Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.mft
File:                     JjRrQucioj8zB71y9XN2LAJPI4U.mft (raw, json)
Hash identifier:          59AffrySfuU+3Ra9uD0cpy8Ni84LTYIFRJPd+UQTP0s=
Subject key identifier:   89:90:38:8D:3C:01:97:07:8F:BF:FE:A4:D4:41:A6:C9:50:4B:0C:78
Authority key identifier: 26:34:6B:42:E7:22:A2:3F:33:07:BD:72:F5:73:76:2C:02:4F:23:85
Certificate issuer:       /CN=26346b42e722a23f3307bd72f573762c024f2385
Certificate serial:       019F91A37592A9766EE6FC77572A034FFA13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JjRrQucioj8zB71y9XN2LAJPI4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.mft
Manifest number:          D1
Signing time:             Fri 24 Jul 2026 01:00:36 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:36 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:36 +0000
Files and hashes:         1: JjRrQucioj8zB71y9XN2LAJPI4U.crl (hash: 3dXgTfLm8o/ZGB84FKf+1s2dc0MWRl+q4Z+2MXaRy1E=)
                          2: q8RepG1EYgx-WqxItUPX_OH0OX0.roa (hash: b4kZ60ZayB+5ne7ycneOFCjARrzoZ1efrTrEpXK66A8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JjRrQucioj8zB71y9XN2LAJPI4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:75:92:a9:76:6e:e6:fc:77:57:2a:03:4f:fa:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26346b42e722a23f3307bd72f573762c024f2385
        Validity
            Not Before: Jul 24 01:00:36 2026 GMT
            Not After : Jul 25 01:00:36 2026 GMT
        Subject: CN=8990388d3c0197078fbffea4d441a6c9504b0c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7f:89:9e:16:9c:d7:dc:b9:82:5b:06:0d:fc:
                    c6:b7:5f:9c:cd:43:b8:d0:63:f2:c7:bf:02:7d:3a:
                    af:ce:31:1c:84:bd:34:6d:7e:d7:88:9e:fd:fa:7f:
                    a2:be:f0:db:9b:f5:a0:c5:8b:c8:9b:75:35:cb:08:
                    f8:67:61:f9:a8:12:b4:cc:20:c1:61:93:f5:8a:3b:
                    fe:32:f6:a6:98:23:4f:a0:fc:0a:35:67:5d:e5:81:
                    d1:bb:44:ce:7b:fa:ac:ad:33:54:ba:8b:80:7c:c8:
                    4a:c8:53:e5:89:4d:64:5f:4c:4a:e9:17:3f:5b:8d:
                    c5:68:17:57:7e:0d:24:78:8f:d8:59:9b:59:8f:17:
                    4b:ee:a4:7f:d5:9e:0e:fa:6e:14:0c:86:71:e8:0a:
                    32:f2:62:f9:58:0a:3b:15:18:11:c2:93:47:26:7d:
                    17:09:5d:c4:6a:22:60:93:1c:44:f2:c9:34:a0:5e:
                    31:6e:87:cf:8a:fe:dd:88:01:58:7f:a2:31:f2:5e:
                    4d:86:62:35:d3:57:df:32:8f:62:5c:64:7b:44:ac:
                    ee:a4:df:3d:85:c5:13:9a:7e:77:39:2a:75:f6:fb:
                    88:db:cc:24:aa:4e:1c:1b:d4:c9:bd:2d:00:d9:8f:
                    33:96:01:6f:e6:a1:cc:78:3a:2b:56:02:04:63:35:
                    b8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:90:38:8D:3C:01:97:07:8F:BF:FE:A4:D4:41:A6:C9:50:4B:0C:78
            X509v3 Authority Key Identifier:
                keyid:26:34:6B:42:E7:22:A2:3F:33:07:BD:72:F5:73:76:2C:02:4F:23:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjRrQucioj8zB71y9XN2LAJPI4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ef:d5:82:d0:32:2a:57:4e:2e:68:b8:28:1c:8b:bf:26:b4:
         ab:e7:0e:f4:fb:b3:e6:53:fb:4c:74:a3:5a:78:4d:93:a3:72:
         d3:cc:99:df:dc:27:1c:b0:ce:7c:43:fe:c7:78:58:fd:cf:89:
         81:38:81:ba:1a:aa:91:f7:0e:65:ce:1b:71:b1:13:a1:92:0c:
         c2:ed:71:ef:22:a2:28:99:6d:1c:74:2f:f1:4e:aa:d5:4f:4c:
         29:42:6f:76:64:05:83:5f:3c:2c:58:e9:d3:ea:59:12:df:e5:
         02:ca:8f:68:26:c1:ea:52:6c:0b:51:5f:f5:e5:c7:32:53:51:
         fb:0d:5d:96:a4:f3:d1:d7:f2:81:d0:21:56:e5:6e:1f:35:a4:
         5c:90:c6:9d:89:f5:32:86:76:37:6a:d0:cc:f0:90:44:1e:e8:
         1f:a0:42:c8:6d:09:e0:04:28:f9:8d:12:da:59:f5:51:3f:9c:
         dc:b4:2d:9c:8e:19:79:91:f9:c9:5d:01:2f:3d:79:22:09:b6:
         07:04:a4:4a:fc:ff:17:d9:02:a5:a1:74:61:ea:33:4d:3f:d9:
         79:ce:22:53:63:5f:70:39:66:b5:51:b1:df:62:33:bf:ef:9b:
         6d:52:ce:30:3c:c3:03:f9:ca:73:42:01:3a:db:0f:0d:fd:02:
         64:77:3f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:25:51 2026 by rpki-client