Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
File:                     jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft (raw, json)
Hash identifier:          14bqihJBznMALV09B10+5ZflI1hwnhzplDEluxMszQU=
Subject key identifier:   B9:DE:18:7D:61:BC:CC:E8:B6:E8:DB:85:7E:A5:AB:3B:DB:3B:D2:80
Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Certificate issuer:       /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Certificate serial:       019F90C7A1633F7AB67BC107272BB8F895E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
Manifest number:          15C8
Signing time:             Thu 23 Jul 2026 21:00:29 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:29 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:29 +0000
Files and hashes:         1: DDNpOrAqAOY0hs2uDPL3iCWLdnM.roa (hash: 8faJdkXXJZqTecw2oUQhwrCEcBbQjYDmWPFG/2WQ35U=)
                          2: YTLyjD8Zm08JN9ilWwpHNjSNOgM.roa (hash: ctWafbXvuy+Ew0x5ejjfVIYon0eWDnM21tPyQNTYZdQ=)
                          3: jhwcBBc8oOvXs_IDaLwdciLIw5g.roa (hash: 2wOw67KJ6XBImFQRXWSqni2LckUYvmgNYdwa7nlm6bU=)
                          4: jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl (hash: TdZsPAGXQZ8CRiJ2fQno7WGMZlBrCBLiXiYi5dhgr+E=)
                          5: oVTQSnnZbgxF4uVxhrTKvTjBHlc.roa (hash: EHUZVTErWURFxtqmqMqxx38zSEmivlq5W8eBCUAE6Hw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:a1:63:3f:7a:b6:7b:c1:07:27:2b:b8:f8:95:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
        Validity
            Not Before: Jul 23 21:00:29 2026 GMT
            Not After : Jul 24 21:00:29 2026 GMT
        Subject: CN=b9de187d61bccce8b6e8db857ea5ab3bdb3bd280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:46:14:4c:28:1b:1f:de:71:34:80:b9:a1:6e:
                    ae:d3:43:2b:85:51:a4:37:a9:8b:91:36:ab:3e:50:
                    01:cf:14:1f:21:0e:ed:b6:14:fb:3e:26:7c:c1:18:
                    40:84:36:a6:25:9b:58:d3:91:3b:8c:63:f3:66:93:
                    a3:f7:a2:f6:c3:5b:37:0a:a6:4b:78:d1:38:3d:46:
                    9d:4f:78:09:57:10:3d:d0:1c:14:32:f0:23:d8:2a:
                    38:4e:37:f8:fc:fe:33:15:bf:17:54:49:69:f1:7b:
                    e7:49:89:15:02:a1:6f:ea:d3:48:4c:55:a3:7c:93:
                    4f:96:dd:00:0d:bf:23:50:1d:12:f4:14:57:a0:38:
                    df:7f:14:c0:5a:da:16:c2:d4:7c:03:c7:48:83:61:
                    63:b8:d4:e0:a9:b6:91:7c:99:7e:d7:07:50:ba:d4:
                    31:5f:d2:22:08:90:0a:1f:81:93:12:da:7a:65:7c:
                    35:2c:db:35:31:da:58:8c:c3:01:55:28:4b:58:9b:
                    c7:b4:53:d2:af:65:19:c9:8a:cb:4b:85:a2:d7:1e:
                    29:08:68:2a:b2:43:2b:f0:dc:7d:08:cd:61:4a:aa:
                    79:98:8e:f5:cb:a8:a8:06:fb:78:06:41:ef:23:c9:
