Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File:                     JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier:          qoxDMwG6XCME4V8qNpd1m9N4Z0XaWf8NQwPuSHjM41I=
Subject key identifier:   4C:20:5F:D7:37:10:36:D1:67:02:96:11:2F:D3:63:49:08:E1:19:08
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer:       /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial:       019F9248BF13A0E9837496314EB02BF8CD32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number:          165C
Signing time:             Fri 24 Jul 2026 04:01:08 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:08 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:08 +0000
Files and hashes:         1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: p/vyzznZ3FRg6sdZhozWNcuGZwVxMhuLulmvdub+seE=)
                          2: UTiXqpOnXnL7SsApTxG7VdzoF_M.roa (hash: xvzfHxziNr26zYJwG+snS1syo+ysKboS5MzS0bjlx5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:bf:13:a0:e9:83:74:96:31:4e:b0:2b:f8:cd:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
        Validity
            Not Before: Jul 24 04:01:08 2026 GMT
            Not After : Jul 25 04:01:08 2026 GMT
        Subject: CN=4c205fd7371036d1670296112fd3634908e11908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6e:11:42:03:96:a8:85:55:ae:59:4d:9d:68:
                    9b:49:07:7c:e8:15:ed:1d:3b:b4:9c:ff:a0:bb:28:
                    a4:b9:44:6d:5c:c6:de:fa:d5:8e:ab:55:58:28:c9:
                    2e:f5:85:f2:dc:89:a7:36:81:a2:75:fa:bd:c9:76:
                    d6:36:0c:e5:a8:d1:10:3b:0c:d7:e7:78:1c:e3:63:
                    a5:f7:f8:17:00:68:95:87:48:6a:be:10:5f:0b:20:
                    aa:fb:33:02:9e:d9:52:b3:81:8f:9f:f0:98:3a:08:
                    df:06:b9:7b:c7:b2:90:fa:72:f5:1e:cd:32:03:5e:
                    38:c8:7d:de:e6:88:a7:6b:60:5a:af:7e:0c:cf:9a:
                    ae:12:9e:a9:54:55:8c:c8:de:7c:11:08:38:31:f9:
                    0c:fe:d5:75:8e:3f:87:a4:6a:79:b1:17:ca:c5:ec:
                    de:88:80:72:99:0e:b1:f2:5c:8b:5c:4a:19:5b:32:
                    79:39:bf:12:41:de:27:f5:c2:b7:30:8f:52:3e:6e:
                    e4:9f:d4:37:29:65:ba:97:d5:de:e7:39:f8:bb:ac:
                    19:8d:a4:8c:71:d4:61:06:ab:a4:d5:77:04:3a:a9:
                    9a:bb:3c:22:56:01:3f:46:c1:d5:83:65:b6:07:41:
                    61:33:68:80:21:e3:9f:09:5e:9a:3c:82:af:c9:36:
                    7f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:20:5F:D7:37:10:36:D1:67:02:96:11:2F:D3:63:49:08:E1:19:08
            X509v3 Authority Key Identifier:
                keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:5f:68:94:be:4f:e7:f0:36:0e:3c:c9:ed:c6:ec:26:db:1e:
         30:eb:0b:db:7c:df:93:9e:12:33:f2:bf:6f:50:72:bc:71:30:
         51:80:fe:2a:f3:e8:5b:4d:d2:44:21:83:1b:1e:09:d4:33:39:
         5a:d8:9e:3b:97:a5:cb:1b:4d:ff:1e:e0:53:88:36:f1:67:47:
         8f:de:fc:4d:bf:d8:e9:48:b2:45:d3:94:a2:8c:fa:8f:fb:0b:
         01:42:90:1e:b0:7a:62:91:11:2c:5f:32:f5:55:02:59:ae:90:
         63:75:a5:f8:ff:12:a9:02:a9:db:fd:aa:a3:c7:76:2c:e1:34:
         b1:74:05:bc:99:d1:1f:e6:9e:e7:65:ef:01:d1:c6:32:be:84:
         8f:26:55:9a:16:c3:5a:0f:e0:12:b6:97:5f:87:d3:b5:a3:df:
         03:bb:d4:f5:aa:b2:2c:e5:de:3a:59:b9:29:77:68:0d:4c:6f:
         b6:eb:96:90:cf:28:eb:03:df:29:3a:ba:75:bd:37:a7:69:e2:
         ec:89:68:15:8f:a5:d9:f3:c6:64:46:b5:6c:d1:38:aa:c0:ab:
         6a:5a:9a:5c:5a:6e:38:8e:31:d0:50:56:3f:7b:7b:be:ce:b0:
         88:a4:e7:8d:ea:76:3e:dd:a8:52:dc:31:dc:2e:85:a9:fe:53:
         fd:29:e5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:02 2026 by rpki-client