Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File:                     JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier:          vUxBEfwBkurXLjcdW6TowFa0tG7YvVa2+zs3ht8H1Jw=
Subject key identifier:   78:5E:9E:1E:9E:42:BA:2F:84:17:BF:A8:0F:04:EE:36:32:54:B6:97
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer:       /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial:       019F9436F00B92282CCF516B94072AFBDE9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number:          19CC
Signing time:             Fri 24 Jul 2026 13:00:56 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:56 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:56 +0000
Files and hashes:         1: 5iJn7j9NwT_4zRsEmDpwaHGzgK8.roa (hash: Bq7Db27aznpNLmbu0ahDjZ7PeJYf+EQGmsNOgekFe6w=)
                          2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: 4mFJmcrh7tCIT418zwiQ2YKjziH8GefUMRKmAXl6Xl4=)
                          3: wCBMxNVW2s2juIQvGN-nvZjm17I.roa (hash: 3w8A09CcQCqIlBuWIFasyBemt1OICie2jVw2nf/HSKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:f0:0b:92:28:2c:cf:51:6b:94:07:2a:fb:de:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
        Validity
            Not Before: Jul 24 13:00:56 2026 GMT
            Not After : Jul 25 13:00:56 2026 GMT
        Subject: CN=785e9e1e9e42ba2f8417bfa80f04ee363254b697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:64:28:1c:45:fb:6e:1c:d2:88:2a:d9:dd:bc:
                    2e:3d:22:84:10:f1:9a:8a:e6:5c:9e:b5:16:01:9f:
                    74:03:5b:b4:1c:71:19:08:f5:c9:d5:e2:05:e5:f3:
                    1f:8b:11:49:a3:c0:ca:e2:3d:27:ed:11:e7:16:32:
                    18:cd:a0:57:a7:3c:2e:90:30:1a:a7:24:4e:a4:38:
                    ad:28:ba:3a:c4:3c:29:85:4f:48:9f:7a:44:54:d5:
                    ff:a0:1d:b9:34:25:0b:ad:a2:28:e4:12:6d:66:39:
                    af:e8:b5:a6:6c:d1:d1:c1:7d:6d:96:1f:3f:23:f7:
                    d5:8a:ae:34:64:c2:25:4b:66:f7:d5:23:9e:38:d8:
                    3d:06:0c:81:00:35:b9:94:f1:75:bd:79:8e:12:24:
                    62:02:28:19:c4:ad:ff:df:c6:c2:6c:3c:59:37:1d:
                    ac:98:ff:51:fc:1d:b1:1d:7d:b5:d4:e6:0a:cb:a5:
                    3d:2b:c6:03:78:95:14:ed:e1:8e:bd:14:95:db:23:
                    f8:49:cc:3c:7f:13:30:1e:d6:a5:c6:04:7c:bf:99:
                    4b:da:5c:31:45:88:71:8b:6e:d6:bc:18:09:95:28:
                    8b:71:d9:d4:92:eb:c9:bd:46:d4:80:d5:7a:0a:a8:
                    4d:f5:08:76:15:c5:af:dc:85:d8:74:78:ac:99:95:
                    e7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5E:9E:1E:9E:42:BA:2F:84:17:BF:A8:0F:04:EE:36:32:54:B6:97
            X509v3 Authority Key Identifier:
                keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a2:95:58:af:14:99:b1:dd:86:ed:6c:9a:61:48:6e:bb:42:
         24:4c:0c:33:59:4c:75:54:b2:7f:19:da:d6:e7:e1:ac:f2:fa:
         5c:17:02:e9:ea:82:2d:41:ce:7a:19:7a:d0:f0:3c:77:c0:41:
         4d:f3:30:85:9e:a1:9c:d3:32:57:1e:0c:1d:bc:a8:59:50:0e:
         79:ec:61:a1:d3:25:1d:9e:3a:ca:9f:51:a9:6e:e0:df:54:c9:
         80:5f:27:a2:9d:d8:fc:97:94:0a:23:36:5b:ba:29:77:1b:18:
         22:32:86:4c:ef:b2:20:7b:14:72:69:62:99:bf:af:6f:44:93:
         52:6d:08:6a:71:d5:25:ec:23:26:6b:fe:cb:4f:b7:18:de:a0:
         48:c8:d5:23:b0:7f:2b:cc:42:1e:97:e8:b1:f0:ed:48:8b:ee:
         1f:f4:ec:c2:96:24:10:b5:7c:68:63:90:7e:f6:fe:bf:9a:f2:
         36:2e:4a:09:e1:c6:13:ec:ae:d1:53:30:a9:52:f3:e3:7a:f2:
         55:7d:9a:73:b7:df:ff:85:ab:c1:56:b3:be:f5:56:1c:71:33:
         a1:8e:30:f7:2b:4f:b2:8e:2d:4d:3e:5d:3e:3c:56:96:e7:de:
         a0:0a:c7:4f:c4:97:17:25:51:2f:2e:77:8c:0b:05:94:20:d4:
         cc:41:c8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:45:14 2026 by rpki-client