Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
File:                     sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft (raw, json)
Hash identifier:          tAwjYhou8kM3+kuwIKQB3H9PFEzsKvC/+ef2H4lhGi0=
Subject key identifier:   A3:D6:E0:CE:93:FC:83:56:AC:B6:A6:89:C3:BA:C2:74:71:B5:24:6C
Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
Certificate issuer:       /CN=b092425ab7d66bab711fbaa22757377807834159
Certificate serial:       019F9436A17C63F942167869431DE6DED0F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
Manifest number:          1509
Signing time:             Fri 24 Jul 2026 13:00:35 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:35 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:35 +0000
Files and hashes:         1: ob4RLJ_y_7wEvkHKUSSog54LQNw.roa (hash: Jads8EK5VWX+m/AfmuiROvWcFDNzh7waaTO1j/WWRvo=)
                          2: sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl (hash: Qvjo85Z71wkXqR3J22zw0AWsKme+X7+LLdpdtQ4q9H4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:a1:7c:63:f9:42:16:78:69:43:1d:e6:de:d0:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b092425ab7d66bab711fbaa22757377807834159
        Validity
            Not Before: Jul 24 13:00:35 2026 GMT
            Not After : Jul 25 13:00:35 2026 GMT
        Subject: CN=a3d6e0ce93fc8356acb6a689c3bac27471b5246c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4d:50:82:bc:30:dd:c7:a4:02:50:b3:42:b2:
                    2a:5a:8b:e1:e5:37:59:c6:7f:32:90:49:b9:bb:34:
                    e9:a6:13:df:c7:58:bf:f4:7d:b5:24:98:13:d6:47:
                    42:48:88:3d:7f:94:1c:cf:a3:4c:ae:e5:55:2c:22:
                    88:ad:3a:77:b2:b9:ae:36:96:0a:6e:98:29:f7:bf:
                    8b:0b:eb:99:c7:70:6b:3f:c2:81:69:ea:d0:c3:14:
                    4c:f6:7c:55:8f:69:e4:13:58:92:de:63:8d:5a:0a:
                    8c:2d:39:27:a2:d3:70:b9:11:43:2b:3e:58:e9:10:
                    30:f2:57:98:14:66:41:25:c6:98:27:54:dd:6b:97:
                    e1:cb:16:aa:68:e7:45:72:d2:fc:bd:b4:cc:ef:0f:
                    80:9e:7d:37:89:42:9a:6a:f6:c1:5c:7c:3a:2f:6d:
                    16:9a:ce:35:0f:25:ed:9d:6d:15:39:ec:6a:eb:9e:
                    ec:e7:f8:da:ff:7d:fc:6d:98:bc:6c:dc:22:30:d0:
                    65:13:18:bf:a0:e8:a5:a2:23:2c:b5:97:6f:ee:55:
                    e7:42:c4:ec:b7:33:b8:47:b8:bd:a1:60:3d:96:8e:
                    a0:25:65:8f:6f:17:9a:b9:32:e7:7a:2f:e5:ea:d8:
                    97:b4:b8:cf:39:f1:fa:71:10:9b:71:7b:56:ed:6c:
                    39:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D6:E0:CE:93:FC:83:56:AC:B6:A6:89:C3:BA:C2:74:71:B5:24:6C
            X509v3 Authority Key Identifier:
                keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:58:d0:b6:3c:84:10:88:f0:31:0d:85:71:f0:ff:64:1c:23:
         07:a0:b8:2d:c6:73:3f:fa:1e:2d:02:1a:ab:3c:4e:24:31:b3:
         65:ba:2e:90:b3:70:fc:e7:5c:93:24:0b:85:f2:6c:2b:b7:e2:
         28:23:08:07:dd:d3:9a:1a:6e:8d:91:7b:40:1e:3d:43:10:38:
         f1:6b:aa:83:71:70:aa:ab:1d:c1:60:5a:f4:1f:c5:59:44:98:
         60:e2:4d:00:17:6d:c8:5d:f2:c5:5e:48:82:31:56:9f:e9:8a:
         b2:27:03:5a:24:fc:3d:6f:e0:1d:69:42:e8:39:e6:2e:c2:9e:
         16:ee:9b:ee:7c:ca:65:6a:7c:b6:e5:93:d0:1f:76:fd:28:8e:
         ea:91:4a:c3:62:3d:f6:7a:90:96:20:2a:be:5a:3f:e8:09:14:
         f0:ee:c9:0f:19:fb:80:22:3e:06:0a:90:e0:7d:ef:bc:83:08:
         ef:ca:68:9b:ed:9d:72:67:c1:8b:d6:13:07:20:61:eb:09:fe:
         0b:91:4a:33:6e:cb:a3:9b:6f:fb:44:d8:bf:39:c8:51:6c:f9:
         ab:8d:2e:7a:59:73:ac:17:ce:bf:5d:6b:04:de:e3:d7:fc:c1:
         f0:41:e0:7c:ef:24:5c:57:27:d2:1c:16:e2:d0:be:28:8c:59:
         15:a3:4a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:49 2026 by rpki-client