Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
File:                     J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json)
Hash identifier:          nNI5OrF9N5BCA47zTnV42u3V3yTDe7mGtVxzO40bLik=
Subject key identifier:   CE:89:B5:E9:1A:5A:F3:6F:15:83:FE:3E:76:98:F7:90:81:C9:6B:FB
Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Certificate issuer:       /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Certificate serial:       019F94DC62286E2A522531B4C6A30F59A093
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
Manifest number:          1186
Signing time:             Fri 24 Jul 2026 16:01:38 +0000
Manifest this update:     Fri 24 Jul 2026 16:01:38 +0000
Manifest next update:     Sat 25 Jul 2026 16:01:38 +0000
Files and hashes:         1: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: u+qGNFaY+lWKdPf5U40QNk8GvywMb6xep3ePvtNT+wo=)
                          2: zpBvr7D0ZTnk2RASjPjWwuPCBo4.roa (hash: 6ihXuEihTvHi2kmbZX2/h+YBlObaB/XzKmiIBYoX2XQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:dc:62:28:6e:2a:52:25:31:b4:c6:a3:0f:59:a0:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
        Validity
            Not Before: Jul 24 16:01:38 2026 GMT
            Not After : Jul 25 16:01:38 2026 GMT
        Subject: CN=ce89b5e91a5af36f1583fe3e7698f79081c96bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ce:0a:77:2e:50:ea:11:85:eb:1c:a9:b2:22:
                    e4:e8:5d:81:87:85:db:8b:66:3e:0b:f2:9e:a7:f4:
                    63:f9:eb:ff:02:a0:09:4a:1f:f4:3b:62:d3:89:f1:
                    e5:84:48:43:ec:ee:f0:57:57:cc:83:67:6e:bd:ed:
                    00:a0:6a:e3:91:2d:3f:d9:2e:71:58:ad:05:c5:5e:
                    cc:bc:e3:1e:ba:c6:aa:50:a8:bd:d7:04:fe:a7:54:
                    f0:a8:12:07:38:ed:f9:e0:35:15:b9:5d:86:75:ca:
                    cb:16:65:42:0d:58:f3:65:14:e0:f4:88:c1:f0:85:
                    cd:f0:20:e6:f3:38:e6:4d:f4:9e:f3:fb:ab:a1:e3:
                    d9:36:4e:44:54:ef:f6:15:03:3f:c1:0b:fb:c9:e5:
                    45:92:85:27:0c:ed:f9:d2:56:28:bb:89:8c:ea:6d:
                    ac:a5:98:b7:3a:29:ce:bb:54:79:1b:bf:f0:14:30:
                    b4:1f:3c:5e:55:35:55:0f:9a:09:bd:01:43:cf:7e:
                    f1:bb:08:d7:9c:fd:22:d0:78:cb:7b:d2:8f:d6:f8:
                    80:07:91:04:15:10:c8:5a:5b:e7:26:2a:c4:65:be:
                    95:fe:0c:bb:41:3d:e2:29:d6:1e:13:86:3f:4f:26:
                    23:b4:87:23:94:39:40:a1:73:34:45:bf:1f:af:8f:
                    a3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:89:B5:E9:1A:5A:F3:6F:15:83:FE:3E:76:98:F7:90:81:C9:6B:FB
            X509v3 Authority Key Identifier:
                keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b2:b0:e7:ff:66:e1:79:55:07:2d:df:4d:6a:a4:46:cd:d4:
         c6:d2:09:1d:28:0d:c4:5d:13:8f:f7:19:5b:d2:c4:c8:fc:0a:
         2d:bf:55:1e:41:ab:3d:18:f6:a3:a6:99:df:d7:06:b6:b9:95:
         1f:9a:3c:bd:e2:39:ae:da:3e:ee:d4:5e:d4:ff:79:f1:42:99:
         53:5f:1b:91:63:72:54:15:6f:d0:96:12:78:22:9e:50:92:31:
         4f:5e:2b:97:70:00:a6:da:38:ea:0a:30:cc:4e:76:fa:bb:bb:
         9f:ee:50:a4:1d:da:eb:72:86:91:40:0c:1d:83:16:6a:20:b0:
         a8:5a:a4:b0:51:2b:35:65:f6:d2:c8:bb:e0:01:ef:ec:b1:f2:
         eb:64:56:b6:5f:71:ab:7c:0b:66:5f:20:84:75:5f:a5:35:15:
         1c:c1:ec:aa:29:eb:d2:31:0a:20:9a:25:61:9b:43:7d:0c:bf:
         5c:a7:94:48:f2:51:67:d6:14:7f:db:fa:40:68:d8:a4:6f:31:
         de:43:9d:bf:58:22:27:d6:bb:dd:77:ab:61:7c:2d:1f:a7:2f:
         a7:9d:b0:13:de:41:4f:fd:df:a3:51:6f:3f:5c:78:ca:a2:fa:
         72:be:f9:b9:c7:ae:cc:96:3b:30:b6:6e:32:9a:37:46:c3:05:
         3b:32:f7:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+U3GIobipSJTG0xqMPWaCTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDhhZjdlNTZjODBkMThkYzk2OGY0ZGJjZWM4MTNmODVl
YTMwYTQwHhcNMjYwNzI0MTYwMTM4WhcNMjYwNzI1MTYwMTM4WjAzMTEwLwYDVQQD
EyhjZTg5YjVlOTFhNWFmMzZmMTU4M2ZlM2U3Njk4Zjc5MDgxYzk2YmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9s4Kdy5Q6hGF6xypsiLk6F2Bh4Xb
i2Y+C/Kep/Rj+ev/AqAJSh/0O2LTifHlhEhD7O7wV1fMg2duve0AoGrjkS0/2S5x
WK0FxV7MvOMeusaqUKi91wT+p1TwqBIHOO354DUVuV2GdcrLFmVCDVjzZRTg9IjB
8IXN8CDm8zjmTfSe8/uroePZNk5EVO/2FQM/wQv7yeVFkoUnDO350lYou4mM6m2s
pZi3OinOu1R5G7/wFDC0HzxeVTVVD5oJvQFDz37xuwjXnP0i0HjLe9KP1viAB5EE
FRDIWlvnJirEZb6V/gy7QT3iKdYeE4Y/TyYjtIcjlDlAoXM0Rb8fr4+jNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6JtekaWvNvFYP+PnaY95CByWv7MB8GA1UdIwQY
MBaAFCfYr35WyA0Y3JaPTbzsgT+F6jCkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjlpdmZsYklEUmpjbG85TnZPeUJQNFhxTUtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9kOGI5ZjQtYWQwMS00NDdjLWE0ZGUt
MDIxNWFjYTFiOTA5LzEvSjlpdmZsYklEUmpjbG85TnZPeUJQNFhxTUtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9kOGI5ZjQtYWQwMS00NDdjLWE0ZGUtMDIxNWFjYTFiOTA5
LzEvSjlpdmZsYklEUmpjbG85TnZPeUJQNFhxTUtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbKw5/9m
4XlVBy3fTWqkRs3UxtIJHSgNxF0Tj/cZW9LEyPwKLb9VHkGrPRj2o6aZ39cGtrmV
H5o8veI5rto+7tRe1P958UKZU18bkWNyVBVv0JYSeCKeUJIxT14rl3AApto46gow
zE52+ru7n+5QpB3a63KGkUAMHYMWaiCwqFqksFErNWX20si74AHv7LHy62RWtl9x
q3wLZl8ghHVfpTUVHMHsqinr0jEKIJolYZtDfQy/XKeUSPJRZ9YUf9v6QGjYpG8x
3kOdv1giJ9a73XerYXwtH6cvp52wE95BT/3fo1FvP1x4yqL6cr75uceuzJY7MLZu
Mpo3RsMFOzL3EQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:42:49 2026 by rpki-client