Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
File:                     JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json)
Hash identifier:          LlRKp6JSwZsiNVTYUBEL0S52wctXKi+/w6ne++i8u5k=
Subject key identifier:   8D:B6:54:11:0D:BB:8A:B4:B7:8A:9C:10:A0:A6:68:F5:7B:FD:31:A6
Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
Certificate issuer:       /CN=266547208206ad54474c69fccbedc24aa56a62c2
Certificate serial:       019F935B32EF336A40559C0ECB5299B2E976
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
Manifest number:          0EBF
Signing time:             Fri 24 Jul 2026 09:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:55 +0000
Files and hashes:         1: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: +8qUFEHdW6bQyN6ZKHbdTVjokhSUzjuk/cwfeObaCzc=)
                          2: ZOxgWvCSe4fh3G-hS8UAvVzCxPQ.roa (hash: lLIc6IlVo/BfK1oQIkM/V9OuWrsKXh4yLdug5PFaT64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:32:ef:33:6a:40:55:9c:0e:cb:52:99:b2:e9:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2
        Validity
            Not Before: Jul 24 09:00:55 2026 GMT
            Not After : Jul 25 09:00:55 2026 GMT
        Subject: CN=8db654110dbb8ab4b78a9c10a0a668f57bfd31a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e1:20:b0:60:38:40:2e:bd:31:46:2c:8e:b0:
                    77:eb:37:93:4c:ce:3c:bd:bb:4a:6e:1f:77:d4:67:
                    8f:2d:ec:35:ee:66:67:63:de:02:14:3e:a4:ca:96:
                    77:0e:a6:b0:28:c6:b8:73:7f:f6:0e:40:44:ca:60:
                    e9:2b:3f:eb:d0:09:78:c9:11:e0:57:c0:4d:5c:d9:
                    b5:b2:ef:8a:fb:a6:f9:ef:c7:1d:59:fc:79:f3:d7:
                    b9:8f:25:0d:29:d2:89:04:49:14:cc:f4:3d:11:08:
                    9f:1b:ef:00:45:33:20:21:6a:44:09:a0:f3:19:ba:
                    69:12:9e:1c:4a:61:18:fd:7f:46:23:a3:32:56:ab:
                    f1:c2:f5:12:85:01:78:29:4d:7d:dd:ff:3a:de:9e:
                    9b:5b:fe:f0:cc:dd:42:b9:8d:0b:5a:ef:5d:97:7e:
                    45:73:0f:af:b2:43:33:05:86:f6:bc:ee:9a:1d:96:
                    14:52:e5:c1:fc:e9:ac:f0:52:33:96:f6:f0:4e:e5:
                    fc:b1:29:57:35:61:c2:67:29:01:82:f8:e8:b0:ec:
                    23:c3:c6:77:bf:05:dd:e1:cd:b9:b7:fa:e9:84:8e:
                    4e:63:6c:bc:7d:70:4b:1c:dc:33:2b:89:07:28:4a:
                    b7:f4:ef:b2:6c:6f:f2:b2:45:7c:52:97:25:b7:9b:
                    b9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B6:54:11:0D:BB:8A:B4:B7:8A:9C:10:A0:A6:68:F5:7B:FD:31:A6
            X509v3 Authority Key Identifier:
                keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:01:a1:9a:c8:fa:71:c5:71:79:5d:24:1a:01:ab:33:4d:84:
         ab:6a:ba:59:84:fd:4e:52:9e:8a:fb:3f:16:c6:ab:55:13:c1:
         cf:c1:30:c5:3b:57:8a:68:30:13:c6:ed:8e:b4:95:a9:40:49:
         bf:35:85:70:74:f4:ef:e2:18:c0:29:e4:e9:7b:f6:f0:61:68:
         83:36:51:75:91:aa:1d:ff:c9:14:a9:9d:f8:2a:88:5b:43:9c:
         a3:d6:b5:8b:50:5c:65:ed:21:06:ae:54:5e:85:2e:2b:b5:28:
         fb:50:c2:09:23:75:e1:94:43:87:05:26:3b:11:0c:d3:0e:63:
         f5:7b:a2:d9:21:60:24:2e:ff:11:2f:50:82:7e:db:c6:58:9e:
         f8:63:3e:bb:1b:28:3e:c1:24:2c:24:ea:4b:08:94:aa:c5:7c:
         ff:33:07:65:a5:84:41:b5:a1:60:34:0e:86:c4:23:93:fc:e2:
         60:df:65:f7:33:00:a1:7d:2f:c6:81:2d:9a:58:5d:26:ce:70:
         52:f3:46:a1:b2:1d:cf:f2:78:65:17:49:ba:31:da:06:de:12:
         2d:a7:0c:ee:c8:7b:69:03:4e:57:63:73:1a:14:8d:be:a8:ea:
         a3:4f:d9:45:ff:e8:be:a3:93:51:7d:b7:31:a3:f9:1e:ad:66:
         a7:77:14:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:57:24 2026 by rpki-client