Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File:                     jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier:          iPkEAMtryJ+lkFk8/vlH/STdTRfJ4eC7jRbTLrS/SF0=
Subject key identifier:   EB:69:AE:27:BD:A3:79:59:DE:68:DA:7B:81:84:88:3D:6F:FA:C6:AA
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer:       /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial:       019F90FF2010C511526BC4B804953AEB5342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number:          1734
Signing time:             Thu 23 Jul 2026 22:01:06 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:06 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:06 +0000
Files and hashes:         1: Ehq1fgOB5ooBA7ScwXrEyzacMlM.roa (hash: PI1tHHpG8YaScy6OswM5/N0e99dLsaLuV7Co2hegDeg=)
                          2: G55yZYiuVYeJRmcFMnEODXZ1HEE.roa (hash: 9PE9kx4LunMvlElwlTx9oCQOua2rAPc/W+sL1ybbB1w=)
                          3: LJebYt2RKAnZnlBYImxu1KuPPwA.roa (hash: w3sfxOU2em+eBC1lFr5Hlv5Tl5JwfPlg/nsmQIWubs4=)
                          4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: fEiXyRPOx5Pmxc3nc3X2yEwe7k2WHIGEK5vj+vl5s6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:20:10:c5:11:52:6b:c4:b8:04:95:3a:eb:53:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
        Validity
            Not Before: Jul 23 22:01:06 2026 GMT
            Not After : Jul 24 22:01:06 2026 GMT
        Subject: CN=eb69ae27bda37959de68da7b8184883d6ffac6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:32:32:4a:bd:c8:92:75:b8:b7:74:6b:20:c8:
                    b4:f6:6f:03:a3:a0:3a:d3:8f:d8:d5:c7:06:5d:a4:
                    bf:74:aa:82:45:12:6b:c4:22:36:67:9f:e9:81:ed:
                    cc:98:8f:fe:e3:6d:27:d9:64:50:76:45:b1:cd:5e:
                    47:75:53:95:41:88:dd:b5:51:b8:6e:05:7b:ef:e3:
                    33:36:1f:0f:31:30:8a:8e:24:14:42:07:f5:1f:9b:
                    9f:e4:79:52:dc:4d:c5:fb:ac:17:64:6f:6a:3a:2c:
                    73:04:b3:d2:9f:88:e9:d9:6b:fe:db:58:98:df:3b:
                    27:33:2e:b7:f5:4b:5d:90:f7:3d:3b:74:09:76:79:
                    56:96:49:83:7c:f5:4a:8d:d9:7b:18:e2:61:d5:2e:
                    4d:2b:3e:e7:2a:6a:0f:5a:48:ad:c5:b3:b1:b6:35:
                    ba:58:2c:4e:1b:fc:26:3b:29:ee:10:da:6a:47:1b:
                    70:00:f2:10:49:b4:1f:d3:9b:9f:d2:75:e2:d0:dc:
                    6d:26:a9:74:cc:f1:45:f8:2c:22:b6:3b:c5:f7:29:
                    c8:e0:c4:aa:0c:a4:d1:fa:81:09:b7:c2:09:f0:e9:
                    8b:3a:c7:83:1a:61:70:ec:01:96:e6:83:bc:f5:b7:
                    cb:c1:0a:db:9d:a7:cc:4a:18:82:db:b3:4e:90:c7:
                    cf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:69:AE:27:BD:A3:79:59:DE:68:DA:7B:81:84:88:3D:6F:FA:C6:AA
            X509v3 Authority Key Identifier:
                keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:5b:62:6e:43:aa:a5:ac:b7:1b:15:8b:62:2a:7b:0e:49:63:
         89:60:b7:04:8b:94:b7:53:ae:3f:56:be:38:44:75:af:0f:83:
         71:88:87:ee:20:06:73:58:e8:f0:34:f0:a5:60:52:7a:f7:44:
         87:00:50:90:e7:a7:fa:e2:71:d6:c8:0e:6f:16:e0:61:81:68:
         72:05:86:a9:e0:d5:d5:a4:a8:7e:03:ef:5b:80:c2:89:e2:98:
         2b:23:ce:6d:44:37:33:8b:45:ed:ed:ae:51:0d:39:1f:ef:47:
         74:af:04:68:7b:1b:e5:dc:c7:26:61:4e:ae:91:ea:82:ab:40:
         93:e9:87:6f:96:51:82:62:67:d3:c2:ea:fc:90:62:38:7b:9b:
         b2:63:42:51:fd:b6:6c:d6:9c:96:6a:2f:ed:9a:3b:23:45:65:
         49:01:e7:bd:ae:92:e1:5b:66:a7:b7:05:95:27:29:8f:6f:ba:
         4c:54:47:89:5c:61:a5:d4:95:a7:86:9d:2f:14:04:9e:7c:bf:
         8f:89:55:25:09:19:80:da:70:b7:ba:d1:d2:9d:51:06:6c:0c:
         a7:54:c4:07:ff:66:39:f6:26:b1:fd:67:30:44:90:39:4b:a2:
         e3:70:11:0d:6f:69:5a:bc:f4:df:a6:96:c5:c2:12:b4:26:a3:
         27:d4:0e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:46 2026 by rpki-client