Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
File:                     jcayOVFjzkewNvrgKnH5SIBL9V8.mft (raw, json)
Hash identifier:          zf6EDu9lHDf5mBVmT30GJm4d9ghOE/7t1uTJX/PnqEw=
Subject key identifier:   41:7D:71:44:80:E0:56:28:B5:A1:A3:B9:FC:DE:71:EA:63:6E:06:30
Authority key identifier: 8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F
Certificate issuer:       /CN=8dc6b2395163ce47b036fae02a71f948804bf55f
Certificate serial:       019F927EEF99C19D9B0D1D2317460F258B0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
Manifest number:          0132
Signing time:             Fri 24 Jul 2026 05:00:20 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:20 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:20 +0000
Files and hashes:         1: UqSLybQPqtyf12w058GGJrCrwlE.roa (hash: ay496TJzckN/WV79yGM4pv+K/GRv47GhhBgHEduwC9o=)
                          2: jcayOVFjzkewNvrgKnH5SIBL9V8.crl (hash: z6/MzzRofJDyN+QUttJGaC3p5j7tbEn751r7TEw3J74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7e:ef:99:c1:9d:9b:0d:1d:23:17:46:0f:25:8b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc6b2395163ce47b036fae02a71f948804bf55f
        Validity
            Not Before: Jul 24 05:00:20 2026 GMT
            Not After : Jul 25 05:00:20 2026 GMT
        Subject: CN=417d714480e05628b5a1a3b9fcde71ea636e0630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7c:b7:5f:62:21:ec:84:55:8f:6f:96:42:9d:
                    e4:c6:13:5d:2e:da:8a:58:0a:99:01:7b:f8:3c:6b:
                    9b:9c:5e:a8:b4:99:29:ea:cb:fb:56:73:60:cf:66:
                    5d:f0:fb:bb:8c:ed:1c:b4:57:18:e1:d5:f4:20:ef:
                    b1:53:b4:5b:54:b1:91:d2:19:cb:c7:2a:51:21:a0:
                    ff:30:04:56:16:4f:c0:8f:70:5d:a8:2b:a3:9a:ba:
                    e2:9b:0d:13:6d:5a:cf:7c:12:60:f0:29:b0:b7:b2:
                    72:55:d6:82:e8:01:44:dc:cb:ea:c4:78:82:93:da:
                    12:fa:cf:de:2b:e8:08:f9:78:be:51:ed:25:d7:18:
                    02:e8:08:dc:91:23:83:ea:92:c5:86:93:30:84:5d:
                    cc:8c:ca:f9:06:d8:56:84:cd:06:ca:4e:f5:ae:5d:
                    1a:e2:e0:3b:32:5e:a5:0b:f2:c3:a7:ae:ef:64:8a:
                    d6:a8:8e:02:48:e3:f8:b0:47:c6:a8:31:fe:b8:d0:
                    0f:72:8f:69:dc:39:79:b8:f6:08:81:1c:b4:70:ae:
                    18:33:ba:3e:14:63:3f:80:88:0d:29:e8:ce:93:f6:
                    2f:2e:a8:01:93:de:b9:52:0b:4c:35:9b:fa:f2:c1:
                    cf:80:16:55:4c:20:24:40:87:a4:e3:01:7e:cb:51:
                    33:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7D:71:44:80:E0:56:28:B5:A1:A3:B9:FC:DE:71:EA:63:6E:06:30
            X509v3 Authority Key Identifier:
