Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft
File:                     Jg12BCKSiW-WU6ponkFgeUKzT4c.mft (raw, json)
Hash identifier:          fKMUAdTsdQZ6+Tbz18gwyUgkv8J62mHLgy4P6ZPVpsU=
Subject key identifier:   52:4F:0F:00:0A:BC:F1:9E:23:36:16:A0:F6:B1:E4:D2:25:23:76:C8
Authority key identifier: 26:0D:76:04:22:92:89:6F:96:53:AA:68:9E:41:60:79:42:B3:4F:87
Certificate issuer:       /CN=260d76042292896f9653aa689e41607942b34f87
Certificate serial:       019F94A4CEDE7333AEE2AB22627DED140DF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jg12BCKSiW-WU6ponkFgeUKzT4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft
Manifest number:          32
Signing time:             Fri 24 Jul 2026 15:00:56 +0000
Manifest this update:     Fri 24 Jul 2026 15:00:56 +0000
Manifest next update:     Sat 25 Jul 2026 15:00:56 +0000
Files and hashes:         1: Jg12BCKSiW-WU6ponkFgeUKzT4c.crl (hash: LR4e1wg04SiOO/blzNxIZFvej2uEWx0OCzIXDPz6ukk=)
                          2: dA5GHyWkiinW-X3ggJL5uaWKg90.roa (hash: AobSuh+m+/JdWn6/war1pe24bAV9jiWfGNJFdO8s0gA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jg12BCKSiW-WU6ponkFgeUKzT4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a4:ce:de:73:33:ae:e2:ab:22:62:7d:ed:14:0d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260d76042292896f9653aa689e41607942b34f87
        Validity
            Not Before: Jul 24 15:00:56 2026 GMT
            Not After : Jul 25 15:00:56 2026 GMT
        Subject: CN=524f0f000abcf19e233616a0f6b1e4d2252376c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f7:3a:b4:fe:81:04:1c:ac:84:8e:b1:e2:c7:
                    7b:4a:91:3e:38:2e:ce:13:09:de:ea:46:a8:0d:28:
                    11:bc:e9:a0:f2:f0:d5:45:1d:ec:33:b9:9e:d2:75:
                    0f:0f:a2:92:61:13:54:26:e6:b4:db:12:74:82:b7:
                    96:8e:d1:2a:91:da:76:92:77:2d:f6:ed:56:9d:2b:
                    41:ce:76:62:3e:78:43:0d:f2:22:62:a7:e0:06:a3:
                    5a:68:e1:57:77:7a:21:27:71:d3:29:c0:17:26:6b:
                    ea:6c:78:54:6b:17:41:c5:4f:55:89:3d:fc:5f:25:
                    68:ff:f0:66:95:f2:10:23:5e:ad:9a:6a:3d:00:26:
                    cd:1d:48:c2:c3:90:8e:e8:8a:e2:48:a2:78:4d:ca:
                    00:e7:46:50:c8:87:61:e0:10:da:13:3c:95:64:4c:
                    2b:39:6d:c1:39:16:c0:6b:8b:c3:fc:24:ca:6a:fe:
                    38:9c:8a:dd:08:b4:03:9b:6f:6f:a5:93:c9:b9:f4:
                    52:83:8b:a4:10:f7:c2:03:e7:5e:e8:b3:92:76:4c:
                    43:9b:6c:87:b1:ce:3b:7f:a2:c5:6b:8f:81:da:b3:
                    c0:36:c6:5f:c8:bd:81:ba:84:95:b7:26:42:0e:31:
                    c3:ee:e7:0a:22:50:9b:5f:89:e0:ce:7e:cf:0b:71:
                    8c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4F:0F:00:0A:BC:F1:9E:23:36:16:A0:F6:B1:E4:D2:25:23:76:C8
            X509v3 Authority Key Identifier:
                keyid:26:0D:76:04:22:92:89:6F:96:53:AA:68:9E:41:60:79:42:B3:4F:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg12BCKSiW-WU6ponkFgeUKzT4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:0c:1d:8e:00:06:c6:6d:e5:4a:58:ee:5d:a7:84:4a:bd:d4:
         2f:33:6f:b0:b8:67:08:5d:97:36:fc:48:15:0b:0c:bc:17:74:
         de:58:49:4e:f0:38:bd:6b:b7:b2:6b:58:85:fa:ef:79:56:7b:
         a7:ab:b1:5f:61:2e:b5:58:ae:1f:45:fc:8b:50:51:56:5f:90:
         b1:7b:85:55:58:08:90:e7:89:c1:ee:20:2f:65:ec:0a:5a:66:
         41:64:a5:4e:0d:4b:d8:32:ab:ea:6e:84:f4:10:d5:02:f0:78:
         f1:1d:a1:94:96:a0:2c:76:9e:d0:3a:6c:5d:da:40:67:8e:88:
         49:bd:f6:ac:58:28:7f:2a:d1:c5:91:74:93:2f:a7:47:57:cb:
         d5:36:3c:f4:ee:11:77:6c:89:0b:03:94:77:0b:d1:54:94:24:
         5f:b5:89:a0:9b:c2:f7:be:bd:29:6c:68:01:18:82:b9:5b:a0:
         4e:09:38:ae:9f:c6:91:af:8c:90:c9:9a:04:3b:93:6d:6f:21:
         07:53:23:bd:dc:50:be:42:fc:ab:71:1c:24:09:be:a2:64:52:
         07:32:a1:07:5a:b2:fe:f8:f2:2c:de:a6:13:fe:17:0a:58:df:
         fa:06:d6:24:b5:ad:81:3c:42:70:03:ff:2b:3a:e5:10:36:ff:
         2e:3a:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:53 2026 by rpki-client