Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
File:                     jxpRl9YyTu7SVrJoYeGiSshjXTc.mft (raw, json)
Hash identifier:          IZvSWORJlWVpAiL3koI0iPkjeypvmBLkeA5mL2ygTbA=
Subject key identifier:   0C:DC:2D:C7:73:F4:55:30:35:E8:2E:11:BF:2B:A4:AF:91:FB:D0:DD
Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
Certificate issuer:       /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Certificate serial:       019F8FB575FE089D03B6A4FE072A92FB3FFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
Manifest number:          06BE
Signing time:             Thu 23 Jul 2026 16:01:01 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:01 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:01 +0000
Files and hashes:         1: MhtnbItfLmCzaCDCaCIpwP7CYj0.asa (hash: Z9SK9w4cz65U5hhOIchhgo/LJB/zpmrUHbelZFQj9A8=)
                          2: jxpRl9YyTu7SVrJoYeGiSshjXTc.crl (hash: pJ/mTBTqAxcJmRIfcb4RtMYeosTpmcX6XWsBY6K0pTs=)
                          3: kiP1Rz2Pye239_k7zKt16ngvMws.roa (hash: yBmHRNv/foMNtquyhN6WcywCwjnz3nqPI2PwBXBJSX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:75:fe:08:9d:03:b6:a4:fe:07:2a:92:fb:3f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
        Validity
            Not Before: Jul 23 16:01:01 2026 GMT
            Not After : Jul 24 16:01:01 2026 GMT
        Subject: CN=0cdc2dc773f4553035e82e11bf2ba4af91fbd0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f9:d2:19:b7:b4:86:0e:81:18:5e:7f:32:03:
                    14:a6:5d:68:5b:14:c9:12:53:8b:1f:1c:dd:14:85:
                    6a:65:39:d2:89:f5:bc:10:d3:60:1b:1b:5f:5a:c1:
                    ae:d8:50:da:c8:54:55:e0:fd:72:bf:ee:63:fc:23:
                    37:f6:ae:d0:16:97:96:3d:bd:e2:32:2c:3b:fa:ae:
                    92:43:b3:f1:a1:45:ed:9b:ae:99:e0:54:1c:72:27:
                    6d:44:21:2f:c7:1d:8e:3f:76:dd:ab:ec:ee:fd:76:
                    68:f3:93:50:39:13:5a:03:05:a5:e2:7c:31:45:49:
                    22:6b:74:8d:0c:de:e9:37:d0:20:89:e2:db:16:90:
                    07:da:94:79:03:df:c1:d2:3c:c4:98:0a:bf:5d:7c:
                    0b:43:e6:58:f6:f6:11:e3:ac:ab:d9:be:a9:85:b6:
                    b1:a9:51:dc:4f:85:d9:82:7f:29:57:2b:79:fd:3d:
                    72:49:a3:91:39:cb:ab:31:9e:cb:5e:88:9d:22:3f:
                    ea:c8:94:65:e6:e7:4a:9e:cd:45:fb:da:3f:21:68:
                    c0:75:19:d5:1d:48:c9:1b:73:81:5f:04:f9:b1:86:
                    f8:c5:bd:90:7a:a9:1c:0f:d3:fc:f5:8e:db:cc:3c:
                    1f:5f:23:5b:5a:32:80:81:4b:10:ed:db:47:22:ca:
                    ca:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DC:2D:C7:73:F4:55:30:35:E8:2E:11:BF:2B:A4:AF:91:FB:D0:DD
            X509v3 Authority Key Identifier:
                keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:56:57:f0:ad:22:13:2f:e4:a4:cb:8c:a2:bb:99:7e:21:ca:
         ff:58:f1:94:97:2b:98:bc:f5:dc:41:a6:c1:55:b9:38:3a:6a:
         70:56:ef:10:e5:e9:c1:0d:07:9c:60:9d:40:fa:c0:ee:df:5e:
         48:c8:17:9c:93:2a:13:d3:cc:04:cc:5b:5f:29:7b:83:d4:e0:
         0c:8c:b6:fe:e2:53:04:79:48:e5:aa:83:9d:44:55:f8:89:8e:
         9e:63:66:5d:32:7e:b2:ce:05:eb:a1:46:69:1f:7b:2b:8c:42:
         d3:4e:2f:09:09:f3:fe:e6:0b:66:c0:8a:9e:c0:85:18:7a:dd:
         09:a8:99:e8:a2:fe:8e:66:b1:80:e4:ed:62:4e:c3:19:34:50:
         ad:a8:4a:bc:5e:46:c9:a2:96:3d:9a:38:4d:80:2f:e1:58:24:
         07:07:6b:9f:0c:54:ba:77:63:02:1b:2f:c5:6b:01:b3:8c:18:
         a5:f2:4e:63:b5:5f:0a:de:c1:89:e5:34:f6:65:ef:94:05:b8:
         ab:56:02:9a:3a:01:51:2e:95:29:bd:55:36:b4:73:0e:28:d0:
         24:6e:34:e7:b0:50:d7:86:bd:ef:11:74:34:01:b4:59:11:96:
         a7:a7:80:99:7d:c7:55:d7:64:e8:cd:81:2f:70:18:46:35:4e:
         7e:b2:24:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:02:57 2026 by rpki-client