Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
File:                     rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json)
Hash identifier:          W2mzUetwpFDT5iIzIpFnUj7AsqzkNk0YjqKW8fztsPQ=
Subject key identifier:   D9:BD:8D:E1:38:13:BA:E9:FA:7F:2F:82:D7:0E:16:12:7D:9D:55:EE
Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
Certificate issuer:       /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Certificate serial:       019F9248269D227E9FF433960AEB1E62BD12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
Manifest number:          0C90
Signing time:             Fri 24 Jul 2026 04:00:29 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:29 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:29 +0000
Files and hashes:         1: cFj2gabjb2A6OS2M4OWiTy7sjlY.roa (hash: c2wHgi8z7Wquh1Yiowi4MCoX8zsu06SPgPbyIoYnmLY=)
                          2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: 5+tXsJE50a7s3dve+WpiSRwU7iE0VI9cQMnUmdpV86w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:26:9d:22:7e:9f:f4:33:96:0a:eb:1e:62:bd:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
        Validity
            Not Before: Jul 24 04:00:29 2026 GMT
            Not After : Jul 25 04:00:29 2026 GMT
        Subject: CN=d9bd8de13813bae9fa7f2f82d70e16127d9d55ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2f:4f:4d:c8:e6:ff:e8:a2:f0:e6:8b:17:a1:
                    14:c2:7d:8d:02:91:d3:a9:12:5c:15:36:7e:53:b2:
                    e8:7d:2e:4e:32:d1:d6:20:f1:51:1a:aa:5f:57:cf:
                    1b:9e:af:38:bc:05:85:44:b3:ae:4b:f6:d9:e1:35:
                    18:59:be:d3:0a:e2:b7:f4:13:a5:8d:8d:03:2d:d6:
                    5f:d9:4c:06:cf:79:85:8f:6e:27:43:a7:4b:13:58:
                    1f:2e:d1:34:ae:81:75:97:1f:d2:95:9a:46:1d:6c:
                    14:88:8a:c2:d9:dd:a7:59:ff:81:04:fb:b6:69:87:
                    6a:c2:bf:99:34:33:3a:f2:79:9a:a0:a7:80:fa:a0:
                    ab:17:ef:fb:7f:77:03:dd:b9:e9:6d:5d:fc:07:f5:
                    53:30:d3:b4:70:50:a8:aa:14:4b:d1:5a:42:c0:dd:
                    22:fc:dd:20:72:a0:0c:d6:e9:9e:77:48:af:8b:e9:
                    79:5a:f0:f8:14:ea:f1:0a:d8:87:4e:06:d8:a4:ad:
                    ea:61:71:1c:9a:44:f9:71:10:86:c6:41:31:ce:69:
                    5b:3b:26:46:53:0a:65:0a:8f:48:c1:7f:0c:f5:6c:
                    3f:95:b9:72:bf:d4:b5:03:15:73:61:3a:b9:46:97:
                    de:a9:e2:96:45:a9:70:55:5b:b1:df:50:6e:97:26:
                    56:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BD:8D:E1:38:13:BA:E9:FA:7F:2F:82:D7:0E:16:12:7D:9D:55:EE
            X509v3 Authority Key Identifier:
                keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2a:73:bf:91:f9:66:b7:a2:df:c8:e8:75:72:84:62:98:ca:
         84:06:c6:2c:ae:ce:5a:27:1d:cf:ad:a3:ab:2a:49:05:b8:3f:
         41:5c:42:d4:d7:b9:1d:14:42:75:b6:4e:0d:17:3a:a5:97:b5:
         0c:c9:eb:50:18:f0:04:b0:52:f3:02:b8:49:45:12:10:44:a4:
         d1:e8:f3:c8:5d:f0:19:ef:a6:57:f2:25:4d:57:f5:dd:98:0d:
         24:31:f0:99:77:f3:c1:3b:7b:16:77:4b:35:f8:f9:81:22:cc:
         1b:de:bc:fd:59:9d:7d:df:af:8c:37:34:ee:ee:0d:86:c8:d6:
         ff:49:81:ea:ef:24:7e:ee:78:bc:de:23:95:2d:27:90:36:05:
         cc:2d:ab:16:52:83:0e:48:8f:eb:04:e1:88:c8:4c:7f:57:d4:
         54:d3:7c:38:c7:f6:34:29:a7:3b:e8:b9:41:32:b3:af:d7:13:
         3b:d7:15:0f:1f:94:e5:ab:7f:bd:99:f7:a9:ae:00:dd:a6:a5:
         e7:0a:ee:84:33:63:8a:71:53:55:25:5d:7f:92:5c:51:c8:6a:
         d0:29:2d:4a:75:da:ce:82:ec:30:55:a4:b5:88:98:d4:19:79:
         de:8e:f8:1f:b0:a3:7f:f8:a5:d0:7d:d6:3f:f9:a0:ea:80:57:
         91:8a:b4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:28 2026 by rpki-client