Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
File:                     J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json)
Hash identifier:          7GyMa3DlLlBOcA/c/uUuSTbNPFOOEQ1PpQEdJvWtKsE=
Subject key identifier:   74:01:80:BB:64:50:90:D8:FD:D8:CB:1B:9C:DA:37:7C:6C:C8:69:D6
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Certificate issuer:       /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial:       019F943737314EFD252D0C4C76361268F50F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
Manifest number:          0EA4
Signing time:             Fri 24 Jul 2026 13:01:14 +0000
Manifest this update:     Fri 24 Jul 2026 13:01:14 +0000
Manifest next update:     Sat 25 Jul 2026 13:01:14 +0000
Files and hashes:         1: 4N3tODFK8nz9NNMiv7CviryuDAs.roa (hash: X3aNYoDshM8q/qhUCoVbmt8vv1qoQt4+Ks1Zknci3aA=)
                          2: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: cTgpMEeA97psWN9usUjejReDyIj4LNmP5HfALYfs1kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 13:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:37:37:31:4e:fd:25:2d:0c:4c:76:36:12:68:f5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
        Validity
            Not Before: Jul 24 13:01:14 2026 GMT
            Not After : Jul 25 13:01:14 2026 GMT
        Subject: CN=740180bb645090d8fdd8cb1b9cda377c6cc869d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:2b:dd:70:03:92:f0:ba:b3:66:40:68:4d:
                    22:38:1e:07:3c:fe:25:1a:5c:5c:20:b7:92:87:a8:
                    f1:02:3a:6e:08:92:09:ef:ce:e7:ff:c1:17:0f:bb:
                    1e:3a:76:6a:5d:09:31:22:26:96:57:f7:2c:fe:d1:
                    aa:75:ae:5a:84:37:f0:0d:a2:8a:ec:21:ee:44:d5:
                    be:99:c1:e6:b2:ca:2f:e1:93:cb:df:3e:66:d0:25:
                    65:10:80:73:38:1d:e2:e1:13:2c:d9:38:84:58:36:
                    71:34:47:74:25:93:2a:6b:6e:f8:49:47:54:7c:19:
                    41:87:dc:37:e5:ab:2a:e2:7c:97:b0:64:7e:37:49:
                    96:33:b0:2e:c7:10:63:01:d7:df:6d:30:28:4d:c3:
                    5c:25:9e:5f:e1:ad:c8:ce:e5:13:1b:c7:cc:b8:f2:
                    ec:f6:d2:5e:08:72:4d:6e:7f:14:98:87:5a:3d:98:
                    0f:6a:7d:71:be:da:d3:00:13:cf:83:51:b3:4b:aa:
                    0c:91:43:9d:46:8f:7b:0f:ca:b0:73:e3:0a:01:08:
                    ad:8b:79:8d:0d:aa:f1:fd:05:48:49:c4:5b:22:f6:
                    62:2d:10:81:1f:2a:37:ee:5f:f1:9d:58:60:ef:70:
                    bd:e0:d9:44:79:f2:74:90:4a:3e:0d:d5:7f:06:e3:
                    8b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:01:80:BB:64:50:90:D8:FD:D8:CB:1B:9C:DA:37:7C:6C:C8:69:D6
            X509v3 Authority Key Identifier:
                keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:6e:2e:49:dc:90:30:8c:4c:2d:45:5c:f6:5e:e5:27:30:63:
         fb:8f:39:a0:f1:43:85:d2:c3:fd:27:24:0c:ef:3a:13:d6:ba:
         c7:b2:49:23:1f:da:12:fd:a3:20:a2:9b:51:fa:c6:2c:e1:ca:
         4a:41:02:dc:24:25:15:60:05:1c:63:2e:78:2d:5c:f4:f5:f6:
         3a:b9:6e:0a:c8:2b:55:e2:5a:9c:be:d2:97:49:bf:ba:4c:1d:
         80:3c:21:79:77:ad:ca:ac:81:4d:51:b4:ce:c0:de:d6:41:bf:
         89:a6:d6:ba:5a:42:2a:7d:9a:b6:93:70:b5:60:1a:4b:26:c5:
         01:a7:46:d3:12:c6:f8:fb:a5:35:e0:23:8d:ef:88:d6:bf:39:
         06:69:b2:31:82:e8:14:34:43:45:ea:68:f4:c6:9b:ed:15:f1:
         7e:57:f2:91:65:02:09:01:14:b4:63:60:49:87:9b:9a:45:e8:
         34:27:52:84:2b:dd:87:65:2e:38:b5:7c:c8:9c:7b:92:9a:c5:
         85:60:5d:93:6e:2e:59:65:fd:c5:5f:8b:31:f9:e9:79:7b:e7:
         9a:80:77:a6:b2:fb:39:78:be:61:84:fb:19:5f:94:16:4c:4f:
         11:ee:bd:53:69:d5:0a:4f:b8:e7:46:8f:b6:84:14:3c:7f:dd:
         74:fb:6e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:40 2026 by rpki-client