                    da:dc:76:3c:75:de:11:3f:a6:e1:fd:5f:a8:d3:93:
                    45:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DE:18:7D:61:BC:CC:E8:B6:E8:DB:85:7E:A5:AB:3B:DB:3B:D2:80
            X509v3 Authority Key Identifier:
                keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:15:e8:22:f4:45:ff:3e:83:43:83:c1:7b:f7:e4:27:64:21:
         8e:f6:6e:ca:66:17:51:f0:cc:e8:f3:24:f7:45:c7:3d:2d:e1:
         0e:25:1e:bd:38:af:a0:2c:6d:d5:5a:73:35:ea:a8:77:d0:9f:
         1e:10:aa:8a:65:19:11:4f:d4:2a:d9:e7:ea:c5:ad:80:6c:f1:
         42:59:e6:8d:ed:58:66:b6:1e:f1:70:b3:de:68:35:8c:ad:42:
         94:9a:00:0a:24:31:10:ca:15:14:0e:0a:5d:a2:1b:d9:c3:d0:
         fb:04:11:76:fd:60:f4:7d:16:da:69:84:8e:f0:7d:56:38:2e:
         aa:b5:c2:79:60:f9:11:b8:d3:a5:32:00:3e:60:26:16:c8:c0:
         5f:a3:7e:f8:48:f7:c4:ab:7d:0b:6f:08:2f:74:fd:9d:a3:67:
         b2:76:e2:15:ec:fb:0d:6e:f6:9a:fe:91:3c:f3:72:da:60:b2:
         22:92:3a:14:f9:a4:56:68:17:d4:97:c2:ac:b4:06:40:7d:74:
         32:db:a0:f1:a5:89:ba:3c:52:93:04:fa:45:02:4e:61:0e:39:
         4b:39:a3:15:e3:4a:48:ca:f6:21:59:4f:7b:1d:f4:0f:f3:74:
         df:35:68:2c:6f:87:d1:ab:e9:59:87:55:61:6c:54:dc:88:49:
         eb:5a:2f:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx6FjP3q2e8EHJyu4+JXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMjgyNGM2MTM1N2RjMzQ0YmJkZjM1YjgzNTc3NDU5Yjlk
M2ZjNDQwHhcNMjYwNzIzMjEwMDI5WhcNMjYwNzI0MjEwMDI5WjAzMTEwLwYDVQQD
EyhiOWRlMTg3ZDYxYmNjY2U4YjZlOGRiODU3ZWE1YWIzYmRiM2JkMjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUYUTCgbH95xNIC5oW6u00MrhVGk
N6mLkTarPlABzxQfIQ7tthT7PiZ8wRhAhDamJZtY05E7jGPzZpOj96L2w1s3CqZL
eNE4PUadT3gJVxA90BwUMvAj2Co4Tjf4/P4zFb8XVElp8XvnSYkVAqFv6tNITFWj
fJNPlt0ADb8jUB0S9BRXoDjffxTAWtoWwtR8A8dIg2FjuNTgqbaRfJl+1wdQutQx
X9IiCJAKH4GTEtp6ZXw1LNs1MdpYjMMBVShLWJvHtFPSr2UZyYrLS4Wi1x4pCGgq
skMr8Nx9CM1hSqp5mI71y6ioBvt4BkHvI8na3HY8dd4RP6bh/V+o05NFRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLneGH1hvMzotujbhX6lqzvbO9KAMB8GA1UdIwQY
MBaAFI8oJMYTV9w0S73zW4NXdFm50/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTJlYjQtMzIxYy00OGMwLTkyNzIt
M2FlNzExYWYwMzRiLzEvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82NTJlYjQtMzIxYy00OGMwLTkyNzItM2FlNzExYWYwMzRi
LzEvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBXoIvRF
/z6DQ4PBe/fkJ2QhjvZuymYXUfDM6PMk90XHPS3hDiUevTivoCxt1VpzNeqod9Cf
HhCqimUZEU/UKtnn6sWtgGzxQlnmje1YZrYe8XCz3mg1jK1ClJoACiQxEMoVFA4K
XaIb2cPQ+wQRdv1g9H0W2mmEjvB9VjguqrXCeWD5EbjTpTIAPmAmFsjAX6N++Ej3
xKt9C28IL3T9naNnsnbiFez7DW72mv6RPPNy2mCyIpI6FPmkVmgX1JfCrLQGQH10
Mtug8aWJujxSkwT6RQJOYQ45SzmjFeNKSMr2IVlPex30D/N03zVoLG+H0avpWYdV
YWxU3IhJ61ovkA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:10:34 2026 by rpki-client