Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
File:                     jbK0TyPcypwGBL7WkPKKatkBeZk.mft (raw, json)
Hash identifier:          EKIQoQng9PJ9N9GMlfl+Z3sjj8vh7Mcp+OIBGLA7RNo=
Subject key identifier:   6A:ED:05:B3:45:C4:68:8C:83:8D:90:7B:7A:7C:FA:1B:15:73:6C:F3
Authority key identifier: 8D:B2:B4:4F:23:DC:CA:9C:06:04:BE:D6:90:F2:8A:6A:D9:01:79:99
Certificate issuer:       /CN=8db2b44f23dcca9c0604bed690f28a6ad9017999
Certificate serial:       019F8F7E05D03E5C145BA13654B2FBFF4A19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
Manifest number:          02A6
Signing time:             Thu 23 Jul 2026 15:00:28 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:28 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:28 +0000
Files and hashes:         1: H60TaHzgzIDq5bEuHBb2yyowYNw.roa (hash: MUV9kznaIpAsdXMNwJm4Ji4yLC8b4zqE7vuFtiUPGnQ=)
                          2: jbK0TyPcypwGBL7WkPKKatkBeZk.crl (hash: keAGP5fMw0BTfpuwN/6VRfD7isY+OGiyOJWNOSCQy40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:05:d0:3e:5c:14:5b:a1:36:54:b2:fb:ff:4a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8db2b44f23dcca9c0604bed690f28a6ad9017999
        Validity
            Not Before: Jul 23 15:00:28 2026 GMT
            Not After : Jul 24 15:00:28 2026 GMT
        Subject: CN=6aed05b345c4688c838d907b7a7cfa1b15736cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:f3:5e:89:a6:75:0a:37:73:56:ec:00:e5:
                    91:4a:d9:c0:86:21:95:b3:73:20:19:46:73:b2:5e:
                    1b:6c:25:1c:9f:84:f8:04:ac:53:27:02:40:a4:fa:
                    ee:a6:98:42:92:4b:65:b9:04:4e:e1:fe:ba:2d:b5:
                    7b:17:01:91:51:bd:d2:26:c5:3a:e9:c7:8d:25:89:
                    6d:d5:67:14:66:b3:fd:70:bf:c0:c6:c1:4d:4b:c7:
                    9e:9f:70:cb:1d:b1:43:31:c0:ea:1e:2c:4a:0d:ee:
                    b4:4c:94:df:5b:44:16:a9:76:d9:c5:df:32:c0:be:
                    ca:23:f2:d1:7e:b0:40:4d:41:5e:23:29:8d:f3:13:
                    90:d8:e9:2e:6a:7a:0f:f2:8f:b5:dc:42:6f:30:0c:
                    1d:d6:c7:7e:48:76:0a:c0:9c:08:a2:5e:00:52:85:
                    a0:bf:d0:01:02:70:cc:0a:9b:23:44:cd:c5:45:bc:
                    fc:6e:37:95:aa:86:e2:73:7e:1b:b5:57:16:9b:98:
                    aa:ef:db:b5:28:cd:e4:dd:58:5b:62:82:db:9c:ac:
                    eb:eb:f2:5e:9b:01:f8:27:b6:49:6c:fe:47:23:5e:
                    7a:54:12:4a:40:53:55:b7:38:8a:87:fa:66:b8:64:
                    c2:05:35:f4:87:ec:34:0b:fd:27:76:2e:ba:11:88:
                    3e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:ED:05:B3:45:C4:68:8C:83:8D:90:7B:7A:7C:FA:1B:15:73:6C:F3
            X509v3 Authority Key Identifier:
                keyid:8D:B2:B4:4F:23:DC:CA:9C:06:04:BE:D6:90:F2:8A:6A:D9:01:79:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d9:cb:96:75:dd:dc:62:2a:45:3e:45:e1:f1:a1:92:4c:7f:
         b9:4e:b5:17:df:d7:71:29:ae:26:53:ae:11:8b:bb:b2:df:62:
         a6:50:11:00:e0:92:eb:d9:73:aa:79:a7:fa:6a:89:82:8b:f1:
         03:9c:b4:a8:bb:e9:50:3f:fe:6a:d3:5c:6a:a2:a2:a1:ec:21:
         f9:1f:96:b1:6d:0f:5c:f5:ff:2e:93:9e:0b:58:04:0f:41:0c:
         aa:1e:21:49:25:46:83:87:45:65:e1:2d:3d:3c:4e:d0:d8:42:
         09:60:3e:c6:96:88:66:3c:5b:6a:95:d0:8c:e8:1b:c1:d5:9e:
         9f:96:d8:d3:04:71:39:87:54:d1:3a:77:f2:ef:c0:29:91:f5:
         03:d7:a6:8d:99:d0:2a:fd:d2:3b:16:cb:95:32:32:cf:77:5c:
         d8:45:ed:78:7a:bb:6d:90:6e:4b:1a:ef:7a:df:74:ba:07:58:
         71:83:c8:d3:1f:2b:a1:6c:ee:05:f3:65:fb:ed:f3:b9:1a:de:
         fb:1a:1f:84:df:b9:27:eb:4e:e1:fe:1b:b1:ce:c4:28:1f:90:
         17:25:c1:d8:f1:e0:8b:3d:5e:46:56:53:2c:59:87:3d:96:d8:
         80:b1:78:ab:39:5c:32:db:b3:11:5a:d7:2c:7d:ff:d9:51:93:
         f5:16:64:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:57:41 2026 by rpki-client