Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
File:                     JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft (raw, json)
Hash identifier:          Nu9S5aEt5tZvsruaUGOjS7c6r/4VmBkhf8O2fcV0TFM=
Subject key identifier:   3E:D3:EC:0A:DE:64:23:85:B1:44:3B:92:25:63:80:1F:45:30:92:01
Authority key identifier: 26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6
Certificate issuer:       /CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
Certificate serial:       019F93C8BEB7A33CBD25A2BD656F92693533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 11:00:34 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:34 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:34 +0000
Files and hashes:         1: 1-etkEpJT5huTCkvp4nk0dydE9KA.roa (hash: eid4ChJhHIbdTu3ltYjDcXJHFhgZsYu7s5rAP/A4Ugo=)
                          2: JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl (hash: J+DH5slGL/laK7yFRhRdwcKIkt1EuEZYkaxRy42P6yk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:be:b7:a3:3c:bd:25:a2:bd:65:6f:92:69:35:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
        Validity
            Not Before: Jul 24 11:00:34 2026 GMT
            Not After : Jul 25 11:00:34 2026 GMT
        Subject: CN=3ed3ec0ade642385b1443b922563801f45309201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:67:de:24:17:d5:37:d8:c2:4b:3a:2f:bf:
                    e9:39:f0:f9:e8:13:98:65:52:25:40:a4:51:ec:3f:
                    38:90:c7:ba:31:44:6e:0b:8e:9a:9a:df:76:02:44:
                    a0:60:80:ea:1f:07:10:18:a8:ce:75:8a:b7:f7:08:
                    66:fc:1b:c5:35:b0:93:79:26:9c:29:cd:b6:83:b0:
                    27:db:a7:8a:c8:a2:c0:86:da:fb:ca:48:4d:e2:5c:
                    e1:51:cb:06:05:4f:bf:b4:00:23:5e:a5:1b:1d:31:
                    da:94:a7:c0:0a:66:5b:14:0a:50:ad:01:db:dd:26:
                    0a:de:91:c8:80:34:43:d9:62:82:bc:67:83:72:80:
                    36:9b:b5:85:6d:47:d1:51:18:db:7b:49:59:43:01:
                    09:74:4d:fd:a3:88:3d:de:07:50:e6:f3:5a:f2:88:
                    00:37:89:52:f7:75:5d:ae:05:d9:94:bf:e4:47:c2:
                    89:15:28:f6:f3:6f:77:63:a2:df:0c:fb:b9:92:0a:
                    9d:50:f5:1f:dc:32:58:c6:dd:bf:05:c9:b2:a2:2c:
                    77:b5:31:6d:c7:87:a5:75:f7:a5:ab:80:61:17:b5:
                    92:d1:bd:97:e0:c8:5e:a9:27:0f:3f:57:12:d7:87:
                    ba:10:83:fc:79:a1:18:17:41:aa:a1:85:d3:ab:7a:
                    32:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D3:EC:0A:DE:64:23:85:B1:44:3B:92:25:63:80:1F:45:30:92:01
            X509v3 Authority Key Identifier:
                keyid:26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:8a:54:c0:14:77:1d:ef:91:f8:6c:d4:0e:d7:43:92:aa:68:
         2d:a7:17:25:ad:0f:4a:7b:a4:35:c7:43:2e:9d:1e:f6:c8:7c:
         70:fa:09:fe:ad:2f:03:27:3d:58:8b:37:a4:73:7e:f3:e5:86:
         f5:ac:3e:27:b6:d0:0c:75:62:94:a4:2b:78:bd:40:9d:63:ab:
         55:34:98:f4:d4:aa:44:8f:48:33:c6:54:43:93:89:fe:90:17:
         01:41:6c:fc:b5:67:1f:fe:db:14:50:eb:e0:d1:26:2f:c8:f1:
         97:d1:18:5b:f8:80:92:36:b6:9e:49:dc:07:84:59:ae:d2:cc:
         a3:10:21:fa:a2:37:19:a1:41:7e:3a:47:bb:af:9e:36:d8:2f:
         9b:5f:7d:af:b2:1b:af:da:65:72:ff:d9:98:d7:ec:1c:a3:16:
         ec:30:2b:da:01:28:b2:a7:fc:8c:38:85:48:6d:38:7b:fe:61:
         83:87:2d:9d:d3:73:f2:42:57:d7:db:24:1b:78:b5:5a:08:4c:
         61:ed:bd:0a:03:2c:b3:fb:97:a6:a2:bd:2f:6b:83:bf:15:2c:
         2f:25:45:a0:0d:ff:88:9f:16:a3:be:b7:1a:a7:14:af:e0:2e:
         fe:aa:75:73:ca:48:4e:53:b2:1d:2d:a4:a5:d8:ee:72:42:57:
         38:93:e0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:52 2026 by rpki-client