0Rw81cR/eexvTlu3gczW+jb9TlZbBWrV5tM2t+Jk=
Subject key identifier:   ED:77:45:E0:BE:E3:1D:24:96:A0:F7:D3:6E:5A:1F:CD:5E:3B:7C:78
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Certificate issuer:       /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial:       019FAB630F9B0A9F8B04B8ED2A31B6FF1B36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
Manifest number:          0435
Signing time:             Wed 29 Jul 2026 01:00:23 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:23 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:23 +0000
Files and hashes:         1: Av7Tod1G7bVf0RLE6AF_1uspRQ4.roa (hash: PKJbe7R30nXLIKZVxr4PxR3DgHe3p9fuHQbiz5PGfP0=)
                          2: MZF_p3jMKGfUhISu7itbGm8fVPc.roa (hash: 1+Bei67+jd9KSPOgvA1EOkdwYvs4YCuptX/4MdFdYpM=)
                          3: RAH7abBoh4PL_Oja667fcsvJv9s.roa (hash: 1oeZ9MSZDs5DHmq83npHQ6JgAnU29mx9Jo2/hNzkRvI=)
                          4: Yf20QMXkj8GFJGSLeIPw0rNOpPU.roa (hash: aWACKntsxHH3Va6cTR9cG1/KJpBjS153dDHspJ2qJ94=)
                          5: eeoFWs0EeMzDNXzBgME3-Q7Zi40.roa (hash: Ym0Iu/9+fRHj5itQ0uhzHv3jsEKnG3SriEsKFuazFW4=)
                          6: jSmNY5cKsDzfv1FPoOjtITEJhfE.crl (hash: NTVB0AWkzh6VdL7BN4W1IUc0YaGUoExMJr6LJEF3ahY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:0f:9b:0a:9f:8b:04:b8:ed:2a:31:b6:ff:1b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
        Validity
            Not Before: Jul 29 01:00:23 2026 GMT
            Not After : Jul 30 01:00:23 2026 GMT
        Subject: CN=ed7745e0bee31d2496a0f7d36e5a1fcd5e3b7c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:33:6f:e6:1b:cb:61:10:92:9f:1a:44:f8:0a:
                    5c:84:53:87:98:83:dc:e0:69:5c:40:f8:c6:f3:5b:
                    f2:64:28:25:92:95:07:22:5a:e8:58:e3:ec:ca:b4:
                    e3:cb:e2:54:03:6b:fe:48:be:b0:03:e6:98:3a:60:
                    f3:66:39:a0:70:e9:82:9f:65:0a:1e:19:94:e9:06:
                    11:6e:30:ae:a7:7d:3e:1c:2b:67:aa:f5:06:72:1d:
                    a0:97:7a:41:80:08:fb:57:b6:80:69:17:b0:ab:bc:
                    ca:6b:9d:ab:ee:aa:40:f5:02:59:12:00:04:77:19:
                    de:bd:e1:d0:06:c9:3a:ee:14:51:e4:34:0a:ab:bc:
                    3c:a4:59:a7:ee:19:82:c5:cd:02:77:52:26:e4:39:
                    a8:3f:4c:1e:c5:05:e3:9b:60:90:82:5b:e9:2b:50:
                    a7:83:9f:65:80:e1:ed:1d:1c:b9:8e:9f:7f:80:14:
                    61:96:46:54:80:7a:db:9a:fc:9a:65:a7:ed:28:ba:
                    c6:63:de:52:a3:1f:83:db:b5:f4:2a:f4:7e:d9:68:
                    1c:e3:ce:d7:27:fb:09:d8:e8:56:32:7c:f1:8d:ab:
                    ae:1d:dc:89:6f:b4:80:4d:3d:da:08:66:d6:c8:83:
                    15:6c:71:04:43:a2:7e:74:62:96:7e:0c:32:0e:fa:
                    81:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:77:45:E0:BE:E3:1D:24:96:A0:F7:D3:6E:5A:1F:CD:5E:3B:7C:78
            X509v3 Authority Key Identifier:
                keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:fa:ec:04:ed:3a:d9:8e:70:6e:10:ba:27:bd:ad:3f:28:38:
         e3:78:1b:cc:ff:38:28:24:13:7d:d6:42:00:48:e2:3c:49:8a:
         b2:0c:c6:8b:60:27:3f:26:e0:7e:81:c8:1e:3d:0b:9e:bf:f6:
         bf:d4:21:f0:5a:91:60:35:3f:89:24:d3:18:25:6e:69:dd:15:
         42:a1:d5:57:f5:d7:f5:29:3a:6e:39:18:45:f2:b5:39:bb:57:
         f5:5f:8a:6e:30:39:5b:65:7d:0b:51:f4:c0:db:88:fc:6a:74:
         d8:04:bf:31:b4:97:f5:7e:e8:0b:39:bf:2f:9c:19:05:ce:62:
         ed:2f:3a:fc:bc:34:ff:81:d1:9d:ee:9a:88:26:62:68:57:1c:
         bb:23:4b:bf:e6:eb:38:4f:de:fd:98:91:d7:c2:04:57:44:4e:
         50:6e:55:fc:b9:9e:73:c9:09:3d:1f:db:74:4f:45:c5:a7:39:
         a4:6d:5e:e9:60:85:b6:d6:cf:cd:b5:1c:c3:90:fc:40:4c:63:
         06:47:a4:00:7a:e0:e1:b1:4b:fa:5c:9e:75:76:16:a9:dc:0c:
         7f:cb:b7:9f:e7:92:b1:10:ba:0b:a1:7d:52:d2:12:e6:e3:e0:
         6e:dc:36:dd:6c:e4:7b:17:a6:0f:29:a0:28:b5:75:15:e2:d9:
         29:b8:80:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:29:30 2026 by rpki-client