Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
File:                     jw23m-h704ZVurcDpg53TE1sI1c.mft (raw, json)
Hash identifier:          dVLqk+sXHQvk+pCy/mfTi+i9cRvHur+2vx/P8wkqmew=
Subject key identifier:   F7:93:5F:49:23:04:57:84:09:4D:41:56:C5:79:BC:BF:AA:F1:60:A5
Authority key identifier: 8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57
Certificate issuer:       /CN=8f0db79be87bd38655bab703a60e774c4d6c2357
Certificate serial:       019F9549C11822CBCF264C5C0F6A59E76934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 18:01:06 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:06 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:06 +0000
Files and hashes:         1: gpNyyPFk3KKe68AIXHTHDLuNtSQ.roa (hash: 3RXb4qGbt/U1/6emGhsmKxRYbAy4tLr4uQSkGzFnik0=)
                          2: jw23m-h704ZVurcDpg53TE1sI1c.crl (hash: nPqu1yIE3wkxt9SyWHZePhJZN9Xi2uyl4D4HtCl8lSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:49:c1:18:22:cb:cf:26:4c:5c:0f:6a:59:e7:69:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0db79be87bd38655bab703a60e774c4d6c2357
        Validity
            Not Before: Jul 24 18:01:06 2026 GMT
            Not After : Jul 25 18:01:06 2026 GMT
        Subject: CN=f7935f4923045784094d4156c579bcbfaaf160a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:1e:b4:52:ae:a0:4c:b7:9e:e9:b0:75:f1:
                    09:18:ff:dc:b3:af:87:8f:d5:3f:4b:26:1b:93:f5:
                    e2:2d:46:6e:3c:2c:6c:cb:87:61:2f:fe:ca:d8:60:
                    5f:65:d2:c1:de:60:a6:5c:be:b5:c4:4a:f3:aa:b1:
                    e9:1d:65:69:d1:79:29:f8:d6:e7:27:9c:20:13:46:
                    2b:81:e5:a9:4b:78:b5:ca:94:eb:07:b8:31:ab:c7:
                    45:43:dc:66:86:f8:59:49:6b:d3:0c:b4:f2:aa:a6:
                    ea:1f:54:cc:ff:ff:fb:69:4d:a5:ae:ff:b2:c3:26:
                    b8:5b:35:e7:44:03:fe:bf:1b:10:e6:e1:cc:f2:ae:
                    76:88:1a:8b:b0:ed:a2:2c:2c:4a:6b:01:e7:30:61:
                    b3:60:9c:d3:ca:14:18:02:ef:60:23:42:38:ed:34:
                    68:5e:32:6c:5f:9e:66:24:90:cb:f5:fe:cb:21:2c:
                    84:d8:93:5e:75:9e:42:55:b6:0d:cb:25:21:8a:99:
                    b0:f4:a2:5a:0e:33:02:2d:47:b1:10:e0:18:c2:2b:
                    4d:61:40:c3:ca:10:14:95:a3:9d:6e:ec:8a:8b:dd:
                    62:78:81:cb:12:20:3b:4e:ff:10:28:48:0e:1f:3c:
                    13:d0:a5:23:43:20:43:6f:02:8c:37:5b:d4:ab:84:
                    ce:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:93:5F:49:23:04:57:84:09:4D:41:56:C5:79:BC:BF:AA:F1:60:A5
            X509v3 Authority Key Identifier:
                keyid:8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:34:42:ba:e5:54:47:53:38:75:27:f3:41:d9:62:b1:71:61:
         f0:0a:ec:34:8c:a5:a5:60:e7:b2:6c:8e:78:78:65:29:ea:66:
         03:02:bf:15:47:ad:4c:bd:9e:54:bb:d2:f3:47:a9:37:a2:7b:
         df:48:25:ab:cf:8a:48:36:6c:43:d5:e3:f7:86:46:bc:3a:67:
         b6:36:f7:89:94:83:3e:5e:69:f4:73:43:7a:61:83:f8:f8:0f:
         7d:88:8b:37:21:1a:d8:75:10:1f:0c:6a:6e:e7:d3:f2:9f:67:
         be:b6:34:f8:c5:3a:8b:9a:58:4b:6d:8a:59:5e:75:14:b5:85:
         2f:5b:43:b0:9f:1c:74:7c:a1:8b:b2:da:28:f9:aa:fa:e5:18:
         c1:15:10:63:85:0f:87:03:e3:5a:db:3d:37:fe:b2:e3:ab:d0:
         c9:a4:8e:3f:a5:e6:01:e6:50:4e:a8:3b:b4:e6:fb:e3:eb:e3:
         7b:0d:c2:09:4e:ec:11:b0:2a:1c:64:11:02:27:2a:a6:90:5b:
         6a:fe:43:20:64:0b:54:da:af:a5:8c:5d:ea:75:12:00:5e:1a:
         5d:16:cc:d3:f6:ef:2f:ec:e9:04:a1:7a:fb:63:cd:78:2e:e7:
         20:64:6b:36:bd:2a:22:88:78:ed:b7:c7:3e:ea:16:9d:12:65:
         5b:80:74:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:15 2026 by rpki-client