Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File:                     JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier:          Zu5tCJLJWEp0On+n/7N1/EymcFi0g4FKhFzzsKaY9Bk=
Subject key identifier:   45:7E:B6:7A:8D:82:3A:77:F6:2D:FC:B0:9F:5C:FA:B1:52:1D:C6:DC
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer:       /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial:       019F9436CD139699CD81E3393CA2AD164BD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number:          1266
Signing time:             Fri 24 Jul 2026 13:00:47 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:47 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:47 +0000
Files and hashes:         1: 68M1iA2v1hZrN-WYmwaUYqloW_k.roa (hash: Lu1vR1WuACYYOAE0lbWO8n33EaanCEqHclq+Bu+0jM4=)
                          2: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: uplWxi45HyXXnc9cvRYAB+at6tD6qPeOn46wgFQK298=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:cd:13:96:99:cd:81:e3:39:3c:a2:ad:16:4b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
        Validity
            Not Before: Jul 24 13:00:47 2026 GMT
            Not After : Jul 25 13:00:47 2026 GMT
        Subject: CN=457eb67a8d823a77f62dfcb09f5cfab1521dc6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:9e:ac:5a:a0:48:80:76:47:2b:ba:ce:4e:
                    dc:e9:ba:7c:fb:9b:ea:2c:f5:6c:81:06:b0:4f:e5:
                    49:2f:66:6e:70:ff:67:01:6d:86:25:1c:4c:8b:4f:
                    45:5c:78:79:83:49:61:52:81:c6:cd:71:d9:f5:4c:
                    ba:d9:3b:f4:c9:8c:55:8b:d7:32:45:51:88:0d:a4:
                    bd:bc:bf:5f:73:ee:a4:6d:bf:d5:17:d5:97:e4:75:
                    81:46:8b:f4:10:f1:10:04:26:a9:40:db:2c:fb:94:
                    d4:70:c1:2c:49:b6:c7:27:a0:4c:d3:41:07:2e:01:
                    51:0a:41:aa:2e:78:aa:05:c7:ae:b0:ba:43:49:44:
                    64:b8:62:b3:f6:ec:c2:44:b4:b9:c4:16:8f:41:c5:
                    ef:4f:36:6f:70:85:af:1c:78:ee:3a:f2:88:66:c8:
                    fa:7a:49:e4:2c:c1:dc:a3:5b:ee:8a:92:f4:b3:35:
                    df:b8:a0:6b:63:4d:11:ff:47:c4:ee:62:4a:2a:f0:
                    70:82:3a:bb:44:20:27:b1:b3:00:16:7f:23:c6:1d:
                    6d:f1:f0:81:f8:9f:82:1d:1d:38:7f:ae:50:b0:b1:
                    87:46:83:4c:db:fd:73:b7:1e:20:18:66:39:9c:30:
                    3b:2e:ad:ae:f0:65:e7:54:c1:d7:14:90:a8:fd:1c:
                    26:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7E:B6:7A:8D:82:3A:77:F6:2D:FC:B0:9F:5C:FA:B1:52:1D:C6:DC
            X509v3 Authority Key Identifier:
                keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d2:8b:e9:b6:be:60:76:7e:1f:9c:bb:63:df:8a:f4:e0:a0:
         fa:9a:ca:89:5f:e3:64:39:d9:6d:fc:d2:c5:53:e8:62:1b:bf:
         eb:d6:d9:f1:31:39:1b:e1:77:f4:2b:29:af:b0:6e:4f:ef:de:
         e7:fc:1b:f9:09:d5:c2:43:44:47:96:fa:09:53:04:a8:f8:c0:
         3f:db:8b:80:46:84:a8:30:c1:eb:c1:e1:37:a2:43:85:f2:1b:
         21:6f:ae:20:76:7e:cd:82:44:45:21:9a:90:6c:08:c0:12:8a:
         1f:c5:95:4e:13:a0:c3:cb:53:11:96:e2:a0:e2:7b:0a:36:36:
         4e:4e:93:e8:fb:55:3c:ee:d7:77:4f:a5:03:82:e1:c7:7f:55:
         09:cb:73:13:e8:fd:7e:be:4f:fe:01:2e:75:86:a3:06:35:54:
         0a:0d:8d:ae:e8:3f:1e:c2:e9:ac:1a:47:00:cc:6a:d5:f9:37:
         41:c5:09:94:fe:f9:14:b2:76:51:f6:0a:3f:78:ef:32:55:97:
         7a:ad:14:4e:23:34:79:f0:e6:c7:57:d3:9c:e6:27:88:a1:3e:
         4d:91:03:67:c0:5b:8f:be:0c:96:b3:5c:86:dd:7c:dd:39:10:
         a5:8f:de:8e:d5:3f:5a:4f:6d:29:a8:41:2d:af:d3:c0:5e:b1:
         79:5a:f2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:39:56 2026 by rpki-client