Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
File:                     jxVuaflETCsGaHJWCFtqek6Yh_Y.mft (raw, json)
Hash identifier:          uciQEpFdF4avjl6X5Jqg0by7jualx8cnMe9yzSeyqv8=
Subject key identifier:   02:2C:C7:B6:8F:AC:2B:79:55:CC:E3:CF:24:B0:CA:15:C4:2E:A3:01
Authority key identifier: 8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
Certificate issuer:       /CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Certificate serial:       019F95122568F4BBBFE4CAC65D60C309B6DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
Manifest number:          0D73
Signing time:             Fri 24 Jul 2026 17:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:22 +0000
Files and hashes:         1: IGqxlIKv9pQSduOZbyMGfJbT9RI.roa (hash: YZCvKKKTyHwkIul63DB5RjCHdqSG34xePQX/iOEjVC8=)
                          2: jxVuaflETCsGaHJWCFtqek6Yh_Y.crl (hash: UNdtTj11hOKulS0J7uxfij/E7cMb67oLvllCdF0dN94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:25:68:f4:bb:bf:e4:ca:c6:5d:60:c3:09:b6:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
        Validity
            Not Before: Jul 24 17:00:22 2026 GMT
            Not After : Jul 25 17:00:22 2026 GMT
        Subject: CN=022cc7b68fac2b7955cce3cf24b0ca15c42ea301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ea:43:db:cb:70:05:ff:7f:43:44:2e:86:83:
                    9a:ce:14:cc:53:b1:a4:40:f2:c3:60:49:f2:7d:ce:
                    20:0e:e8:1b:14:b2:27:c6:ba:b8:b1:d3:74:08:cc:
                    bc:47:f8:ea:d1:8f:dc:9c:41:e4:fa:ef:8d:9c:ca:
                    b0:a8:99:90:77:96:66:a1:ab:2a:b1:64:ce:97:d7:
                    ec:cb:6c:ff:04:a7:29:6c:d2:f5:99:ec:b8:00:c1:
                    bb:5c:33:a4:be:e6:03:0b:e1:e1:ef:1f:20:e2:0b:
                    d9:fa:76:93:3e:9e:a4:03:49:a7:2f:64:29:fd:0b:
                    19:88:62:91:53:df:6a:b2:98:20:d2:25:4c:83:a4:
                    9d:04:b7:c9:1d:f1:c3:6b:82:7c:9d:82:92:30:c5:
                    0b:5b:61:8b:ff:01:9d:8a:40:5b:da:fa:0e:4f:7d:
                    48:7f:90:07:16:10:d4:53:48:23:6a:a1:d7:f5:13:
                    a3:c1:13:e5:62:34:a0:15:5c:3c:0f:a5:c8:c1:3f:
                    ab:a6:66:af:cb:9e:82:d5:af:51:85:75:e7:3c:36:
                    31:70:5e:2f:d4:31:9e:ae:df:78:08:a1:bc:90:41:
                    8b:c4:b3:dc:79:3e:3d:35:b2:c4:a8:8a:20:17:23:
                    1b:11:df:05:cb:5b:97:86:d6:80:95:55:cf:41:9c:
                    88:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2C:C7:B6:8F:AC:2B:79:55:CC:E3:CF:24:B0:CA:15:C4:2E:A3:01
            X509v3 Authority Key Identifier:
                keyid:8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:97:56:66:53:16:e3:39:32:22:45:9f:47:1a:66:74:74:eb:
         68:77:31:08:e1:12:52:31:43:d7:88:19:bb:01:8a:a7:c8:11:
         d1:49:4a:d9:5d:8c:e5:f3:fa:83:ca:3c:32:d9:d2:6c:45:b4:
         c7:bf:58:dd:95:70:b3:63:bc:62:27:70:7f:fa:33:65:24:72:
         13:bd:eb:69:2f:fd:ec:38:17:4c:fd:1c:a9:51:ff:fc:48:21:
         86:b3:c8:41:63:b0:ac:13:22:4c:16:92:d7:95:02:7d:d3:05:
         0d:8a:d6:0f:b3:dd:99:9d:6a:0e:28:3d:80:82:39:aa:0e:a8:
         6f:5b:b8:e4:13:51:27:cb:25:78:49:0f:fa:b5:b1:2c:de:7e:
         53:a4:bb:4b:5c:97:38:8f:70:eb:e8:42:76:42:a1:cf:84:ef:
         d9:6c:fe:18:d9:8d:9a:20:65:65:1a:9c:1c:7f:30:c5:2f:7e:
         77:25:3a:93:dd:2b:ad:78:b0:ec:8a:ba:6b:c7:6c:19:fa:57:
         ff:61:9f:22:55:4f:45:a7:85:8b:e2:5b:c8:03:4d:d8:02:43:
         fd:b9:38:49:e5:4f:be:e5:93:92:0d:93:88:1d:85:8e:44:ca:
         77:6d:b7:2e:b7:94:0e:2c:62:6b:42:6f:9b:34:cb:6f:c3:49:
         5c:01:43:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:11:40 2026 by rpki-client