Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.mft
File:                     pRJgm-HwV0eSjF8HvRl-YxQ132I.mft (raw, json)
Hash identifier:          WuGTIeRVKWeBDDPN36oPhgeFhy1TCObaOU4B1SB0Ypw=
Subject key identifier:   78:E4:1E:22:BF:F8:C7:35:C3:41:38:18:92:30:1D:A7:C2:CA:7D:97
Authority key identifier: A5:12:60:9B:E1:F0:57:47:92:8C:5F:07:BD:19:7E:63:14:35:DF:62
Certificate issuer:       /CN=a512609be1f05747928c5f07bd197e631435df62
Certificate serial:       019F8EA297624B4C754F60621DD5C5C37DA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pRJgm-HwV0eSjF8HvRl-YxQ132I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.mft
Manifest number:          0280
Signing time:             Thu 23 Jul 2026 11:00:47 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:47 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:47 +0000
Files and hashes:         1: Fv-pcFQtIMekvlqe-nO2ojc4nfE.asa (hash: jUHxrWu5XXxSkb4CvAA6OtTAUf6/9PVJTYCUqf+2kjU=)
                          2: pRJgm-HwV0eSjF8HvRl-YxQ132I.crl (hash: U9bIK+BbwGOrD6GnCF8pqonc+ICu+0lc2ZzMgLeHSxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pRJgm-HwV0eSjF8HvRl-YxQ132I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:97:62:4b:4c:75:4f:60:62:1d:d5:c5:c3:7d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a512609be1f05747928c5f07bd197e631435df62
        Validity
            Not Before: Jul 23 11:00:47 2026 GMT
            Not After : Jul 24 11:00:47 2026 GMT
        Subject: CN=78e41e22bff8c735c341381892301da7c2ca7d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:48:57:4f:43:c0:e6:be:e5:22:67:51:dc:73:
                    e1:9d:b1:69:45:5e:0d:e1:3f:3c:d1:14:d5:05:b5:
                    0c:c9:33:40:e3:ab:35:9f:02:fd:09:d7:a8:51:95:
                    ff:3c:62:58:81:fe:75:26:c1:7a:a6:94:5d:0c:df:
                    a4:44:58:3b:92:b9:5c:7f:37:b6:01:03:58:7d:27:
                    74:7d:81:d5:f6:4c:c0:4f:96:41:75:d2:85:0c:69:
                    ae:1b:e9:79:43:ac:97:b3:17:89:be:18:a0:df:d4:
                    aa:25:24:70:5a:b3:dd:c0:58:e8:3a:89:00:73:29:
                    60:be:3c:b5:65:84:b9:b4:cb:e5:73:87:34:21:19:
                    3b:10:70:4c:45:e1:38:c3:d8:0a:b1:36:64:1a:71:
                    b9:e2:c4:6b:d3:db:54:aa:89:22:90:83:b9:14:3d:
                    9b:cd:5e:21:c9:0f:d2:30:35:1e:f1:5c:94:59:19:
                    02:b5:72:5b:13:64:b3:a5:37:b1:ec:9e:df:08:c9:
                    db:d4:95:6b:fd:e7:8a:29:1b:32:00:23:7d:aa:88:
                    12:ce:0f:29:f7:42:f8:4b:72:3c:ff:f6:85:39:8f:
                    8e:72:87:d4:d7:fe:2b:95:b1:4b:dd:2a:4d:03:09:
                    15:c0:24:21:bf:e2:49:61:53:8f:26:83:b9:88:cd:
                    6c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E4:1E:22:BF:F8:C7:35:C3:41:38:18:92:30:1D:A7:C2:CA:7D:97
            X509v3 Authority Key Identifier:
                keyid:A5:12:60:9B:E1:F0:57:47:92:8C:5F:07:BD:19:7E:63:14:35:DF:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRJgm-HwV0eSjF8HvRl-YxQ132I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:8e:30:70:72:4a:d5:f9:92:8c:1a:fd:4f:ce:4e:8c:e7:b3:
         4b:05:87:96:a0:5c:3f:dc:49:0c:de:8c:9d:f9:9d:c4:b4:9e:
         3c:7f:4b:51:42:58:c2:fb:bf:b0:a4:c0:33:8e:5a:68:22:63:
         50:9c:ad:d4:87:ca:92:ae:0e:3a:cc:df:86:3c:9b:63:e6:84:
         1e:ea:51:65:de:06:34:c9:d0:86:8b:97:b8:c0:39:ab:bc:6a:
         23:c8:15:94:5c:a2:fb:86:11:89:9e:a8:15:8c:b6:e4:1e:b3:
         c4:43:f2:fd:e9:b0:77:5c:40:9f:a8:0a:db:ec:98:4b:30:cc:
         0d:05:73:bc:e9:c2:f4:c3:fc:5d:c3:64:36:bd:9e:3e:0b:9c:
         15:b3:8d:0b:8b:6f:df:4a:f6:43:d2:4f:0c:29:c6:64:15:3e:
         99:b5:23:dc:36:5b:71:7d:65:86:3e:b3:3b:a6:a1:fa:40:38:
         2e:50:28:26:66:ff:a4:6b:64:db:3d:0d:c8:ba:b4:4c:83:ef:
         c8:f6:a0:16:57:12:9f:ba:20:48:53:49:22:37:b1:b2:06:b7:
         9a:70:dc:39:6c:f1:c0:cb:13:7e:c8:e4:5a:a8:78:49:dd:dd:
         d0:fc:52:a2:7c:90:0d:f2:ec:49:e9:d6:28:3d:23:a9:b6:2d:
         fd:db:cb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:02:53 2026 by rpki-client