Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
File:                     jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft (raw, json)
Hash identifier:          4Z3QYRoQepNRYJSzWjdw4DfVhw7W+zj6uPiEbB7Nl3A=
Subject key identifier:   E9:B4:61:F5:B0:1A:B1:3D:4F:31:BC:57:C6:85:C7:D5:43:A2:AD:1D
Authority key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
Certificate issuer:       /CN=8e79cef458de50392e3c02b69182f34c60148d24
Certificate serial:       019F932422F3A610FD2D19A7043F30EFA656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
Manifest number:          0397
Signing time:             Fri 24 Jul 2026 08:00:46 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:46 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:46 +0000
Files and hashes:         1: _c6xx4G9gRqlWT599mmQOoWoW50.roa (hash: c/9VJ4HKTN9Q4dyySRrDW6GfcNhn9tZLqvs7ju71Tx8=)
                          2: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl (hash: IDqSDOPPeSBY1CLQESgxFuGw/4eGnKwtaw2Ho7bcppw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:22:f3:a6:10:fd:2d:19:a7:04:3f:30:ef:a6:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e79cef458de50392e3c02b69182f34c60148d24
        Validity
            Not Before: Jul 24 08:00:46 2026 GMT
            Not After : Jul 25 08:00:46 2026 GMT
        Subject: CN=e9b461f5b01ab13d4f31bc57c685c7d543a2ad1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:61:6f:44:2b:93:b6:83:aa:30:bf:9d:5c:8b:
                    72:81:61:64:94:52:27:95:64:ee:e1:e7:c9:f6:59:
                    21:61:4b:e4:e5:41:0b:8c:e9:94:d0:c9:67:fa:65:
                    3e:5f:04:05:3b:a2:3b:33:6b:a0:e4:ed:f6:42:39:
                    19:c3:a0:fc:d9:46:01:f0:09:44:6a:13:4e:24:0b:
                    5a:9a:4a:22:9b:5d:8d:0b:25:dd:48:65:af:10:4a:
                    c1:46:c0:5f:57:c2:11:d0:38:ad:25:49:35:87:32:
                    ce:7a:bd:e5:9b:98:69:60:89:d1:07:2a:f4:9f:c5:
                    2e:08:9d:f8:3a:88:86:6a:ab:dd:1d:fa:42:2e:85:
                    89:38:17:b8:44:4e:a8:bb:ff:18:46:4f:03:48:74:
                    50:06:3c:6d:d1:c8:5f:b1:0b:b1:25:d9:1b:ba:7f:
                    f9:b6:3c:3e:9d:3c:fb:f2:1f:7c:3b:ba:81:1b:7e:
                    5a:1f:f4:2f:b1:b0:88:a3:1b:e3:b5:ec:ca:44:cd:
                    51:57:ed:73:ef:fb:aa:35:10:00:5b:16:db:63:41:
                    90:05:67:86:9d:20:8d:f4:fe:88:e7:b3:24:f6:93:
                    12:86:c7:4f:84:a3:9e:fd:19:0c:df:32:b9:46:a8:
                    40:e5:d5:b3:3b:58:ef:1a:87:5f:0e:a7:29:51:02:
                    f8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B4:61:F5:B0:1A:B1:3D:4F:31:BC:57:C6:85:C7:D5:43:A2:AD:1D
            X509v3 Authority Key Identifier:
                keyid:8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:19:bb:87:df:69:d0:61:dc:0d:8f:a8:79:81:54:f8:39:72:
         3b:cb:89:e1:ba:7b:7e:92:3a:22:86:c5:91:1b:ff:4a:af:c2:
         30:5f:36:e6:cf:24:b0:28:97:8e:e2:24:97:7d:e8:f1:0c:8b:
         16:e4:c7:60:9a:4c:b3:1a:3a:40:e8:91:85:6f:0a:ee:b7:02:
         b1:23:ce:5b:c3:a1:04:42:82:37:c2:f5:f1:d5:28:2f:fa:b6:
         6d:30:63:83:22:51:fe:47:99:4c:c2:b4:7b:06:aa:81:91:66:
         3e:38:c3:50:d4:b7:00:95:be:22:62:3e:b8:9a:98:3c:2a:93:
         36:e4:c8:08:46:4f:09:f7:73:5f:b2:78:04:2b:75:84:85:af:
         05:0e:45:02:12:c0:12:4f:50:ee:9c:dd:c8:35:a3:a3:9d:24:
         21:f5:ea:7b:2a:ae:62:1a:ef:2a:62:df:4d:67:8f:0c:4d:ba:
         cd:57:d4:bc:d6:94:06:d8:44:58:6c:aa:0a:f5:88:f2:07:cd:
         40:48:34:db:c7:ec:fe:d8:3a:9a:30:32:f4:1e:95:e2:34:a4:
         77:1b:cb:ec:67:70:b7:46:3b:31:cd:35:75:98:c4:e1:ab:4e:
         54:0a:3b:3d:bf:a4:9d:69:c1:e1:7e:66:11:5d:eb:54:72:8c:
         12:4e:c3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:21:46 2026 by rpki-client