Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
File:                     j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft (raw, json)
Hash identifier:          QOVqp/9C691rjhD5mE0a195XEMtel6ZZPu/egiGBz5c=
Subject key identifier:   1A:36:AF:21:44:A0:5A:64:F6:28:3F:30:85:CF:F2:FC:43:72:D8:45
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Certificate issuer:       /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial:       019F9022B7A737847ABE1FF75C0CADE0BDB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
Manifest number:          11FB
Signing time:             Thu 23 Jul 2026 18:00:22 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:22 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:22 +0000
Files and hashes:         1: DShqO0Ue11GUy5d8RFMckaCauhk.roa (hash: PD8/R6zXgkXFWzaUz+2PUMdYJX3ZY2n+651dnXziaN8=)
                          2: HhUP9V6D6eMcyfe9trO5RFkUgrk.roa (hash: dLLQt7TFTOMK0HJ6sdmoFfSXq6h2xikykKO4e94KISk=)
                          3: KvYzATzwIL9g-iqhBKjN6pRQns4.roa (hash: Bq4sJCKB4JPFIy91hhv99d4z3fVb9NtKRyY/klM1Ank=)
                          4: j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl (hash: x8IosTYZscqSxMK3DTbdDOSfjZzZPTGv5CAIZ1d/roE=)
                          5: vKntuT3xVwdgWmZ3-NPNbmwYIuo.roa (hash: i9XFeCZuakWWqMNbjgXUo7/eL4g2IBgqmIa52Z/2v4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 18:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:b7:a7:37:84:7a:be:1f:f7:5c:0c:ad:e0:bd:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
        Validity
            Not Before: Jul 23 18:00:22 2026 GMT
            Not After : Jul 24 18:00:22 2026 GMT
        Subject: CN=1a36af2144a05a64f6283f3085cff2fc4372d845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:54:02:e9:ca:f6:0d:c1:14:2c:62:2b:9d:2e:
                    be:6e:4e:8d:22:14:45:66:d5:ef:41:6b:d7:b0:ed:
                    bc:9b:1e:35:c8:cf:50:86:d8:b7:00:33:e2:9e:84:
                    ef:a3:0d:18:f0:56:a6:10:dd:f1:53:b4:8a:7e:76:
                    87:4e:30:62:de:4c:3b:2e:e1:eb:69:62:9d:26:28:
                    ec:e6:6c:49:f3:3f:11:8d:ab:05:64:8a:47:2e:bb:
                    b7:ae:1d:02:bb:70:ff:c0:84:76:39:00:58:e8:4d:
                    8c:a7:e8:42:51:62:01:60:7d:bc:ec:28:d9:68:ca:
                    5c:08:04:d6:ad:5c:11:9d:14:aa:81:35:d2:b7:f0:
                    f1:76:9a:2c:4f:7f:c0:72:26:2f:2a:11:09:de:87:
                    e5:3d:ec:8f:17:de:d4:06:b1:33:7f:22:e6:ff:1b:
                    86:36:96:32:d0:04:b9:4f:d5:62:04:0d:6c:f5:e2:
                    ee:15:61:02:99:87:4d:5f:a3:8b:4e:96:5d:87:1a:
                    ff:81:5a:8e:2f:dd:33:b3:28:55:a2:1d:83:5a:8a:
                    e3:80:6a:66:70:a0:5b:95:18:2c:a7:51:26:10:00:
                    29:d1:d9:30:b6:37:6f:c8:24:4e:5f:78:44:13:3d:
                    b3:be:85:99:df:b3:1d:84:17:7a:3a:17:c2:27:ff:
                    1e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:36:AF:21:44:A0:5A:64:F6:28:3F:30:85:CF:F2:FC:43:72:D8:45
            X509v3 Authority Key Identifier:
                keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f7:1f:68:8e:65:3c:64:e5:6d:8d:3d:cc:97:9a:0e:f8:eb:
         ed:4f:25:0d:71:67:f3:71:0c:fa:6f:fa:17:98:74:49:70:dd:
         50:5c:e8:fa:1a:71:b3:ea:d5:a3:e5:4f:a8:82:8f:75:07:e3:
         53:1b:f8:3e:a6:3f:9c:48:95:af:e1:01:5f:eb:0c:8b:f9:2f:
         e1:a5:61:3f:38:14:c4:b3:95:6e:af:59:bb:64:04:58:04:65:
         ef:1c:71:1a:d4:58:14:07:78:fa:a9:80:cb:84:e2:83:55:29:
         a9:eb:cc:b7:4c:cf:3b:23:74:eb:3b:b8:ea:f8:71:00:fc:2c:
         f1:9c:9c:07:18:0c:f8:1b:41:97:65:ed:ff:ac:20:d9:bf:83:
         71:31:6e:80:3f:d7:72:d1:bb:bc:bf:bf:0f:e8:78:4e:07:e2:
         fc:d5:2f:5f:65:14:3e:65:c8:8f:16:fa:51:7d:33:29:8d:08:
         c1:c6:00:a5:52:8c:1f:cc:20:bf:36:c6:0c:db:ff:d0:35:0b:
         26:af:8c:4a:10:93:26:fc:cc:e6:94:f9:e7:6a:ff:c9:de:b4:
         b3:d6:96:db:e4:02:69:6e:bf:66:40:25:0c:50:ad:db:c5:5e:
         8b:02:80:09:9a:74:ec:4b:49:a1:6c:7c:76:d7:ef:d4:fe:27:
         36:7c:6c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:13:36 2026 by rpki-client