Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
File:                     J_whhWzY4Denu4xjkqYZghOotPY.mft (raw, json)
Hash identifier:          q+PXwz3M+29aVelXMGo1ekJDjPdWg4GmGpbMFxLKsPs=
Subject key identifier:   11:32:CF:E0:7C:13:0C:C9:9F:C0:33:B7:89:18:DF:A3:8D:CF:A3:DD
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Certificate issuer:       /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial:       019F90C7C6FEF7C920D18224B75032927C83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
Manifest number:          10A7
Signing time:             Thu 23 Jul 2026 21:00:39 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:39 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:39 +0000
Files and hashes:         1: J_whhWzY4Denu4xjkqYZghOotPY.crl (hash: S7tt2BPZzIeaagQ+dWSLvCDdYl8usqXytVG4/M+DBI0=)
                          2: Zl9UixuUH0GLR4R_JPyHH_dGJ1Y.roa (hash: bKOmByPp72MyiwK2dxQMPNiiDG6ujdM2vWNSfqTcD8I=)
                          3: evUKjjQ-64urf3ID9QQeEJmSrho.roa (hash: jHjvWcJHTbQkaqv1cxn7W2VQ1dY8D8A2yCIoe6SeCXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:c6:fe:f7:c9:20:d1:82:24:b7:50:32:92:7c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
        Validity
            Not Before: Jul 23 21:00:39 2026 GMT
            Not After : Jul 24 21:00:39 2026 GMT
        Subject: CN=1132cfe07c130cc99fc033b78918dfa38dcfa3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:44:33:f0:1d:3c:62:db:4d:8a:61:47:6b:84:
                    87:bb:27:1d:5b:bc:0f:2e:e8:2d:cb:e7:ab:13:31:
                    0b:53:6f:9d:9e:0b:32:b1:82:a8:46:22:31:a9:e0:
                    22:4b:fc:fe:59:5a:88:e5:78:d8:94:f0:c4:96:f5:
                    35:0e:75:09:f4:98:ff:61:53:70:0e:c5:7b:19:2f:
                    e2:27:62:0c:20:6e:2e:97:b5:54:f9:d1:5e:bb:1f:
                    ce:5e:8c:a0:f5:ba:1b:44:64:99:dc:15:47:10:30:
                    20:c1:ae:b7:61:6c:45:a4:96:92:01:95:4f:44:e6:
                    ec:60:ff:11:ae:fc:6e:8b:f6:d0:c5:56:15:bf:8c:
                    90:6a:ae:90:1b:b2:b6:8c:d3:d9:67:ef:ba:60:9b:
                    a9:fc:12:da:52:d9:98:a6:b0:22:0f:64:c3:e7:b3:
                    0b:98:61:dd:06:81:52:4e:f5:48:36:d1:45:b3:de:
                    63:9c:be:98:86:68:65:58:66:5f:a8:16:de:2a:f9:
                    8a:7b:a3:27:4a:c4:1b:b3:7e:44:e4:50:b6:42:9b:
                    4b:53:cd:6c:42:f8:a0:c4:21:00:cb:7e:9f:bc:fa:
                    0b:76:27:27:3d:05:0e:2d:0d:ea:50:fc:4a:b8:43:
                    3a:15:55:88:86:10:b4:88:13:15:ca:98:cd:e6:ed:
                    bd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:32:CF:E0:7C:13:0C:C9:9F:C0:33:B7:89:18:DF:A3:8D:CF:A3:DD
            X509v3 Authority Key Identifier:
                keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:07:54:85:c1:88:16:b2:fb:3c:61:5f:6c:bd:b8:0f:a8:e5:
         ba:76:72:96:11:de:d8:17:3d:55:f9:61:cb:ac:f7:f9:87:b9:
         88:92:45:e6:17:29:c2:f7:31:14:7b:b1:25:27:8c:95:f1:3d:
         63:fe:12:34:d7:4c:26:7c:95:65:38:42:b9:8c:bc:9a:27:33:
         bb:fe:0e:4f:e2:e9:91:84:0e:73:e4:c3:73:29:0d:82:42:70:
         cc:e6:aa:8c:5d:ca:a1:d0:39:2e:cd:7b:51:e0:ae:2b:74:8c:
         ea:33:eb:a1:69:1d:41:58:04:42:b0:a5:6d:36:b6:62:d3:4f:
         eb:96:88:fb:3a:21:74:99:ce:0b:48:df:9a:97:e2:8d:ac:02:
         9a:5f:ff:05:8b:91:1b:6d:61:95:bd:30:c0:46:d8:ea:aa:c2:
         36:09:3b:9d:34:da:14:6d:73:51:88:21:4b:24:23:ce:4c:ff:
         e9:64:01:92:42:d2:7d:04:70:db:91:9c:06:b5:97:9a:55:4e:
         5c:26:ec:e6:9d:3c:b4:71:04:0b:59:e6:c1:71:c4:c5:f0:e2:
         8c:7a:df:3d:84:59:fd:98:5c:a9:68:4f:27:6b:b1:fb:90:7b:
         63:12:06:00:ce:dc:5b:8a:58:4f:29:5c:52:b9:36:6f:6b:ac:
         94:4f:15:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:57:13 2026 by rpki-client