Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
File:                     Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json)
Hash identifier:          Zo00+TwTHcChPW7VxPrRUydI9TRJI14DPr2eFEJJKxw=
Subject key identifier:   27:3A:69:0E:CB:F1:53:EE:69:E9:89:A6:61:D6:57:35:DB:3B:60:71
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Certificate issuer:       /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial:       019F93924E58BFD403C56B080B1675298498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 10:01:06 +0000
Manifest this update:     Fri 24 Jul 2026 10:01:06 +0000
Manifest next update:     Sat 25 Jul 2026 10:01:06 +0000
Files and hashes:         1: 6MvEEf7_I3zO3ShtqYd8LKtfRq8.roa (hash: lIgvAYq1Ass4AfPtbYog1dJL/68LEdNig8uh3pGw9vM=)
                          2: EKgYi5uwmdQ3SbZogfsfQT2cobM.roa (hash: Y3gYmZwUht9JEwQTGH6EyDKQhtm/rC13n1867BeBzvQ=)
                          3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: 0hBXCqkruoi8XduoHHGw4PqPNDzM6PMQ83cQBa8h/uE=)
                          4: Jqk7oDaY0GyweY_m1dLexacLzPE.roa (hash: prybAkap/ary1cwam/oMqauOzBkuf1YCV2giq0/4yoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:4e:58:bf:d4:03:c5:6b:08:0b:16:75:29:84:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
        Validity
            Not Before: Jul 24 10:01:06 2026 GMT
            Not After : Jul 25 10:01:06 2026 GMT
        Subject: CN=273a690ecbf153ee69e989a661d65735db3b6071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b4:b7:a1:13:d7:8a:28:8a:a4:d7:32:f5:16:
                    98:9a:39:37:e4:18:58:24:f4:a8:34:a3:08:03:88:
                    0d:48:e7:10:94:eb:8a:23:e6:3a:92:ff:0c:75:e5:
                    b8:5d:e8:38:43:f9:89:22:61:73:1a:dd:00:1c:e3:
                    29:a8:88:c5:5f:49:6f:9f:23:fa:19:a0:8c:3f:92:
                    aa:d5:64:d8:ae:39:a0:91:9e:10:ca:bd:01:65:de:
                    62:35:dc:be:b5:c7:3c:e9:75:40:cc:f3:17:69:79:
                    bd:9c:64:6b:09:90:e5:60:e5:e4:c0:2a:fa:d3:78:
                    d2:a2:e3:e3:e9:60:6e:2e:89:fd:5c:6e:ab:76:82:
                    7d:13:de:a5:48:05:0e:f5:23:b9:9c:be:8d:7f:1a:
                    7c:a4:a6:31:2b:b8:8d:48:96:7f:eb:af:21:8e:63:
                    6b:51:87:65:c5:6e:f5:7d:61:3d:57:ad:03:66:fb:
                    89:3d:e7:3c:e3:40:75:0e:20:30:cc:76:08:44:5e:
                    c3:1b:1a:8e:e5:97:9e:eb:fb:ad:0e:13:0b:16:c1:
                    e2:21:5e:fb:59:52:2a:84:0d:7a:1a:f9:f8:43:39:
                    a1:eb:5e:37:a5:51:7b:42:e9:a5:a4:7d:60:67:d1:
                    40:0b:56:0b:72:b4:c6:85:f4:35:d9:2f:01:fc:3e:
                    13:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3A:69:0E:CB:F1:53:EE:69:E9:89:A6:61:D6:57:35:DB:3B:60:71
            X509v3 Authority Key Identifier:
                keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:20:c6:23:08:cc:b4:53:92:6e:e3:5a:9e:1d:13:81:fa:1b:
         07:ec:dd:cd:00:6d:58:8e:90:27:20:c4:c6:d8:57:96:a7:2c:
         0e:55:7f:35:3e:17:43:86:bf:36:da:ed:e8:df:37:34:62:4c:
         f5:54:89:41:7f:ba:d6:81:6b:3e:6a:3f:e5:bf:a1:c0:43:14:
         19:e2:ee:e5:81:e0:7a:c6:8b:c8:bc:bb:83:6a:3c:eb:c4:d2:
         29:66:e9:fc:f2:2a:d3:c6:24:ad:9d:17:c3:a8:f1:d3:f1:71:
         d7:8e:37:79:6e:96:37:25:5c:05:f6:29:da:01:49:b0:7e:15:
         9a:61:c5:5d:49:74:cd:5d:23:ff:ea:a3:a6:d1:73:92:57:79:
         a2:89:ff:33:8a:db:81:59:41:58:52:98:31:81:87:5f:ba:d6:
         88:59:06:29:ff:56:0b:8c:80:55:95:c7:60:6a:38:c0:14:e4:
         02:96:2f:a6:8b:92:dd:18:ac:ec:e0:18:b9:50:e8:d8:d1:57:
         2d:62:da:c0:c9:90:3b:7e:21:1d:6b:10:d2:3b:ce:89:59:a1:
         1c:54:a4:cc:db:94:70:c2:21:c0:33:c6:d1:03:57:e7:12:7e:
         eb:18:b7:a0:fc:24:cf:20:5b:ad:76:75:b3:66:2f:c0:b0:9f:
         67:f7:70:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:15 2026 by rpki-client