Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
File:                     jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json)
Hash identifier:          O/jQXNX7mNDVHdV3aq+bHMBpeD9QbKuDJmpCSD+k7Js=
Subject key identifier:   28:06:C3:D4:5A:7C:02:01:31:08:99:9F:88:E0:23:82:17:77:E4:7C
Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
Certificate issuer:       /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Certificate serial:       019F8F47704173F23C8DF9953DF7D326D15A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
Manifest number:          19CB
Signing time:             Thu 23 Jul 2026 14:00:51 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:51 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:51 +0000
Files and hashes:         1: AR0snb2WiBVjty2iEPK8q39KPZo.roa (hash: LRggRbjFzoUTOK1TTVfP+3KeKjujfqsLku1ZGYI58wk=)
                          2: F13pIjKslpUrOUGbjMV17CmkLWk.roa (hash: szqGRHA6NM3mWFGyDMMW+gpH0BvtN2cqf2OUgq/zN28=)
                          3: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: Ztp3ki5KKzK94k/PelnBWVmVuPzuST1KDGZBaxy48rI=)
                          4: olmoqfzN7VFo-bxr_cK8ARodjJ4.asa (hash: DUkoDNJ/61GCLycft48nLmtAR70B8+qDz8ujkdLUM/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:70:41:73:f2:3c:8d:f9:95:3d:f7:d3:26:d1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
        Validity
            Not Before: Jul 23 14:00:51 2026 GMT
            Not After : Jul 24 14:00:51 2026 GMT
        Subject: CN=2806c3d45a7c02013108999f88e023821777e47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8e:6a:56:b0:c6:6a:48:4a:7e:3f:29:19:e8:
                    f9:a7:58:af:7d:48:ac:d0:64:e1:19:35:1c:ec:51:
                    34:f5:83:12:33:63:70:df:6c:79:c1:54:ca:3e:14:
                    51:03:28:f5:a7:40:53:21:61:47:6a:f3:0c:11:89:
                    7b:0a:39:df:82:fc:95:ed:1f:88:fd:ee:bf:4a:c2:
                    bc:52:43:93:ef:08:68:35:67:69:51:77:59:74:e4:
                    a9:00:e9:85:e6:55:9a:54:ee:c9:41:72:59:7f:b7:
                    61:f8:40:02:91:18:92:80:c2:9f:e1:69:8c:f7:c7:
                    31:d1:18:b4:ea:ac:1a:59:d5:88:62:43:d2:ac:b8:
                    66:86:fd:51:17:c8:ae:9b:a0:e1:5e:26:e6:47:d9:
                    d1:dd:c9:54:6b:7a:06:d4:70:8a:4b:a7:81:76:e3:
                    3c:1c:da:5d:e4:09:58:3c:f8:8b:74:fb:4f:f6:50:
                    2d:b1:92:24:de:70:1c:37:08:14:49:b8:f1:18:33:
                    69:45:1d:b4:7a:cb:c0:74:45:7a:d4:57:89:e4:ad:
                    97:1a:3f:64:1d:be:33:4a:6c:7a:0c:c4:5f:0b:7c:
                    71:1b:54:29:3a:36:ee:84:39:fb:96:5f:1a:21:63:
                    8f:0c:5f:7a:47:d9:68:57:7e:4e:be:78:23:57:89:
                    24:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:06:C3:D4:5A:7C:02:01:31:08:99:9F:88:E0:23:82:17:77:E4:7C
            X509v3 Authority Key Identifier:
                keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:4d:33:e2:5c:1d:9f:47:f0:c3:0a:f9:ae:d2:f1:bd:f9:47:
         67:1d:f2:14:6c:5e:1f:05:05:d2:44:4e:62:e2:3c:65:33:a0:
         76:c0:b4:c0:d0:d1:cd:8c:de:d4:35:9c:88:38:ac:1b:74:fb:
         69:2c:6c:da:2f:d0:c5:3d:fb:19:0c:23:a7:3f:61:ef:68:c9:
         eb:58:13:19:c7:b8:f5:2b:a0:56:5d:a1:0e:81:23:f0:f7:af:
         27:1b:35:1a:d1:28:0e:40:98:50:6e:23:09:f8:cd:63:ec:60:
         2b:29:97:0e:86:63:15:7d:1b:01:ee:4b:4b:a6:87:3d:96:9a:
         f0:ed:d3:31:ab:58:0f:01:ee:99:28:7f:2a:a4:c9:dd:31:54:
         ce:7b:ea:11:8e:71:38:04:23:97:72:57:65:9a:64:d7:81:84:
         9f:3f:4d:6a:ee:87:6f:d9:66:f1:8d:f1:bd:4d:eb:af:af:c3:
         b0:96:c1:e6:9a:63:36:ed:40:7d:70:3d:be:42:09:d3:f6:02:
         cb:c4:53:5d:5b:be:70:fa:cb:2f:15:d3:84:04:be:bb:54:de:
         76:e4:24:3f:08:c5:c7:c2:3e:86:1a:22:90:6d:c1:96:18:4e:
         7b:33:fa:dd:86:8a:f3:45:49:2b:e0:f5:67:11:66:49:3d:94:
         bc:f0:38:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:34 2026 by rpki-client