Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
File:                     d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json)
Hash identifier:          wbB6wZ1e+VJAA0yEgSZDlrt1bL8pU5WuM6Z9A4DHjaM=
Subject key identifier:   29:FE:77:FB:3E:BE:96:66:8D:F8:78:7F:1B:DC:42:36:01:3A:13:45
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Certificate issuer:       /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial:       019F9248B6974B4D2058A822DD668C057967
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
Manifest number:          1287
Signing time:             Fri 24 Jul 2026 04:01:06 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:06 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:06 +0000
Files and hashes:         1: IM14LBYF8xBAMrWihjQwJhZWTFs.roa (hash: L/LoNTKL0OkWZiTSY3TN85uewDjoeQN9VcIBqy5aAq8=)
                          2: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: qOgpyqFexy+bA8c7TXAwbmB0LjHZzlTwB7K7POOShBI=)
                          3: meqA3EJ2dk40MOFtOn3KY_3JqZc.roa (hash: PMvWvyZeQ/F56OIn+Hm8HW0sQqsC8sTM1/3A775LAFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:b6:97:4b:4d:20:58:a8:22:dd:66:8c:05:79:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
        Validity
            Not Before: Jul 24 04:01:06 2026 GMT
            Not After : Jul 25 04:01:06 2026 GMT
        Subject: CN=29fe77fb3ebe96668df8787f1bdc4236013a1345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:60:54:fc:d1:8c:dc:a5:79:3f:44:bb:0d:
                    76:4b:94:58:88:91:0d:72:21:85:98:c2:8d:11:53:
                    95:f4:59:ab:4e:32:9d:9f:0c:c9:98:73:3b:af:8a:
                    c4:37:74:4d:73:3b:fb:b7:f8:82:02:fe:e0:4e:4b:
                    e6:bd:98:85:85:e4:28:2f:86:cb:1c:fc:7c:35:12:
                    48:1b:29:46:25:df:61:5e:86:c1:89:73:6e:ce:ec:
                    d3:36:51:b5:1d:00:7e:3d:3e:69:62:5e:7b:5f:26:
                    58:04:e7:93:68:dd:5d:88:8e:e0:c5:25:ad:39:b3:
                    cb:0f:a0:90:22:f9:3f:ce:c4:e7:f5:6d:1d:4b:aa:
                    6b:8c:a9:67:87:67:d6:ee:7f:0f:29:b3:2a:ae:ea:
                    4c:0c:c3:46:49:78:03:e7:90:30:48:da:96:7a:1d:
                    dc:20:5f:15:69:d9:69:cd:cb:b4:7b:eb:12:38:6d:
                    9e:09:86:5c:4d:95:6b:f4:40:4d:56:f4:cc:64:10:
                    f6:07:28:d6:56:53:e7:b3:9f:94:3c:e6:d8:18:0e:
                    ca:b8:c0:44:cd:2f:14:ab:09:50:51:f0:27:4b:3d:
                    bf:60:85:39:21:1a:5d:73:82:57:b3:c3:53:3d:e4:
                    6b:32:0e:f1:d0:84:d2:1d:a2:54:35:53:01:1c:d0:
                    14:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FE:77:FB:3E:BE:96:66:8D:F8:78:7F:1B:DC:42:36:01:3A:13:45
            X509v3 Authority Key Identifier:
                keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:58:c9:ec:f3:eb:53:a6:e1:02:d3:9f:64:e2:67:85:cd:eb:
         36:38:20:f8:1f:c6:1c:e2:dc:20:e3:f4:e3:3a:9e:b4:55:0e:
         12:3d:ff:88:b9:aa:17:4c:ff:5e:58:4d:a1:e2:af:82:e7:aa:
         e1:97:45:5d:b0:be:47:2d:bd:df:25:5f:55:78:fb:39:5f:31:
         d2:8b:e6:d1:35:ab:c5:85:f2:73:d5:73:7b:84:af:85:52:b0:
         3a:80:c1:9d:84:00:73:e5:ae:72:db:0c:a4:2a:08:d8:80:a2:
         eb:e1:05:1e:91:a5:d5:f5:85:5b:31:bf:b4:db:8c:47:77:8d:
         84:3e:5f:34:0e:d5:c2:81:f5:be:99:68:cd:85:32:e7:3e:94:
         0d:ac:7b:a4:f8:ce:f9:35:ae:06:c6:67:8c:00:db:79:64:b0:
         86:45:8e:be:17:e4:1d:3b:e7:df:78:fc:6c:48:7e:92:91:55:
         31:e3:95:25:ac:f8:2e:12:1d:55:d7:c0:b5:4f:cd:4e:f0:e0:
         95:e4:6d:41:17:ea:57:11:4c:26:f7:fe:0f:40:75:57:c8:a2:
         db:64:c4:4e:45:a0:34:dd:67:2b:e3:5e:0a:6e:c5:f7:af:8a:
         47:72:56:8c:b7:fd:0d:38:82:1e:eb:1e:d8:b7:9a:bc:bc:b5:
         39:15:6a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:28:54 2026 by rpki-client