Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
File:                     JRIoadDqT5h6tR-5eRgA2EBamjw.mft (raw, json)
Hash identifier:          wvabE9yaWVi+CpHbuwAyhL5H87EgkXggkLbzNzw20Vs=
Subject key identifier:   1B:10:2E:8B:8F:27:A2:4B:E4:C3:31:7C:CF:88:77:CC:A5:CC:A2:46
Authority key identifier: 25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
Certificate issuer:       /CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Certificate serial:       019F8EA22E935C955B3066F51D6102B536B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
Manifest number:          0446
Signing time:             Thu 23 Jul 2026 11:00:21 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:21 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:21 +0000
Files and hashes:         1: HCsz3X8BWUwO7DEIBpvU8zpY4hw.asa (hash: PvA9+vVBsvp6nIyiqJmhyWBHz04WMnyIEhKZtgSJ6sw=)
                          2: JRIoadDqT5h6tR-5eRgA2EBamjw.crl (hash: +IEbKw4A28qYhH7+z/az4uUEkcqFMYJUUsAlFY5lfH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:2e:93:5c:95:5b:30:66:f5:1d:61:02:b5:36:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
        Validity
            Not Before: Jul 23 11:00:21 2026 GMT
            Not After : Jul 24 11:00:21 2026 GMT
        Subject: CN=1b102e8b8f27a24be4c3317ccf8877cca5cca246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9d:28:66:50:40:d7:3b:c0:9b:38:6f:88:4d:
                    da:1c:10:00:7c:94:5e:74:5d:99:74:52:1a:d4:a8:
                    47:a8:75:89:b7:af:6e:f8:c0:27:30:3a:cf:66:94:
                    18:7b:19:17:fd:5d:c4:0a:d2:8c:d9:aa:53:2b:f3:
                    44:be:9b:63:85:ce:eb:ea:46:f8:23:ab:11:ae:6b:
                    7e:32:0b:06:8a:84:cd:a5:2e:7a:52:bb:c2:9e:c1:
                    88:25:1f:07:b4:6a:03:ef:c6:82:c2:65:46:f1:78:
                    67:3b:8d:0f:13:2d:d6:39:32:ab:62:fb:0b:ee:dd:
                    f9:c9:28:4e:52:14:6d:37:0f:b9:0f:63:04:26:32:
                    81:13:f8:11:2c:31:4c:4b:0d:6d:96:b5:20:74:b6:
                    07:1e:52:4f:29:f7:1b:35:31:3a:6c:f9:7f:38:67:
                    58:cb:ed:e8:b5:b8:16:ae:1a:16:f9:93:87:ec:2f:
                    b1:3f:ba:5a:25:db:a9:74:70:2c:cb:e4:70:36:19:
                    52:7b:af:b4:61:70:f9:85:13:78:63:50:e6:07:97:
                    03:b7:69:c1:42:76:fb:85:6a:37:df:6e:3b:dc:89:
                    c4:fe:9f:86:84:20:73:61:e6:53:44:f9:66:fa:dc:
                    45:94:c9:8a:a7:d9:b7:d5:9d:a0:e2:11:57:ca:b4:
                    6f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:10:2E:8B:8F:27:A2:4B:E4:C3:31:7C:CF:88:77:CC:A5:CC:A2:46
            X509v3 Authority Key Identifier:
                keyid:25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ae:0f:a3:91:a7:5a:02:9e:ad:fb:0e:3a:16:e2:1b:fb:c5:
         e1:a8:e2:0e:bc:17:01:b6:37:fd:55:3b:70:8d:11:77:8e:63:
         84:52:11:8f:79:67:04:bb:52:46:eb:8f:e6:66:4b:90:3c:d8:
         49:cf:fc:2e:97:c9:dc:da:eb:0a:5f:71:3f:cf:37:c9:7c:36:
         9d:97:40:d5:8e:80:be:94:0f:b7:5a:47:63:4f:80:24:9b:de:
         98:86:a0:e9:26:cf:65:74:1e:45:69:77:69:2c:98:09:bf:fa:
         96:1d:b3:09:7c:0a:27:ba:af:92:58:ba:3c:49:5d:9d:81:9b:
         d9:f9:b7:79:af:1f:d7:9a:d4:a8:cc:f6:1b:d7:fe:da:14:f2:
         cf:e5:39:19:23:6d:d8:62:61:1d:31:16:bc:3d:d9:24:0e:b8:
         37:f3:ae:ff:5c:de:ac:ff:99:92:4b:26:1c:55:96:ee:d4:05:
         ca:df:4d:46:aa:15:17:17:73:c0:99:05:28:a0:12:c7:65:c8:
         11:03:c1:a3:98:2b:78:a0:a8:06:84:ab:83:ce:87:e6:49:35:
         f0:9a:aa:c3:a3:e3:f4:8f:ac:ae:b8:7d:df:88:d4:9b:f2:fd:
         35:2d:40:77:c5:fc:df:a3:9e:62:40:31:1f:4e:31:01:f2:5e:
         22:9a:83:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:44 2026 by rpki-client