Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
File:                     Jg8Qh8zQbmtHZDxOvni8z1885dI.mft (raw, json)
Hash identifier:          6IUMPqQ7jooNdiozgxkweh3jAm+lBSawyXh/DP5/ck4=
Subject key identifier:   DA:13:CB:1A:B3:E3:0B:A3:67:3F:97:FD:F0:8C:51:C5:78:A3:45:3C
Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
Certificate issuer:       /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Certificate serial:       019F93C975D2A0DF1B9BE71730CF9C9B20A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
Manifest number:          043F
Signing time:             Fri 24 Jul 2026 11:01:21 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:21 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:21 +0000
Files and hashes:         1: Jg8Qh8zQbmtHZDxOvni8z1885dI.crl (hash: KOaS3DThvnHWG6jipRL+jN1PFiOyO1awsi+K1+RTftY=)
                          2: YDjaLvjd_4NBMP35Wk-oecOx8QQ.roa (hash: H49ZMq3qndN5kJWaRAax7kiG0pAT3uE2jIvdrAJiUlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:75:d2:a0:df:1b:9b:e7:17:30:cf:9c:9b:20:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
        Validity
            Not Before: Jul 24 11:01:21 2026 GMT
            Not After : Jul 25 11:01:21 2026 GMT
        Subject: CN=da13cb1ab3e30ba3673f97fdf08c51c578a3453c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:80:61:6e:4b:97:4d:e3:9d:16:5d:18:f9:09:
                    d3:7b:f3:9e:3d:6f:c3:c9:ab:67:8d:d9:a3:2a:47:
                    e9:e3:91:03:fa:60:25:0e:20:9c:52:19:73:4d:29:
                    b9:b1:f1:9f:f4:9a:d5:a7:6f:e7:93:ba:12:1e:a3:
                    3e:f0:a6:73:5a:40:a2:01:af:b0:34:4d:87:82:f8:
                    52:45:c3:33:7e:13:c8:4b:33:e3:01:5d:8a:d8:13:
                    3d:4c:a4:b9:0f:28:4d:2b:14:8d:e4:43:e1:de:e6:
                    74:2a:7c:b3:ca:d2:5a:83:f4:50:bf:47:91:0e:3b:
                    e9:c1:16:24:76:06:56:83:4c:7f:79:24:de:1a:bf:
                    42:a9:7c:a2:91:d5:a2:93:c0:5f:cc:ef:18:bd:b4:
                    e4:a0:af:4a:72:ef:c9:c0:db:06:47:a2:8c:51:4e:
                    7d:35:4d:eb:34:70:a8:1d:e5:74:92:63:fa:34:08:
                    11:3f:20:25:14:37:3d:db:e5:0a:c7:ae:6a:37:2a:
                    96:83:7a:a4:2b:17:e0:ec:43:c3:19:96:65:b5:d0:
                    93:58:65:93:44:be:2b:7d:43:79:1f:d3:b6:6d:29:
                    8e:f0:09:11:11:6c:ff:f4:88:cd:dc:a7:a3:4a:b7:
                    d9:62:2d:72:b0:60:70:5f:2d:9e:16:c1:1a:45:54:
                    c5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:13:CB:1A:B3:E3:0B:A3:67:3F:97:FD:F0:8C:51:C5:78:A3:45:3C
            X509v3 Authority Key Identifier:
                keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:64:e0:82:79:68:14:bc:b4:47:2a:4c:9a:84:ac:78:f0:bd:
         39:df:94:0e:46:b4:32:83:e6:92:47:18:da:ee:29:5b:76:30:
         ac:b8:9f:05:e1:22:27:64:e7:84:2a:9b:c0:a9:67:ab:2b:4b:
         60:f2:3d:20:8f:ea:c1:ca:ee:e4:c2:8f:df:d6:b5:fc:3e:c9:
         98:d0:05:15:68:6d:f4:30:c9:fa:28:a3:3b:1c:ff:76:ad:89:
         5f:65:ca:0e:6c:45:21:05:4e:d7:ac:b3:9d:a2:d0:94:9b:47:
         77:f4:2e:20:7b:ba:7a:a9:f5:16:59:a4:ce:54:54:e4:6f:1f:
         dc:6e:91:07:4b:8f:36:e1:2f:b7:47:9a:f7:b2:78:86:c9:4c:
         81:7d:c8:0a:e6:b9:da:e0:72:da:c2:d9:a6:f1:d1:98:e2:c7:
         79:d7:b2:50:39:a7:7f:95:65:55:89:e2:97:59:3c:96:a9:36:
         1f:e3:d2:a0:07:cf:38:cd:d7:1c:ac:76:5b:a2:b4:99:da:37:
         15:67:17:9e:19:d2:70:2c:1a:20:78:e6:5b:41:59:20:1d:48:
         39:27:92:9c:67:45:c9:ab:f0:72:ba:56:e8:24:49:7a:f7:ce:
         34:be:26:0e:2c:e2:e9:6b:5b:e4:f5:13:b7:0a:ca:3f:75:fb:
         a2:e4:8b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:56:16 2026 by rpki-client