Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
File:                     JNnaT_sbttJz3hutXbvw0f9H8M8.mft (raw, json)
Hash identifier:          ubHnIRmAxDXVf5/17LqXx5tbr9ZKtdd1zaHBM5UfksA=
Subject key identifier:   87:F2:67:B4:3E:9D:44:9B:DF:22:55:D6:4D:94:AB:AC:A3:C9:45:70
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Certificate issuer:       /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial:       019F921159F44056E18FE5C2D1A169BFE049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
Manifest number:          0D4A
Signing time:             Fri 24 Jul 2026 03:00:38 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:38 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:38 +0000
Files and hashes:         1: 1-rCOCCP6oYHahsl-IY5BNjfe_vg.roa (hash: P7GfDsSTEb0lAdWkt0ng9MRklfQcjLO/lzvEnqcg5NY=)
                          2: JNnaT_sbttJz3hutXbvw0f9H8M8.crl (hash: ow2aUnGZc1jIhMHAv/lPRxt0ySGYoFJfz7mmVC8jqd0=)
                          3: LSqdZqPLeMj0WF3bOfGVjXrkKPg.roa (hash: OIE4+P3PEn/I07aEV9GQuGJcuXIcFIr+O77IW6ZxCxs=)
                          4: lZfWHFdXsQrVGHZWgIb1guhUVJ4.roa (hash: gOiM7w/t6FJGTbY9fy4zmAi1p6k9tw1xjNKGmizdc2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:59:f4:40:56:e1:8f:e5:c2:d1:a1:69:bf:e0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
        Validity
            Not Before: Jul 24 03:00:38 2026 GMT
            Not After : Jul 25 03:00:38 2026 GMT
        Subject: CN=87f267b43e9d449bdf2255d64d94abaca3c94570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c6:04:9d:13:a1:97:ec:0b:6d:34:8e:83:d3:
                    da:05:84:44:e1:4b:60:60:e2:c6:aa:1d:b1:f9:33:
                    27:c8:4f:17:e4:80:52:38:ca:5d:01:c2:92:dd:d0:
                    1d:c3:a5:bb:2f:0f:4a:ed:22:28:34:2f:97:f1:e9:
                    23:ed:54:82:b1:9b:72:d3:10:5a:9c:57:61:99:97:
                    72:65:2b:1c:76:6e:72:4e:5a:a5:43:12:78:b9:d3:
                    8d:8d:75:48:99:a2:32:4f:11:35:f8:1a:41:ea:48:
                    b8:87:76:60:ae:5b:de:b3:2c:27:50:ea:01:98:af:
                    51:8f:5b:95:19:56:49:23:95:ed:11:d8:2e:73:46:
                    24:53:b0:99:df:5e:15:5b:68:23:25:bc:cb:a2:02:
                    24:91:79:07:91:3d:9c:4c:bb:1b:53:85:1f:56:49:
                    ef:62:5b:ff:08:8f:cc:32:92:6f:fa:e5:9d:ce:88:
                    0d:dd:a5:0e:be:e7:1f:ac:1c:05:d3:fb:91:98:4c:
                    25:9a:3d:11:a1:1e:9f:84:2b:55:ed:47:eb:7b:df:
                    46:a7:b2:8b:9c:c8:5b:20:11:cc:43:ca:73:aa:3d:
                    7b:5c:e4:f8:b5:5b:7b:fa:fc:9b:90:b3:4c:2c:35:
                    f3:b3:55:39:3b:34:00:ed:3b:d2:c6:cc:e0:0c:d4:
                    10:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F2:67:B4:3E:9D:44:9B:DF:22:55:D6:4D:94:AB:AC:A3:C9:45:70
            X509v3 Authority Key Identifier:
                keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d8:a5:3c:79:39:fb:92:65:77:16:f0:ac:11:38:74:12:21:
         8c:c5:94:a0:f7:86:a4:11:96:5d:c2:08:bc:86:1a:28:63:b5:
         54:5a:93:b7:70:38:5a:39:bb:43:ae:7d:16:76:1a:bd:0e:70:
         55:5c:19:8d:1a:fa:dd:22:28:a9:79:3a:ec:61:4b:7a:8b:93:
         20:13:a5:c1:c3:57:08:02:e1:66:c0:2f:26:17:d4:1e:04:be:
         98:d0:67:5b:27:bc:3c:b9:9e:f3:76:a0:e6:d1:21:0d:e7:cb:
         a0:bf:dc:56:fb:d6:4a:44:e2:9d:c3:c4:7d:7b:57:1c:44:8f:
         96:0b:79:35:ec:4b:2b:b3:95:e3:ea:b6:a6:8c:99:b1:40:7b:
         1d:02:82:a1:f1:6d:3c:e6:bf:0e:b9:66:c3:44:53:82:46:97:
         19:69:f0:19:09:96:df:7f:ac:ff:66:41:c7:fc:e2:b2:4c:d8:
         18:a8:05:da:3d:6e:30:51:b7:92:0a:f5:95:fd:90:cb:5d:c2:
         e7:a0:a0:5f:ff:93:f5:f0:16:8d:d6:13:3e:00:2e:44:2f:4b:
         93:3b:e9:fe:23:30:d0:10:fd:04:5d:bd:6d:59:12:69:2d:94:
         87:3b:21:71:41:c7:78:83:d5:7a:71:50:93:6e:f8:f2:24:3e:
         90:43:77:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:40:08 2026 by rpki-client