Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
File:                     j9-HylMGV5hEdkUlX4KbU7wdohU.mft (raw, json)
Hash identifier:          u/JJpX2ZdB77dpiHkZTPsO2F7h2Ds+f0kJ47RMofuDE=
Subject key identifier:   2F:A5:97:21:38:7A:C7:1A:EE:34:11:CD:1B:F1:E9:31:6F:0B:A2:09
Authority key identifier: 8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
Certificate issuer:       /CN=8fdf87ca53065798447645255f829b53bc1da215
Certificate serial:       019F8F47362FA165EAD90C76D6D680BC7589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
Manifest number:          0911
Signing time:             Thu 23 Jul 2026 14:00:36 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:36 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:36 +0000
Files and hashes:         1: aiNfAtwLgUKsL4qA7akVZhQU1bA.roa (hash: Hw2VjFxuxUBTnIvwm5B0o1nhy9vvmSj+hAxZVQnZIws=)
                          2: j9-HylMGV5hEdkUlX4KbU7wdohU.crl (hash: vRkn56lgbQQdzOVtFPdsHnt8Tpe8sb1M1rwqj7DeMpw=)
                          3: wRelCGO5kr4PionuAw4TmZeTb24.asa (hash: R4hwvYPLQTU3+ZW26hz18/RfC35G0WghkbbOHFf/yeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:36:2f:a1:65:ea:d9:0c:76:d6:d6:80:bc:75:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fdf87ca53065798447645255f829b53bc1da215
        Validity
            Not Before: Jul 23 14:00:36 2026 GMT
            Not After : Jul 24 14:00:36 2026 GMT
        Subject: CN=2fa59721387ac71aee3411cd1bf1e9316f0ba209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:92:0a:2d:89:01:d3:ef:cf:76:03:a9:5e:f5:
                    9a:93:bf:e7:44:76:dd:ec:93:02:10:9d:3d:a9:52:
                    25:76:2e:c4:e4:f0:24:52:69:0c:af:7e:a8:4f:a9:
                    dd:f5:e0:c9:22:78:02:03:dd:6d:e8:95:d7:1b:0a:
                    02:2f:33:b5:65:41:fe:cc:a7:a2:ee:7f:b4:08:ea:
                    08:7f:6b:4b:2a:e4:18:1c:d2:25:df:d9:62:7b:3f:
                    45:a1:a1:9e:24:a3:87:ab:93:d1:c0:43:d5:95:5f:
                    d9:2e:fd:bc:fe:06:f9:db:ea:64:e5:60:a6:af:0a:
                    82:2e:f6:0f:aa:2d:c7:d5:b8:1b:76:6f:66:fb:57:
                    47:96:80:73:1c:b1:e9:62:33:66:c7:af:97:0f:f5:
                    b4:1e:3e:62:fb:e7:33:b4:1d:ba:9a:4c:7a:05:9f:
                    2d:25:da:4b:83:35:c7:ba:e1:bd:6d:13:bd:e0:0c:
                    1f:03:87:cd:44:13:86:20:ce:5c:f4:1a:95:4c:02:
                    58:ea:34:64:bc:bf:a4:e8:d0:b4:5a:25:bb:f1:40:
                    7a:69:a6:9d:6e:56:c7:f5:66:86:53:eb:de:28:33:
                    e5:2c:e5:4a:60:5d:54:0b:31:b3:3f:fa:66:07:b3:
                    c6:ca:37:24:9d:04:d8:c8:ea:cf:95:bc:31:25:9c:
                    61:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A5:97:21:38:7A:C7:1A:EE:34:11:CD:1B:F1:E9:31:6F:0B:A2:09
            X509v3 Authority Key Identifier:
                keyid:8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:65:c7:65:7f:07:53:9a:c8:5e:33:e7:ca:9a:6d:e6:8f:bd:
         6e:c4:9d:e4:79:2b:f7:5e:f5:30:eb:92:24:a0:f7:73:16:08:
         8b:4a:52:3a:a6:e4:c1:b5:3f:e3:36:21:41:5c:6e:cc:ac:c5:
         36:8b:d0:bb:f3:8d:c3:1d:3d:2d:2b:d4:04:a4:64:f2:4d:6b:
         cc:8f:24:46:38:cb:f2:79:3e:15:cc:4c:4e:8d:32:09:5a:19:
         3a:fd:ea:90:7f:10:78:0b:12:f1:74:5d:84:8b:08:8a:cc:ee:
         ab:33:27:cf:d5:3c:09:8e:09:e2:ca:42:fd:11:be:25:68:c7:
         85:3f:3b:18:e9:4e:3b:ad:bf:98:81:20:43:44:0d:57:93:6f:
         0a:75:63:42:6e:33:44:a7:a7:e3:02:08:e1:0d:69:31:2f:a0:
         56:99:ed:90:54:22:94:ff:12:48:1f:c5:77:43:69:e7:9e:ee:
         08:4e:bd:3f:56:76:6c:74:20:a1:5a:e8:78:c3:69:f1:9f:ab:
         ae:12:18:e2:79:a2:f2:f9:65:2d:e1:d9:0d:ce:37:a0:f7:1b:
         db:24:6c:32:b4:6a:1d:4e:85:f9:c4:d5:eb:bb:84:5d:c3:5f:
         a3:2d:e5:7f:d3:46:a0:76:5e:ac:e2:1c:84:6e:be:77:36:bb:
         4a:b8:ee:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:34 2026 by rpki-client