Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
File:                     jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json)
Hash identifier:          5LPCXCeLU4z/vvYFebVTLUhCUnU+hN5PNnotunLS4Nc=
Subject key identifier:   D3:70:A4:73:9D:25:F8:E2:90:95:E7:65:F7:34:DE:EA:D6:6D:80:3B
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Certificate issuer:       /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial:       019F927EE2832D6B508B098A6028EBCEBACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
Manifest number:          1969
Signing time:             Fri 24 Jul 2026 05:00:16 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:16 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:16 +0000
Files and hashes:         1: 2rVgJyxoTboo6DUxsVd0VYXicAU.roa (hash: X52WnSx4UXGK7QvOms2/DV0R18ZO7IPkzPCPa9/Vpo8=)
                          2: ABhJOuq81aAMPa4_YYIO3v-t4oU.roa (hash: 0eeFSSqt4KgbYUOgEizxWBOCbjrR9YB3YtAIVlPFnN4=)
                          3: IPWNhyQxn8-D80dsDEI3Muy7j4w.roa (hash: JR2kZnfGEReYvLarJyG91LQRoVZfPpAoA2dBMj0ig2w=)
                          4: MJk2hRWFPXbWPid66y-yooVzeJI.roa (hash: hXdMru/lhTHGd2pc4sxdOlRtEDGUTqlGbfj85klFeUI=)
                          5: Mcn8ffph0vFbf5y77sp8qX9cvuQ.roa (hash: oh6B2oDiINNmRv7LyEyRUP7+GJCatnxM+IyU6VV9yRs=)
                          6: Oi-RJ2dhND8R3bCPKlX2wVza8B4.roa (hash: AY1jUsJQoUBtPYQaCHvczNv8Mdfj3rI4udwi0diUU84=)
                          7: TXWio7T0yQ8fPQNndu5iMXKIPyk.roa (hash: Ptazack76ll8xJWikp2M96Ej4NUgmKdtpGkA8A7sIE0=)
                          8: __KT70ir2b12tsfvWsQwOzZ4SWs.roa (hash: U40qvVXwLqE+3d+p8VD5hkkPBVtM5TzS/GB+oxmksS0=)
                          9: ceKjGHCvCXf_MEK8NMfyXBnLoVU.roa (hash: hhPEmrABIH3Expe/KF3PZ8pAmJCxcVnuEeGLXskO2EU=)
                          10: dNyetmWu_99kmHhkiZvcLr-cuzU.roa (hash: forzVhrHGmXFVsQJmgLEUSqJW9c/HnLATZaoS4TWk3M=)
                          11: gnoYrT4knURKrt5KKBfShHVozwM.roa (hash: OjJdSpf+iXwyfGjxwCj90eq75k08MDbax/f+tQriWTM=)
                          12: gxcl9XCHDE4fGimi4jiKM9IDg8o.roa (hash: DzMBaQYtlFhqXC65m2URCwbC9IBE5rQY6qBFudLZErg=)
                          13: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: CyqxHfAyN/zydjn+0kl1GQDAJktnDjcRk+UqzlzBm6c=)
                          14: mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa (hash: 3ZvEE02yM0Yj5XqmRnhIug23pmfqiLpaNpSz+FFkWwI=)
                          15: r8_-tV7Ps-g2u70jfHclQnvoEf4.roa (hash: aq49nLbAL3NpREIkaDZ5YZko/p5YLSFu8OdWv3BLfCU=)
                          16: vDEzYqBkCfgUY7uwB1YZdOKY4lA.roa (hash: FWKvLV4V8Zp4mvo/6tBcMGGo3HEXFD5ePSPM/5NPrKo=)
