Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
File:                     JygMxTRRbRwdnqAk6q-9Af3GjJc.mft (raw, json)
Hash identifier:          2rSUhBgegupKFrSDdDok0vlS1mQI8keLKDUu3o2XZpA=
Subject key identifier:   9D:18:9C:81:F7:F2:D7:3A:25:E8:14:7F:CC:71:D4:58:AC:13:91:B1
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Certificate issuer:       /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial:       019F946DC8F09EC679D0FB0EA8F3023D595A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
Manifest number:          19CB
Signing time:             Fri 24 Jul 2026 14:00:50 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:50 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:50 +0000
Files and hashes:         1: JygMxTRRbRwdnqAk6q-9Af3GjJc.crl (hash: WL+KltA8HxpvGiWX0wpNfQje4S/IdenYOSEGhHuzXSg=)
                          2: Zq2cQmDy7q3A5_xdFvl7YbbhwIc.roa (hash: PgMe36er/jf5wuEzDom6ucc6sQi96pKMuPFdurESUyQ=)
                          3: k8z_313Hx8hvd4ufZZCaGYZBw0Y.roa (hash: k20SFgFV65J9lEt18uaFg+XOBiT1Sd/tRFmAU9F/loo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:c8:f0:9e:c6:79:d0:fb:0e:a8:f3:02:3d:59:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
        Validity
            Not Before: Jul 24 14:00:50 2026 GMT
            Not After : Jul 25 14:00:50 2026 GMT
        Subject: CN=9d189c81f7f2d73a25e8147fcc71d458ac1391b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0d:5f:13:7d:7e:c4:ad:a5:5a:31:5f:77:29:
                    4b:b8:95:96:44:a2:7b:27:d6:6a:e6:63:ec:08:b7:
                    65:0d:9b:d5:e8:7c:64:93:ab:de:b3:13:e9:04:69:
                    97:b9:45:d6:40:88:c1:d5:59:c9:9d:86:59:8c:a9:
                    3f:f2:43:ac:6d:35:54:92:68:82:58:64:66:d2:73:
                    31:9d:57:df:9a:e7:12:c1:7a:34:1d:41:01:ea:a5:
                    02:d2:95:67:7e:87:24:fc:7e:b3:bc:bf:8e:46:b7:
                    b8:f0:36:51:87:85:7e:f4:f7:b1:6e:2b:6e:e0:2c:
                    0a:d9:19:72:70:7d:15:d1:0a:42:11:b7:84:5d:53:
                    f1:f4:6d:3c:e8:1f:4f:c8:ac:05:16:e4:c8:15:91:
                    1a:c2:b3:99:cd:ca:16:32:12:1d:2f:02:03:48:e0:
                    f0:40:83:a8:95:c6:b2:66:87:f9:0d:d9:96:d6:27:
                    78:a0:6e:4c:b5:14:a6:85:4f:0a:26:0f:35:62:1f:
                    cc:04:b7:70:ef:60:16:c0:fc:b1:bf:93:b4:f1:02:
                    31:52:0f:91:bd:a9:ad:9a:5d:76:df:88:d7:e4:12:
                    29:9c:10:0e:43:b1:d0:0b:ea:25:6c:f7:5d:40:62:
                    f0:6b:37:61:71:7f:01:3d:9a:ce:fa:3f:17:bc:7f:
                    22:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:18:9C:81:F7:F2:D7:3A:25:E8:14:7F:CC:71:D4:58:AC:13:91:B1
            X509v3 Authority Key Identifier:
                keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:70:7d:6f:52:af:9f:a8:6d:65:ca:e8:fe:83:30:92:51:26:
         16:a1:73:a5:2f:0f:fd:26:b7:3b:ac:18:a6:a5:fb:76:8f:e7:
         e1:17:e7:45:f9:8e:9e:8f:ac:3c:69:7c:fe:54:9a:25:12:11:
         c3:80:9c:c2:2b:f7:53:34:59:ef:99:f0:e5:49:f2:c1:e3:55:
         6b:cb:fe:f9:64:e6:42:83:9b:05:ee:b8:d2:ec:3d:67:18:df:
         b2:13:e4:9e:c3:95:34:be:c6:30:a1:8b:0e:08:55:4a:3f:b4:
         78:21:61:c5:8b:9a:3e:23:ec:80:fc:0d:27:8b:b2:77:32:0a:
         d6:cb:5e:4d:78:c4:a2:2b:e8:13:53:de:6c:6e:ad:d6:e9:6b:
         58:72:50:65:c8:83:75:b5:53:c0:ec:df:a1:42:ab:72:8c:47:
         b7:0f:a5:a9:87:1b:26:01:f2:1d:ee:6d:93:1e:fb:e9:20:b3:
         b1:83:5e:2f:73:60:34:50:94:e9:5f:f9:17:a4:49:7c:84:32:
         08:51:a0:a0:12:c5:a4:40:b1:e7:84:b6:2e:cb:d5:50:24:dc:
         12:34:1c:d1:2a:71:0a:71:74:53:fd:1e:d7:4d:eb:7b:a3:cc:
         47:0c:b6:26:e8:a8:7f:a8:84:28:c3:69:2e:35:cb:08:97:81:
         b8:06:95:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:19:48 2026 by rpki-client