Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
File:                     j1Gq0OQUir4_KouNQxjzS0VrZfE.mft (raw, json)
Hash identifier:          NCytmp3jrGw5h/+sSR8rmL53UU8/m8ie7bvB9QOByKc=
Subject key identifier:   6C:0A:A2:8A:D8:8C:E2:50:8C:E3:11:3C:62:67:F8:77:9D:6C:94:A3
Authority key identifier: 8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1
Certificate issuer:       /CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
Certificate serial:       019F93244635117BD569C78672FB0A8AFA77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
Manifest number:          0290
Signing time:             Fri 24 Jul 2026 08:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:55 +0000
Files and hashes:         1: 5CYe2w6R8bIP53LSediQOkU8X6Y.roa (hash: 62hxmbI0Pt2Gc+kE97Qd4+IWL8YV1uOGUoBpSifMc4g=)
                          2: 6D-B1oT3Xej3PD_aAEPZhMH_WI4.roa (hash: BNTN6fDo238uP3+GkU68E9CQziGYvVq1d9TXOCCqbdc=)
                          3: AiyDVffautqfmFw0-sHwLnrdi94.roa (hash: NqMMGxy1WwFAXktdmGqyVpQBfDu1vxm8tC/DWTYXqCg=)
                          4: KTAAuRsqmRld1n4ZdiqcKLG_hbI.roa (hash: Z/rqoZBNVfDm70QTbYQ7hfqHZXGsKtZpgexuaPzb1M4=)
                          5: j1Gq0OQUir4_KouNQxjzS0VrZfE.crl (hash: mA79gQrzQEREFKIOyxbRyIlHh9WchWkcy0Be6gseuEs=)
                          6: lXUAxU6WVwpNoYD3PNJupX0IdnQ.roa (hash: 1IXDFDpAZ7cDUUd7sdHkzjt07vGwbPC7cOUCYW3+UFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:46:35:11:7b:d5:69:c7:86:72:fb:0a:8a:fa:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
        Validity
            Not Before: Jul 24 08:00:55 2026 GMT
            Not After : Jul 25 08:00:55 2026 GMT
        Subject: CN=6c0aa28ad88ce2508ce3113c6267f8779d6c94a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6e:98:a5:3c:58:e5:b7:bf:3a:9d:47:56:38:
                    3e:5f:bb:45:34:51:00:40:7d:58:fe:ab:16:52:ad:
                    7a:e7:0b:b2:ef:25:8e:72:e0:72:bc:b3:0b:4b:a7:
                    65:c1:50:e2:77:5b:b4:65:27:94:75:d6:04:a5:b9:
                    25:11:5c:ab:a4:46:8c:d6:5c:90:1e:ac:de:af:23:
                    b7:78:ca:36:b4:01:1b:8f:00:bd:cd:11:70:4f:3f:
                    00:60:48:f7:72:4c:a5:1a:18:21:02:83:a7:7c:5b:
                    42:d0:bd:f2:a5:6e:89:f4:4d:05:a2:42:b6:86:00:
                    84:34:05:5b:f2:c0:97:34:68:fb:78:ab:ca:1d:26:
                    2a:4f:f0:2b:a8:6b:21:5e:ef:07:83:40:ee:0a:e1:
                    b5:4e:c0:2b:b8:00:7e:f2:4b:51:00:f8:b2:2b:da:
                    c7:60:e5:b5:3d:63:d0:93:ae:e2:a3:23:1c:7b:ae:
                    b4:c8:35:c0:cc:d9:14:51:0b:63:aa:96:4a:16:1c:
                    11:06:a0:62:51:fe:bf:1d:15:02:76:4f:3e:72:2d:
                    2e:3a:c1:1c:4e:e4:54:5f:ee:9d:a3:0b:99:68:5d:
                    25:5d:dc:be:63:74:74:d9:80:2f:de:9a:78:4d:ac:
                    78:35:0d:d9:a5:1b:c7:91:5c:06:c0:9c:b3:ba:c7:
                    e0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0A:A2:8A:D8:8C:E2:50:8C:E3:11:3C:62:67:F8:77:9D:6C:94:A3
            X509v3 Authority Key Identifier:
                keyid:8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e3:0a:b1:73:ce:60:37:09:c6:2a:ab:9d:fa:c3:12:41:d3:
         04:6a:b1:88:7c:39:c9:4c:56:3f:93:c0:90:99:af:da:18:3d:
         a8:74:d0:2a:54:d0:40:c0:e2:d7:2a:19:62:85:0e:a5:ed:02:
         5c:ec:24:e4:e2:77:65:06:d2:aa:9d:3d:88:9e:75:f0:e7:7f:
         e1:6c:f8:0f:1a:86:e4:c9:c6:a3:9d:53:b2:23:25:8b:91:5e:
         35:f1:63:e8:8d:4f:b5:9a:61:3e:9b:ae:ee:04:5e:bf:2c:1f:
         af:8a:f1:b4:14:95:f9:8e:1a:4f:64:dc:3f:f2:b7:1b:ca:12:
         eb:c2:bf:0e:7b:81:95:f3:ff:ec:26:20:6a:71:51:18:f4:22:
         31:b6:6a:63:20:43:c5:6c:b2:71:d3:ec:f0:8f:d3:52:54:77:
         6b:7d:47:1e:4e:9f:b7:af:da:93:c0:6f:c2:eb:9a:9d:02:3d:
         07:e0:28:d4:52:d3:dc:8b:1e:78:7f:6a:47:f5:c5:d9:77:bb:
         50:2c:b1:5a:6e:7b:88:65:6e:f2:18:c7:60:9a:65:72:68:82:
         01:1e:9c:d7:16:94:56:34:45:e3:a5:c4:2a:0d:13:3c:03:ef:
         90:56:34:37:0b:f6:db:05:11:3a:46:d6:5b:99:43:98:df:fc:
         dd:95:1d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:21:52 2026 by rpki-client