Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.mft
File:                     JaizJB9Uy4zEo2EkJxnto1ALWPM.mft (raw, json)
Hash identifier:          OC3cwHCl3ATvQRVDRh+x4o165JTgfJgViW6gNJPf7u4=
Subject key identifier:   1D:E9:7B:C9:59:CE:17:A8:5F:E5:F2:08:EA:CF:B5:1F:0E:55:48:41
Authority key identifier: 25:A8:B3:24:1F:54:CB:8C:C4:A3:61:24:27:19:ED:A3:50:0B:58:F3
Certificate issuer:       /CN=25a8b3241f54cb8cc4a361242719eda3500b58f3
Certificate serial:       019F921171778B36932423E1DD0CBAE8FDB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaizJB9Uy4zEo2EkJxnto1ALWPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.mft
Manifest number:          0107
Signing time:             Fri 24 Jul 2026 03:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:44 +0000
Files and hashes:         1: JaizJB9Uy4zEo2EkJxnto1ALWPM.crl (hash: ve5meLTCMSuAWv7OpGzi9ZsFoeYQmYoLMP+0bwBzlwI=)
                          2: f8IMUeFD4nC8SZ-FnXMVQXrQOmQ.roa (hash: 4sDgm+XOigmig9qbzZKlgtnrz0wx8lArACN7Tm+Zbek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaizJB9Uy4zEo2EkJxnto1ALWPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:71:77:8b:36:93:24:23:e1:dd:0c:ba:e8:fd:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a8b3241f54cb8cc4a361242719eda3500b58f3
        Validity
            Not Before: Jul 24 03:00:44 2026 GMT
            Not After : Jul 25 03:00:44 2026 GMT
        Subject: CN=1de97bc959ce17a85fe5f208eacfb51f0e554841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2e:43:c7:09:11:9b:5b:ae:0a:20:11:05:61:
                    bf:2b:8f:26:67:de:67:48:2f:29:d8:68:e2:88:5e:
                    7a:88:68:b5:9d:76:85:44:f0:29:10:48:07:b1:9c:
                    eb:ca:43:d7:c0:df:74:65:5c:d4:98:e8:7d:a7:90:
                    9b:d1:2e:71:90:d3:09:9d:d2:49:94:92:ed:73:e4:
                    b9:59:b6:05:4e:26:c5:66:86:70:9c:3b:66:93:3c:
                    55:ca:38:15:cd:cd:2e:b9:d2:4b:6b:fc:bd:de:b9:
                    81:22:5d:76:99:95:11:d9:6c:a6:cd:eb:1a:37:ea:
                    ba:2d:9c:a3:da:43:85:a1:40:ab:14:7f:86:5a:72:
                    09:c4:c5:86:79:44:1b:2a:55:b9:41:fb:3d:74:59:
                    f1:3f:b3:5b:b0:72:0f:1f:b0:b3:50:c7:bc:67:4b:
                    0b:79:22:2f:5d:72:1a:c9:d7:c4:93:00:96:96:11:
                    17:47:03:a2:55:dc:21:cd:aa:e3:24:cb:ff:e1:6f:
                    aa:5f:d9:d4:22:f9:c2:8f:93:eb:87:e6:13:c6:a9:
                    8a:1a:89:2b:dc:02:93:5d:f5:a6:ee:1b:6a:d3:27:
                    e2:f4:08:00:51:a0:5d:e2:36:b1:c3:1e:c3:3a:59:
                    e4:33:f1:2a:2d:e3:4a:c0:0a:27:22:c4:41:7f:8e:
                    a0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E9:7B:C9:59:CE:17:A8:5F:E5:F2:08:EA:CF:B5:1F:0E:55:48:41
            X509v3 Authority Key Identifier:
                keyid:25:A8:B3:24:1F:54:CB:8C:C4:A3:61:24:27:19:ED:A3:50:0B:58:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaizJB9Uy4zEo2EkJxnto1ALWPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:fa:3f:21:39:fc:7c:1d:b8:c7:ef:7f:e7:47:4f:20:6e:64:
         33:1c:2d:80:63:d2:98:63:79:21:4d:4d:6f:df:a7:29:f0:91:
         24:75:18:6c:cd:66:f5:a1:1b:ba:c4:7d:22:59:18:66:69:e6:
         fe:d7:99:b8:6d:44:30:77:1f:d6:2f:d5:ab:9f:b2:43:08:ac:
         88:54:b7:e4:fd:3b:2d:21:1a:bd:1b:bf:27:35:94:40:3d:b2:
         1e:18:6e:b7:25:a2:bc:1b:89:e4:60:e8:0f:08:62:fa:3d:08:
         00:d5:05:29:20:ec:7b:44:9c:a5:9f:85:a8:35:a4:66:ce:0c:
         88:f0:c8:95:c6:9d:8d:b4:de:27:d9:e2:71:21:8f:08:81:e4:
         9d:a1:a9:7b:f2:74:6c:f4:bc:9c:6a:c3:07:b7:f5:a7:8e:c6:
         4c:5d:28:d6:32:0c:00:88:11:d2:f7:6a:f9:9b:00:f3:37:c7:
         b5:5c:3d:b8:f7:00:7c:44:d0:7d:6c:f4:4d:ec:89:38:4d:f2:
         06:99:58:d6:70:1d:d9:e2:fd:f5:04:e0:b2:d7:0d:5c:26:8a:
         c8:15:d9:67:92:5c:4f:06:7d:db:c5:e6:28:43:44:dc:22:4f:
         4a:14:22:d6:c6:0a:cd:2b:46:48:2a:46:c4:d3:b0:a0:f3:b3:
         d7:0e:d1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:27 2026 by rpki-client