Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
File:                     j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft (raw, json)
Hash identifier:          KCEJGjaNFQVKNOzcW02CKmD7i8FoGsLqzK5rOK+2z7g=
Subject key identifier:   FA:F5:76:C4:7A:4C:FC:D1:53:DD:4E:F4:23:1F:E9:06:6B:F3:D1:82
Authority key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
Certificate issuer:       /CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Certificate serial:       019F9248D8B95143C1747F33D5075FF575B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 04:01:15 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:15 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:15 +0000
Files and hashes:         1: _QFYHtLUd5PrTEx3ytqrTgZXY4A.roa (hash: IMcdfSBLxJMlJLL2pxyXtKfsGbWAEaXixakUAiVwCV8=)
                          2: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl (hash: Ee5Gd7sn+JnU9g1wfYbZzL/wPNhwo+qyjncZnv8+O3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:d8:b9:51:43:c1:74:7f:33:d5:07:5f:f5:75:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
        Validity
            Not Before: Jul 24 04:01:15 2026 GMT
            Not After : Jul 25 04:01:15 2026 GMT
        Subject: CN=faf576c47a4cfcd153dd4ef4231fe9066bf3d182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:31:4b:16:09:c6:1d:91:83:4e:d7:c9:7c:1d:
                    76:ba:5d:eb:1a:e7:d6:ca:98:1e:71:8f:f6:54:8f:
                    cf:63:6b:f4:e6:9b:d0:cc:ca:6c:f8:1c:15:ee:fc:
                    3a:03:90:ca:05:39:b6:f7:2a:ea:40:34:87:65:72:
                    f1:03:ad:a1:61:f9:55:fe:9b:b6:e8:56:73:38:39:
                    7b:20:9d:a6:44:c6:9b:1e:f6:b2:c9:2f:7a:9c:f7:
                    b1:a4:37:95:b0:df:cf:0e:7a:8c:df:76:07:c3:ae:
                    1e:ac:d8:9e:3f:33:49:02:e6:10:c8:d9:2a:53:e1:
                    c8:60:e7:44:9e:1f:71:af:49:ed:56:ba:e8:ec:64:
                    fe:e5:d7:48:df:e9:d8:8f:d6:22:8c:96:95:8f:a7:
                    0f:34:5a:13:39:be:7a:08:6b:a9:49:1b:f1:57:b4:
                    bf:e4:90:c7:26:65:9c:aa:ca:18:ce:d6:30:f0:6b:
                    3f:ec:98:19:5a:71:a3:0f:1c:ab:e5:da:f2:de:7a:
                    21:14:35:db:e3:cf:66:6f:74:23:d0:f0:ba:ce:01:
                    b0:47:07:ae:a0:2e:c1:96:f5:bc:18:29:9e:fb:05:
                    e1:25:fa:df:51:79:e8:c4:ce:20:d2:72:fc:b0:87:
                    8d:b0:bf:14:75:54:92:2d:3d:7d:55:40:a4:b7:a0:
                    e6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F5:76:C4:7A:4C:FC:D1:53:DD:4E:F4:23:1F:E9:06:6B:F3:D1:82
            X509v3 Authority Key Identifier:
                keyid:8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:e0:a8:c0:37:ab:0d:e6:0c:4f:2a:e7:b5:4e:f2:19:48:41:
         1d:8b:c5:1f:be:ab:bf:66:4c:59:7c:c7:d9:71:ba:70:29:b5:
         bb:0e:d1:10:51:9c:2a:6a:7e:9d:be:85:26:83:97:e9:f3:b1:
         18:76:57:6f:7b:a6:6c:a3:bb:84:94:95:1d:b0:c9:9c:9c:1d:
         27:1b:04:13:71:50:70:f6:62:8e:02:e0:3a:58:6e:fe:36:28:
         84:58:29:a8:7b:6f:4a:8e:f7:6a:98:c9:51:8f:4e:b4:29:12:
         cd:5a:f0:ef:c4:5d:f5:b9:39:e6:eb:b8:af:58:9c:2f:2d:eb:
         21:bf:b7:fa:77:f3:26:8b:7b:e1:3a:37:9a:75:1a:59:66:ab:
         da:28:48:5e:ab:89:38:10:cc:1e:2b:f3:a4:02:c6:60:31:48:
         b1:1e:32:42:bc:b0:79:df:03:e3:f7:a7:01:77:94:ee:47:85:
         bf:a7:be:ad:38:5d:a3:64:6d:03:a6:bb:44:98:67:53:f9:cd:
         c4:2c:a0:e0:8d:c7:03:98:de:10:bb:e4:8d:84:16:c5:1e:f5:
         ea:c9:fe:4a:c6:37:a2:af:97:ff:f7:89:7f:0c:45:de:65:2b:
         fd:ea:db:aa:1f:46:9a:66:d6:e2:fc:16:f5:98:06:a6:9c:7e:
         be:c2:15:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:14:52 2026 by rpki-client