Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
File:                     Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft (raw, json)
Hash identifier:          g83k/xHEHJoy0XtSR4u6Z8wI8qYSAnn6DORZOC7c0y0=
Subject key identifier:   C6:64:AC:EB:F1:23:3E:B1:9C:4F:6C:6F:A2:5A:EE:04:11:F9:9D:98
Authority key identifier: 25:AF:AA:1E:FB:29:FF:A5:6E:6F:5D:42:06:22:DF:F0:69:7F:A6:27
Certificate issuer:       /CN=25afaa1efb29ffa56e6f5d420622dff0697fa627
Certificate serial:       019F946E0886D4EE7932254DE0C8BA7EC820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
Manifest number:          9D
Signing time:             Fri 24 Jul 2026 14:01:06 +0000
Manifest this update:     Fri 24 Jul 2026 14:01:06 +0000
Manifest next update:     Sat 25 Jul 2026 14:01:06 +0000
Files and hashes:         1: Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl (hash: 5d8Evq4CsqAcEL5w+cpTVQ6K51Y9Xk3TLzb2wLCUu4k=)
                          2: wzD-Y1XRaC-02kl2ZMaS3E6fGFs.roa (hash: J6QWqMXaVC1M4duQaZv5ICVDFegW9Ncnya/aGNgLbJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6e:08:86:d4:ee:79:32:25:4d:e0:c8:ba:7e:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25afaa1efb29ffa56e6f5d420622dff0697fa627
        Validity
            Not Before: Jul 24 14:01:06 2026 GMT
            Not After : Jul 25 14:01:06 2026 GMT
        Subject: CN=c664acebf1233eb19c4f6c6fa25aee0411f99d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d5:b7:06:14:4b:6c:64:60:4e:c3:51:dc:a5:
                    83:18:32:f9:9c:f7:99:6d:3d:14:dc:af:dd:57:8c:
                    12:68:38:27:d9:9e:7c:e1:13:42:49:da:ff:93:eb:
                    c5:05:9a:29:15:be:29:3e:24:73:b7:c0:61:66:79:
                    70:9e:85:14:b1:6a:d3:d3:fa:e8:5e:df:d0:e2:ca:
                    d1:f6:1e:04:82:6f:39:89:6e:7a:55:9e:24:98:94:
                    05:d2:52:80:a6:94:25:e8:9f:d2:7f:42:bf:61:14:
                    10:b0:70:58:be:d2:fd:1f:fd:a7:ed:ad:4f:e0:63:
                    e1:49:21:3f:26:da:8f:01:20:7f:7a:9b:c2:3b:3f:
                    7c:8f:cb:07:8d:fe:96:61:0d:a7:f0:2e:1a:f0:a0:
                    5e:51:87:bb:83:83:2d:97:96:1e:f0:9a:a8:a9:61:
                    ac:f8:b1:56:c2:a3:f7:ff:e5:fa:5b:67:35:3d:67:
                    d7:0b:bf:78:12:9c:0f:4c:16:1c:58:4b:38:19:3a:
                    5c:d8:91:ab:97:dc:97:e3:4d:94:12:83:2a:03:84:
                    e5:ee:38:36:51:d6:ac:de:d1:10:43:8e:e2:7d:cf:
                    46:5e:35:a9:3b:db:aa:61:26:5b:3c:53:76:2d:93:
                    6a:fa:6c:18:9b:75:5c:39:8c:13:33:ef:66:fc:4f:
                    5c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:64:AC:EB:F1:23:3E:B1:9C:4F:6C:6F:A2:5A:EE:04:11:F9:9D:98
            X509v3 Authority Key Identifier:
                keyid:25:AF:AA:1E:FB:29:FF:A5:6E:6F:5D:42:06:22:DF:F0:69:7F:A6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:97:e2:67:48:31:f9:76:5e:49:c6:73:25:d8:9d:87:a2:41:
         b4:27:d8:21:cf:50:88:f2:d3:2c:9a:72:32:47:54:dc:39:0b:
         f3:39:45:b3:b9:32:79:09:91:2e:4d:ba:75:9c:74:e4:bb:17:
         0c:8f:0d:43:61:58:35:27:25:65:db:a4:cd:a3:da:28:44:de:
         3e:b2:02:57:98:99:4e:5f:c1:96:6d:00:2c:a3:f0:f2:94:73:
         45:8f:a7:95:91:41:76:db:33:9f:5d:34:e1:f5:bc:f7:73:70:
         18:4b:67:5f:66:a6:96:e4:11:ab:0a:a9:1c:2c:69:2f:2f:a0:
         c6:7d:8b:ae:c4:1f:97:b9:de:77:92:2f:7b:6f:9e:e0:e6:c3:
         6b:b7:58:f1:71:8d:b6:11:92:35:3c:4d:07:56:bd:09:63:e7:
         39:18:30:87:3d:a9:ce:db:99:9b:b1:82:3b:c5:46:74:9e:43:
         d7:4b:a7:5e:11:67:2a:12:46:08:b1:9d:76:c5:58:89:cd:46:
         12:d0:26:9b:06:02:ba:64:1c:f9:5d:b3:10:cd:3c:d4:df:50:
         96:98:d4:c1:3d:e1:8c:87:52:4b:81:5f:30:00:fe:cd:a8:ad:
         66:ac:dd:b4:06:7b:8e:b6:5c:da:ec:ca:e0:39:32:e2:92:7a:
         ad:e0:ad:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:03 2026 by rpki-client