                          17: yo2ggwAD85SNNQPIQb6yRaxOrWc.roa (hash: WrPp+dfsMZ+WFpULoYs3ZQMI2AEc3f6rXkU0dwgG658=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7e:e2:83:2d:6b:50:8b:09:8a:60:28:eb:ce:ba:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
        Validity
            Not Before: Jul 24 05:00:16 2026 GMT
            Not After : Jul 25 05:00:16 2026 GMT
        Subject: CN=d370a4739d25f8e29095e765f734deead66d803b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:af:73:05:9b:28:d5:16:f1:82:c0:c1:ff:a8:
                    c9:27:63:33:e1:a5:fc:9a:18:cd:58:cf:d8:5c:a3:
                    e2:02:17:14:da:03:05:1e:0f:bf:2d:5a:7e:18:61:
                    77:77:95:82:43:f8:c2:5f:96:c4:14:1d:19:0d:5a:
                    9c:70:f3:13:f4:30:06:88:73:48:a5:1c:c0:bb:cb:
                    82:6a:c3:2e:09:72:c9:61:4e:8b:86:8a:06:8a:4d:
                    4d:90:66:29:ec:51:b0:56:5a:8d:9a:27:bf:9e:cc:
                    ba:66:86:5b:bc:c3:0b:ae:11:87:6f:61:ea:81:7c:
                    6c:33:83:45:52:f2:12:aa:10:29:7e:de:7e:a5:61:
                    9c:ed:de:f6:87:d1:50:0d:f4:a7:a7:cd:47:95:04:
                    31:fe:d8:a6:50:77:74:13:42:e1:57:b5:a4:21:a6:
                    34:58:6b:94:62:d2:d4:03:40:3d:0d:16:5e:00:40:
                    8b:b7:10:6c:27:f1:8f:a8:c8:aa:c0:45:04:83:b0:
                    d3:4c:0a:20:e5:5f:b7:a7:89:c7:16:0d:86:8c:83:
                    70:af:b8:08:e9:6c:93:75:c8:23:5c:47:94:80:2c:
                    75:22:4a:4b:14:f9:39:9f:e5:8b:da:72:61:bf:50:
                    02:da:15:61:93:96:d1:2d:76:37:27:79:a4:93:c1:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:70:A4:73:9D:25:F8:E2:90:95:E7:65:F7:34:DE:EA:D6:6D:80:3B
            X509v3 Authority Key Identifier:
                keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:35:66:56:c7:bd:e1:43:e8:9a:b2:f5:9c:5a:65:45:99:8e:
         6e:4a:54:68:81:e6:10:3a:40:84:1b:03:85:61:51:d3:98:7e:
         66:ad:75:46:9c:5d:27:63:28:f9:bb:a5:7c:8c:97:eb:dc:91:
         d6:1b:39:fe:4e:b9:d1:24:9f:de:46:9f:1e:da:e6:86:b1:ff:
         42:67:86:36:3f:59:20:15:42:ea:da:a3:9b:34:76:88:04:6b:
         ab:95:3c:2d:9d:a7:a8:4f:5e:32:e5:cc:12:93:1a:3d:3f:81:
         88:99:68:fb:b1:62:6e:75:d2:8e:b1:ce:e6:7e:6b:18:df:17:
         3d:10:d3:cb:f7:0b:5f:cf:b6:95:ef:ea:94:87:a9:03:d4:ee:
         82:fc:57:ee:45:5b:24:4c:b2:18:96:6a:e2:c9:d3:a3:2c:b9:
         2e:11:8c:95:f9:b6:d6:94:1e:e7:f8:b0:1f:f2:fe:58:14:ef:
         a2:0f:0f:c7:17:65:08:7c:84:d9:cc:85:42:cc:8f:0f:be:81:
         4d:6d:35:52:d2:5d:42:66:84:d2:6e:9d:a0:3d:86:ed:a2:ff:
         48:ec:d5:3d:f9:b7:cf:46:e2:82:9d:a8:22:5f:12:0d:aa:48:
         e6:63:83:77:05:3f:8a:5d:43:63:d9:fa:b4:a0:a1:10:ee:d8:
         a9:f9:b2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:46:30 2026 by rpki-client