Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
File:                     jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft (raw, json)
Hash identifier:          a0KFtKSoYJ7LTL8nhtTPAxdWljGPgprXwJ/P8Za7Rzo=
Subject key identifier:   D9:71:0B:27:A6:78:94:97:D9:93:EE:B8:63:BD:14:82:46:0F:4F:F8
Authority key identifier: 8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55
Certificate issuer:       /CN=8f2ae45c509041a796a968953581f51d45bfce55
Certificate serial:       019F935C34BB4527FD2DB3F88BE693471D12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 09:02:00 +0000
Manifest this update:     Fri 24 Jul 2026 09:02:00 +0000
Manifest next update:     Sat 25 Jul 2026 09:02:00 +0000
Files and hashes:         1: 1_nGVkzyveL8HLZ_ny0-9H38b-Q.roa (hash: m7KPmdw0ypm5cCsSjSVvSiDVgOTaFEIiCIFtIRscgBM=)
                          2: SknXE_BU2Q0ADbXiuxAkE9e0OLQ.roa (hash: /V6CwDt+vVqQ1NL+JaF4tODqLg44Ncl4VJNfvyDrnac=)
                          3: UeXYudS3zz6fGW0cpai4irNYnHA.roa (hash: wK4XLLpEyJu7nfTn9oE4RSt+zZmL5a3WpTKNSuWO690=)
                          4: jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl (hash: J5xH4ujNmm414kUP6fo8RCvz9V9CLXm1WGiF9G1JOq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5c:34:bb:45:27:fd:2d:b3:f8:8b:e6:93:47:1d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f2ae45c509041a796a968953581f51d45bfce55
        Validity
            Not Before: Jul 24 09:02:00 2026 GMT
            Not After : Jul 25 09:02:00 2026 GMT
        Subject: CN=d9710b27a6789497d993eeb863bd1482460f4ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:14:f5:a9:31:53:32:0e:ce:f3:0e:bd:9c:16:
                    36:aa:a8:56:c3:57:1d:b1:db:63:a1:b1:be:69:69:
                    32:d7:31:d4:57:65:f5:94:fd:96:c3:43:e8:d3:ec:
                    0f:c1:5d:59:d1:57:1e:e0:b6:8f:9b:82:45:fe:e0:
                    4b:2a:1e:22:ef:52:cf:e6:3c:32:81:40:ef:93:5a:
                    e2:8a:ec:ef:0b:4c:f3:64:97:6e:ae:29:12:6f:5c:
                    48:98:7d:5b:4d:c8:98:0d:12:97:5e:7c:7d:ee:9f:
                    b9:d8:53:3a:ea:e5:23:1a:7c:45:e8:15:32:36:09:
                    2f:8a:22:3e:13:ab:19:34:1e:65:d5:00:f6:fb:35:
                    26:35:c5:a6:cd:07:16:39:f3:2c:d8:a6:5c:f6:1d:
                    1e:6f:c1:74:3e:65:ff:80:21:22:a0:34:d9:05:34:
                    a9:fa:68:bb:ce:ff:d6:73:77:4e:15:5f:8a:60:04:
                    6e:c2:f4:64:43:dd:79:5e:3d:bc:bc:d5:e1:a9:0b:
                    74:2c:d1:9d:84:c6:b4:7c:79:99:20:e6:75:1b:75:
                    3f:85:a3:5e:b5:2f:31:38:01:61:27:50:01:2a:9a:
                    a5:d8:3e:8f:9a:9a:b2:34:b5:7f:10:80:e3:99:3b:
                    81:71:d4:16:43:2e:98:4a:9c:d5:4a:69:03:8f:77:
                    9f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:71:0B:27:A6:78:94:97:D9:93:EE:B8:63:BD:14:82:46:0F:4F:F8
            X509v3 Authority Key Identifier:
                keyid:8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d8:27:16:94:bd:bc:2f:09:52:f7:96:7e:76:28:8a:5d:6e:
         6f:d9:8d:60:b7:de:25:f9:df:cc:48:a3:30:5d:47:fa:07:01:
         2b:a7:c6:4c:b0:31:13:91:7d:4f:33:a7:a6:05:7e:bc:79:d6:
         12:4d:af:3f:a4:6b:dd:74:39:c8:05:0c:04:8a:be:24:03:26:
         b7:60:32:8b:23:8e:c8:1b:0d:b5:1f:a1:bf:17:b0:ba:99:02:
         af:34:a4:4a:a3:81:1d:3f:e6:7c:01:c8:ea:a4:fd:54:77:c8:
         60:3e:e7:e1:94:d9:dd:89:0c:25:c7:c5:57:b5:91:d1:e2:37:
         01:28:59:bc:b8:6d:75:1a:a6:ac:7d:85:7e:e9:0b:34:1d:ae:
         18:c1:c4:ee:4e:6a:25:52:93:18:8a:98:ae:b1:54:f9:68:17:
         60:dc:2e:1e:56:56:84:37:b5:01:73:78:af:e5:9b:45:13:00:
         53:5f:15:1f:b8:19:59:0d:eb:bd:7b:7b:85:0c:db:10:1b:1b:
         d6:55:f2:35:0b:14:62:c3:14:70:71:6f:b9:09:db:b8:dd:ea:
         9d:5f:74:55:d0:d6:19:4a:a7:f1:b1:30:3f:fd:bd:05:cf:d0:
         60:95:43:51:2d:db:10:09:32:67:8a:ce:d9:f9:6f:f9:50:e0:
         79:30:4b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:10 2026 by rpki-client