Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File:                     JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier:          7vdyiQXQcePjZzoHBOHYqdfWH8R25xI5M85uaOT9rlk=
Subject key identifier:   61:EB:1F:64:AF:B0:27:8A:E6:F2:E4:5D:8E:83:F3:79:F4:FD:3B:04
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer:       /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial:       019F92B6AD8212624064F44E6F6067E36A51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number:          1582
Signing time:             Fri 24 Jul 2026 06:01:13 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:13 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:13 +0000
Files and hashes:         1: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: SBdgqszfYpZfZxFTUTDjW/toWYGFe29Ei2SQfe9c8ZU=)
                          2: kJSjLOsWhAHko1FJjBJtE40W7yI.roa (hash: R5x4NpWCvDVLqww0J/ygaTqJQCiT5GP/47DNzH/f1HY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:ad:82:12:62:40:64:f4:4e:6f:60:67:e3:6a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
        Validity
            Not Before: Jul 24 06:01:13 2026 GMT
            Not After : Jul 25 06:01:13 2026 GMT
        Subject: CN=61eb1f64afb0278ae6f2e45d8e83f379f4fd3b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:cc:6a:15:ac:d5:43:74:a3:ca:66:15:0f:
                    2d:dd:2e:45:13:e3:e1:b5:5b:58:4d:e9:8a:39:ec:
                    b6:f1:a4:34:87:1f:eb:8a:48:94:9b:43:b3:42:d7:
                    fd:aa:c6:62:30:29:f7:65:c9:96:c2:c4:60:c5:f3:
                    69:38:f0:9a:71:50:7f:d5:d4:b0:e4:29:a3:e4:e9:
                    b1:30:82:02:89:b6:b0:42:8e:94:82:c3:58:ba:d1:
                    ac:5f:09:e7:3a:28:83:77:9f:bb:8d:f6:c7:44:5a:
                    a7:73:1b:9f:77:73:cd:81:de:f5:a8:1a:12:c5:e1:
                    20:8b:ac:a9:e1:d6:17:0e:e0:bf:4a:9d:f0:0b:5a:
                    3e:7c:d8:58:ff:c0:5d:15:25:34:43:aa:3b:ca:1a:
                    90:e6:d2:37:eb:09:e8:c8:0f:72:08:9f:55:25:8a:
                    93:f7:22:cc:da:b3:84:58:d6:d2:dc:97:33:b5:ef:
                    6b:70:1e:3a:a3:63:e6:dd:fa:29:21:ec:07:07:02:
                    f7:1f:f0:69:bb:3b:98:db:66:53:2a:45:1f:7d:5a:
                    da:4e:29:70:6b:17:28:25:5c:7f:94:58:0d:79:1e:
                    22:83:97:bb:33:52:50:44:71:cc:45:94:5e:ff:01:
                    3c:fe:01:75:f6:78:43:a5:4f:43:a9:f2:d7:38:be:
                    b1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EB:1F:64:AF:B0:27:8A:E6:F2:E4:5D:8E:83:F3:79:F4:FD:3B:04
            X509v3 Authority Key Identifier:
                keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b8:69:fd:44:3c:dc:43:04:33:73:dd:b3:6d:af:09:b4:a3:
         98:87:d7:bb:64:03:26:08:ec:a5:02:ff:54:67:d1:c8:40:47:
         28:ab:61:99:d8:d6:bd:be:2a:77:79:3b:a3:78:ee:24:c6:6c:
         41:06:5a:c6:f1:48:2d:64:84:11:66:61:dd:0e:a4:0c:4e:5c:
         a6:7a:c4:5d:ba:a2:98:59:d0:15:e3:6b:39:18:56:90:48:78:
         ce:3b:7f:8b:f5:62:42:24:e7:36:67:38:d9:99:5c:cb:af:ee:
         a3:70:20:fe:57:0d:af:04:43:9d:20:ab:83:aa:d9:80:c0:3a:
         7d:d6:50:f8:60:f5:de:1a:c7:5b:88:7e:cf:89:f3:3c:17:46:
         69:8b:be:92:fa:9d:96:54:92:8b:cd:0d:fc:64:7a:92:8b:4a:
         07:03:e9:c2:d3:25:cb:f6:c3:8a:ac:cb:79:6d:5e:29:d2:a8:
         bf:7b:63:c2:12:41:8d:70:be:1c:07:71:b4:58:b3:aa:42:49:
         69:14:d3:1c:f6:1a:89:95:69:e4:32:5c:7e:6d:66:53:d8:e1:
         4d:94:cf:34:3f:89:5a:83:ba:8e:07:97:17:e8:f1:35:be:f4:
         c8:55:07:5d:85:3b:d1:8b:6c:98:69:1f:63:3e:78:76:75:ed:
         69:2a:87:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:52 2026 by rpki-client