Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
File:                     JpildU3unu9vIkViy4I5rIvbBbg.mft (raw, json)
Hash identifier:          znDm0Ys1xcaAQN3s6E1Jg3nMezKkeDV13ciEGKR5ivc=
Subject key identifier:   41:96:63:A1:8F:B0:24:12:AD:4A:3C:12:0F:77:02:E4:34:77:9C:AF
Authority key identifier: 26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
Certificate issuer:       /CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
Certificate serial:       019F9392561DC24D1A4F051980585877B51A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 10:01:08 +0000
Manifest this update:     Fri 24 Jul 2026 10:01:08 +0000
Manifest next update:     Sat 25 Jul 2026 10:01:08 +0000
Files and hashes:         1: 1KySW6Ro-K6j0ocElPKZRtuE5Ao.roa (hash: dWyTpT0UPgzBjyIAGYHP0a0Cm+BwtjLbW4C9xN5de58=)
                          2: JpildU3unu9vIkViy4I5rIvbBbg.crl (hash: 52qievS2zQtTA6pIwaiEoRN623iU8HTcrNrf6tPQ/dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:56:1d:c2:4d:1a:4f:05:19:80:58:58:77:b5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
        Validity
            Not Before: Jul 24 10:01:08 2026 GMT
            Not After : Jul 25 10:01:08 2026 GMT
        Subject: CN=419663a18fb02412ad4a3c120f7702e434779caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e9:0f:d1:2f:6d:d3:66:e7:d1:35:0a:06:df:
                    f7:7e:aa:b4:41:9a:ff:f9:5f:f6:19:19:4b:65:b0:
                    52:de:aa:67:a6:eb:f7:0d:60:e0:8f:bb:36:c9:0f:
                    25:f1:5c:37:35:79:42:54:80:09:99:1b:7f:be:15:
                    5a:94:4c:32:45:f2:ab:2f:07:14:7b:33:00:d5:e1:
                    e7:51:6c:fc:bb:29:32:99:bd:e8:1a:b6:8c:e2:e4:
                    58:4c:a8:00:75:d0:28:8c:43:e1:2a:61:9f:dd:0a:
                    0d:f4:f9:83:4f:d3:dd:11:80:72:9b:59:93:7c:90:
                    68:b8:6c:36:74:4f:70:33:ba:22:9f:7f:50:c3:6a:
                    79:11:02:a9:7a:08:7d:7a:54:15:bf:82:86:60:97:
                    36:f3:fe:66:99:f1:b2:12:01:78:1e:54:94:24:4f:
                    e1:09:9d:80:11:60:db:88:72:99:62:a6:e4:5c:65:
                    bf:db:0e:b3:89:32:ef:fc:69:d3:64:b4:30:39:1b:
                    74:49:d5:a8:65:39:fc:63:5d:7a:4f:b5:1b:84:f1:
                    c8:39:0d:dc:60:8d:54:f5:5e:19:61:12:d3:37:5f:
                    67:d9:0c:62:d2:cb:61:a1:63:26:80:c6:86:fb:72:
                    f3:8f:0b:98:98:9f:98:11:cc:27:e9:04:d4:44:f2:
                    ba:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:96:63:A1:8F:B0:24:12:AD:4A:3C:12:0F:77:02:E4:34:77:9C:AF
            X509v3 Authority Key Identifier:
                keyid:26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:55:54:ab:59:0c:2b:db:90:82:bb:a9:75:43:bf:69:b9:e7:
         59:ef:40:fe:c4:03:04:05:a9:3b:88:69:0f:36:ca:9e:b1:3b:
         7e:70:a3:40:70:48:d9:41:2d:3b:84:0d:61:9a:cb:18:b3:48:
         99:bd:ac:a9:ea:1b:11:89:81:da:a0:20:6b:ad:77:88:1a:cf:
         50:b8:21:b4:c8:04:44:22:73:b1:65:12:9a:24:3e:e7:80:7e:
         db:34:b7:9a:89:74:6f:46:ae:e7:9f:fe:d1:d1:fa:ee:d3:58:
         e1:77:97:fb:a0:2e:fe:f7:eb:77:c2:7a:72:08:86:36:0e:88:
         d4:fc:e9:9e:77:af:fb:82:a3:e6:70:6e:70:88:84:56:c9:6c:
         96:e3:b2:c7:92:c1:8d:df:83:b2:00:a0:10:e5:04:99:e6:ce:
         14:28:bd:25:d3:fa:3a:5b:d7:a0:1a:a0:8f:1e:b7:28:16:ee:
         44:3a:10:78:b4:be:18:76:26:16:9f:0d:6e:ba:78:7c:03:a9:
         a4:43:d4:9c:98:a7:61:85:fe:6d:f2:53:f8:52:62:d3:c8:52:
         70:43:c9:ed:16:49:35:c2:6f:c6:35:b9:39:bf:41:4c:24:b3:
         e5:14:b1:d1:70:2e:23:72:8c:2a:c4:a9:14:28:35:b0:9c:e5:
         5e:1f:b4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:56 2026 by rpki-client