Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
File:                     jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json)
Hash identifier:          6WV6h33xR2rTChldv5t1UYe1NfeQozyJ7/U/8t8re48=
Subject key identifier:   7D:B5:E7:F0:3F:8E:29:9B:1A:08:26:DD:01:00:FB:31:0A:51:68:4B
Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
Certificate issuer:       /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Certificate serial:       019F91DA5F30B10B63D1B7881FE7126B6450
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
Manifest number:          0E6F
Signing time:             Fri 24 Jul 2026 02:00:34 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:34 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:34 +0000
Files and hashes:         1: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: qX4+cUjdiGfyqt/DjQCg+GrezyUuc5UZMLWhhXysv7o=)
                          2: ybGK7D59nhsrV5zcx9pDpZj5zRw.roa (hash: lUVMObnC7ci77KqYjQKC6vaADGXMIPOZVK0KWxLUoCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:5f:30:b1:0b:63:d1:b7:88:1f:e7:12:6b:64:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
        Validity
            Not Before: Jul 24 02:00:34 2026 GMT
            Not After : Jul 25 02:00:34 2026 GMT
        Subject: CN=7db5e7f03f8e299b1a0826dd0100fb310a51684b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:94:67:4a:bb:28:f5:bf:5a:8a:77:f7:4a:
                    fa:82:01:6b:f5:3b:86:64:83:45:0d:aa:7b:15:84:
                    78:fb:7d:a1:c8:19:45:38:63:09:c7:6a:ae:91:d9:
                    43:d1:7c:86:69:c9:b4:5e:7c:ab:48:a5:eb:cf:e7:
                    d1:9a:54:5c:9b:4d:37:82:cf:36:fa:bf:d3:76:5a:
                    da:0c:82:86:13:6e:59:6c:4c:cd:98:c6:5d:64:c8:
                    72:bc:58:e3:66:22:55:6b:e4:ad:65:2e:00:4a:b5:
                    b0:4d:fa:88:d0:59:71:b7:c0:b6:c1:fd:45:82:9e:
                    a5:96:f0:e4:eb:b0:b4:5c:54:da:a4:93:4d:d7:d2:
                    5e:a7:4f:26:91:bf:4f:a7:20:37:05:f1:fc:33:f2:
                    3d:73:21:c1:eb:f0:0c:ec:cc:d1:60:b7:99:8a:7c:
                    cc:45:9f:14:39:51:17:45:a7:2a:12:2d:17:d0:fd:
                    15:72:8a:42:d1:88:ac:a7:a0:6e:0a:da:58:b0:2e:
                    7e:de:57:ae:62:0d:17:f5:6b:f4:55:3d:61:e2:e4:
                    49:1b:80:3f:58:c9:4c:3c:ad:d4:02:c4:6d:93:c6:
                    55:2e:fa:a1:0d:29:9a:01:ec:b6:5c:85:2f:1b:37:
                    c0:54:7e:be:f1:fa:b4:ee:eb:0a:66:2a:72:33:27:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B5:E7:F0:3F:8E:29:9B:1A:08:26:DD:01:00:FB:31:0A:51:68:4B
            X509v3 Authority Key Identifier:
                keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:8f:f1:25:0f:2e:50:d5:32:bd:c2:86:dd:05:61:73:4f:ef:
         b1:b2:ef:35:f2:e6:cb:70:3a:73:b6:1b:02:17:6e:38:a4:21:
         b8:30:75:12:af:40:26:e3:7a:39:ea:28:9f:5b:76:c4:1e:7b:
         75:11:4f:9c:23:65:4d:2b:ae:bd:0f:8d:1e:a1:f8:1f:12:d2:
         22:db:95:8c:37:79:c2:e5:f6:fb:16:50:eb:9b:20:30:a3:cd:
         32:31:bc:10:cd:55:1d:45:b6:0f:a0:bf:78:73:0d:42:b6:37:
         21:3f:68:47:fd:f3:fe:8f:8e:4a:89:d5:cd:b0:ae:f7:f3:04:
         ee:48:dd:55:12:40:f9:11:db:c0:04:30:e9:5d:0e:d2:59:e0:
         15:88:03:e8:97:c6:b4:d9:f0:06:80:22:29:1e:5c:35:1a:ab:
         75:cd:2e:ce:ce:39:db:63:ad:d9:4b:d9:33:72:8c:d6:1a:c0:
         60:41:67:6d:1e:ce:80:b3:dc:6f:8f:18:a4:92:d9:f7:7b:2e:
         a7:2a:63:b8:39:95:95:8b:72:29:ec:3a:db:dc:4b:f0:88:8b:
         ab:d1:31:4d:80:06:82:d4:68:3c:4f:b0:00:fb:18:2d:28:75:
         d7:15:57:ba:6a:e3:b7:11:df:b9:38:04:28:34:ea:0a:97:09:
         d2:a5:09:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:59 2026 by rpki-client