                keyid:8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:cb:73:1e:85:7a:ff:06:5d:e0:62:44:2d:be:98:c0:80:00:
         62:4a:ba:dc:12:18:81:ea:2c:9f:9f:f4:0f:7c:03:7b:b5:bd:
         1c:fa:35:4d:ae:70:62:b3:1f:ba:b0:c2:17:17:7c:d8:20:00:
         22:1a:da:46:2e:1b:37:46:f5:a2:e4:f3:df:96:67:09:70:5f:
         b6:bc:c7:1a:1b:07:ef:e0:4b:21:7d:72:67:d5:18:50:37:95:
         10:9d:2f:9b:58:0d:df:e5:00:8b:28:4e:72:ab:46:e1:7f:77:
         65:28:88:80:3a:63:3d:89:2b:8f:de:7a:94:d9:49:e7:4e:d4:
         f5:fe:ca:90:fb:ea:e3:f0:0d:f2:90:ff:5c:1f:3f:06:c5:bf:
         73:20:b5:00:71:22:08:c8:33:f4:90:a9:c0:9e:f9:88:11:11:
         65:8f:32:4c:7c:5c:40:36:66:78:44:19:b6:f8:72:9e:71:5c:
         ec:8e:59:c5:81:ca:0d:72:b4:41:83:f3:4c:02:49:21:9c:83:
         38:20:c5:08:9d:0a:b6:0c:9d:b6:2b:88:51:e2:6e:47:8b:9f:
         95:cb:5d:17:45:7b:f6:77:2c:04:34:f4:fc:8c:ac:98:71:b5:
         14:ec:bc:01:b9:b5:ff:a3:d5:18:df:1a:b4:50:ad:ff:eb:7c:
         14:ff:19:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sfu+ZwZ2bDR0jF0YPJYsPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzZiMjM5NTE2M2NlNDdiMDM2ZmFlMDJhNzFmOTQ4ODA0
YmY1NWYwHhcNMjYwNzI0MDUwMDIwWhcNMjYwNzI1MDUwMDIwWjAzMTEwLwYDVQQD
Eyg0MTdkNzE0NDgwZTA1NjI4YjVhMWEzYjlmY2RlNzFlYTYzNmUwNjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ny3X2Ih7IRVj2+WQp3kxhNdLtqK
WAqZAXv4PGubnF6otJkp6sv7VnNgz2Zd8Pu7jO0ctFcY4dX0IO+xU7RbVLGR0hnL
xypRIaD/MARWFk/Aj3BdqCujmrrimw0TbVrPfBJg8Cmwt7JyVdaC6AFE3MvqxHiC
k9oS+s/eK+gI+Xi+Ue0l1xgC6AjckSOD6pLFhpMwhF3MjMr5BthWhM0Gyk71rl0a
4uA7Ml6lC/LDp67vZIrWqI4CSOP4sEfGqDH+uNAPco9p3Dl5uPYIgRy0cK4YM7o+
FGM/gIgNKejOk/YvLqgBk965UgtMNZv68sHPgBZVTCAkQIek4wF+y1EzzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEF9cUSA4FYotaGjufzecepjbgYwMB8GA1UdIwQY
MBaAFI3GsjlRY85HsDb64Cpx+UiAS/VfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNheU9WRmp6a2V3TnZyZ0tuSDVTSUJMOVY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YTRiZDItZmQwYi00ZjJlLWFmZGIt
OWY4ZjgzZjgyMjI4LzEvamNheU9WRmp6a2V3TnZyZ0tuSDVTSUJMOVY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YTRiZDItZmQwYi00ZjJlLWFmZGItOWY4ZjgzZjgyMjI4
LzEvamNheU9WRmp6a2V3TnZyZ0tuSDVTSUJMOVY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALstzHoV6
/wZd4GJELb6YwIAAYkq63BIYgeosn5/0D3wDe7W9HPo1Ta5wYrMfurDCFxd82CAA
IhraRi4bN0b1ouTz35ZnCXBftrzHGhsH7+BLIX1yZ9UYUDeVEJ0vm1gN3+UAiyhO
cqtG4X93ZSiIgDpjPYkrj956lNlJ507U9f7KkPvq4/AN8pD/XB8/BsW/cyC1AHEi
CMgz9JCpwJ75iBERZY8yTHxcQDZmeEQZtvhynnFc7I5ZxYHKDXK0QYPzTAJJIZyD
OCDFCJ0KtgydtiuIUeJuR4uflctdF0V79ncsBDT0/IysmHG1FOy8Abm1/6PVGN8a
tFCt/+t8FP8ZRg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:02 2026 by rpki-client