Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft
File:                     mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft (raw, json)
Hash identifier:          QGxGsX9XYo01TuLXMeJBSAfvEPtH+u/q9jqmBzvjyQc=
Subject key identifier:   63:70:B3:E6:B4:75:79:7D:47:B9:EB:8E:D7:19:49:8E:83:C3:12:04
Authority key identifier: 9A:34:8D:83:AA:63:C0:F8:1C:E7:19:5F:86:69:E3:B7:86:C6:02:A1
Certificate issuer:       /CN=9a348d83aa63c0f81ce7195f8669e3b786c602a1
Certificate serial:       019F9059EBC1A97EF87FCF7BDDE59DC5A5F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft
Manifest number:          01CD
Signing time:             Thu 23 Jul 2026 19:00:39 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:39 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:39 +0000
Files and hashes:         1: 1-OsNQ-5vJPgOeI_eWcWRJz9U2HU.roa (hash: w6u2qov7OdVcpuJ2RAOrKnYaPXgeHeSBBHrfoYU/V+I=)
                          2: mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl (hash: 8srUzR+MadzQu7HnrYtlGkl400yZXqPc2iorI2ft+rI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:eb:c1:a9:7e:f8:7f:cf:7b:dd:e5:9d:c5:a5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a348d83aa63c0f81ce7195f8669e3b786c602a1
        Validity
            Not Before: Jul 23 19:00:39 2026 GMT
            Not After : Jul 24 19:00:39 2026 GMT
        Subject: CN=6370b3e6b475797d47b9eb8ed719498e83c31204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:0e:7f:b0:b7:2e:fc:9d:df:c2:9a:bd:8c:
                    a9:64:06:a8:b8:94:96:91:83:ac:47:45:47:87:3a:
                    f3:b9:1e:1f:d3:ec:3e:58:92:98:9a:e1:bd:13:4b:
                    55:85:b2:b7:b8:7c:2b:48:82:3b:a8:39:c4:16:d3:
                    48:bb:ac:b2:39:0e:00:c7:a8:e8:b6:c4:44:b9:0a:
                    9a:93:41:09:a3:97:ed:bc:1e:76:20:89:5d:0d:d2:
                    ed:c9:85:2d:af:20:54:6b:4c:d6:d3:5b:3f:0b:49:
                    93:ff:5f:8d:9f:bb:30:2f:ff:53:ec:d2:3d:47:0f:
                    ea:85:ce:86:f0:f9:60:bc:48:7a:c8:f3:c1:8d:f1:
                    8c:44:0e:ed:88:6d:50:8a:27:8b:6c:fb:bc:38:22:
                    9d:d7:a4:6a:fd:bf:29:f8:fb:66:9a:ab:2f:c5:64:
                    66:1e:0c:49:6a:86:83:c2:9e:fc:12:8d:6f:3e:f6:
                    17:67:ad:6b:65:f0:e3:88:90:8d:03:ff:fb:ac:7a:
                    87:73:39:a5:b8:ef:04:f0:7c:a9:4b:90:6e:36:87:
                    a9:93:4b:33:25:03:1c:d2:1a:09:6e:a4:78:c0:77:
                    19:15:49:43:32:cc:82:a3:55:12:7c:b2:79:3a:f2:
                    57:ab:b2:f8:dc:80:21:c4:0e:c0:83:a9:66:aa:db:
                    cf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:70:B3:E6:B4:75:79:7D:47:B9:EB:8E:D7:19:49:8E:83:C3:12:04
            X509v3 Authority Key Identifier:
                keyid:9A:34:8D:83:AA:63:C0:F8:1C:E7:19:5F:86:69:E3:B7:86:C6:02:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b1:70:93:6e:6a:f4:64:07:d1:ce:e5:18:50:ae:e8:06:40:
         f3:a2:86:50:22:2d:f4:c1:d4:4f:c5:24:29:98:08:60:7e:85:
         8f:ad:11:a1:82:60:02:b6:f7:ba:7d:75:a2:c6:1a:51:84:02:
         bf:27:0f:54:b0:bc:d7:4a:ff:93:fe:9f:85:c0:f7:22:62:f2:
         a0:54:af:56:b4:a1:e0:17:ce:b0:ca:2a:5b:8d:50:4b:63:88:
         6c:97:ab:8d:b8:c0:b8:ad:73:2e:bf:7f:8f:50:a9:f1:2b:43:
         c7:e8:34:ef:7b:bd:b0:c9:8c:0b:2b:bc:93:9a:ca:1b:5b:d4:
         e2:e5:c6:4b:11:93:d9:88:64:c2:16:07:8a:62:69:48:c6:93:
         26:60:81:b1:87:12:60:c1:73:5a:3a:0e:7e:96:f4:04:71:2c:
         77:3c:ad:2a:0f:34:1a:7f:de:0d:a5:9f:41:96:72:ce:a5:c3:
         86:08:7f:db:54:d0:6d:ec:36:83:60:46:0b:f6:a7:9e:c8:4b:
         2e:d6:58:d4:03:82:42:8f:4b:f7:7c:c3:a3:86:cb:3d:f3:01:
         cc:54:ec:cb:4c:97:8d:16:51:9a:5c:a1:89:9c:9e:58:b3:d7:
         4d:39:12:46:1f:7f:ea:10:f2:d9:f0:08:e9:d5:8b:7c:aa:f6:
         da:32:6a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:45:42 2026 by rpki-client