Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
File:                     JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json)
Hash identifier:          Mrqk3YCAKiGj+zflzOOVaODMxLGrg6lILVk2xiKc+VU=
Subject key identifier:   B8:16:05:F7:55:79:3C:16:4B:84:B7:7F:B9:B7:E1:3D:C3:F8:AF:8A
Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
Certificate issuer:       /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Certificate serial:       019F92118830D113B81A03485BFEF6D69BAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
Manifest number:          06A5
Signing time:             Fri 24 Jul 2026 03:00:50 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:50 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:50 +0000
Files and hashes:         1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: 4ikqSFJt8Z3W9zYuZlar/69cE5EiBg+XN5Dqn2rrc/w=)
                          2: kXVWM7U0cKI60RelO6wOYdiqnaw.roa (hash: RkWa64rezT/93m8EhIZeu8XZ0jmEEJeR0Zr1faMUwPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:88:30:d1:13:b8:1a:03:48:5b:fe:f6:d6:9b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
        Validity
            Not Before: Jul 24 03:00:50 2026 GMT
            Not After : Jul 25 03:00:50 2026 GMT
        Subject: CN=b81605f755793c164b84b77fb9b7e13dc3f8af8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ab:ed:14:c9:88:44:f3:9f:ed:c7:c3:1c:35:
                    75:36:85:79:2d:ea:a3:56:5a:75:36:ff:06:6a:0c:
                    8c:8f:c3:be:62:4b:ab:26:50:43:71:00:c9:f8:13:
                    99:d4:d9:d5:2d:c5:e0:b3:1e:08:93:fd:86:76:74:
                    65:9e:11:73:0c:ee:5d:03:59:4c:c9:73:b7:9f:f0:
                    36:70:ae:38:07:54:4a:91:42:a9:4e:b4:02:0f:63:
                    5f:18:b6:eb:30:15:3b:00:cb:9b:4d:6c:f8:5d:21:
                    0e:6c:e7:67:35:09:aa:7c:4b:55:34:e4:dd:8e:0d:
                    af:3f:ff:a0:48:c6:ef:e9:24:79:17:ab:62:12:f1:
                    6a:19:63:d0:f5:e8:ea:bf:b7:09:47:90:31:58:dd:
                    8c:a9:f3:7f:5e:f8:03:2c:a8:0e:cc:f1:d3:df:00:
                    22:53:14:a9:01:80:92:59:01:d2:28:2b:a5:e1:ea:
                    d0:55:4b:45:7a:66:c9:f3:b7:2b:51:e9:0b:19:a4:
                    97:c2:d3:19:29:f1:e2:b2:de:ba:b4:1d:e2:17:52:
                    bf:4e:0d:31:e6:05:92:58:0e:ed:b0:2e:a4:a3:06:
                    4a:5a:00:05:fb:49:00:9d:3c:53:43:07:d3:1b:5c:
                    1e:54:c4:25:99:71:7c:fd:57:a7:50:6b:d9:30:0a:
                    5d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:16:05:F7:55:79:3C:16:4B:84:B7:7F:B9:B7:E1:3D:C3:F8:AF:8A
            X509v3 Authority Key Identifier:
                keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:7a:dc:6f:3d:a3:71:e3:e3:d2:d2:8b:9b:06:cc:d4:ae:8c:
         51:64:f4:e0:6a:05:31:af:3d:fd:01:3b:77:79:6b:a0:72:99:
         a5:dd:35:7d:f7:3d:f0:60:5f:63:ed:8a:b2:f0:b5:7a:34:b7:
         fd:d6:d9:4e:1a:15:2c:ec:a1:8c:61:09:09:4c:2e:ad:85:5f:
         74:54:10:20:b9:c5:bf:07:ab:af:c5:19:37:b1:a0:ff:17:d1:
         cc:b4:3b:2b:33:5a:29:a1:68:38:b8:43:d9:e7:6e:64:57:b0:
         a6:93:94:72:53:c2:35:22:3b:7a:82:3f:f2:a3:24:8f:26:ff:
         31:09:b8:3b:1b:45:9f:51:1d:fc:42:2d:b1:40:0f:6c:90:52:
         39:7c:09:b8:2e:f0:3c:6c:5c:15:4c:51:35:be:a2:7c:6f:4d:
         10:a1:0c:c1:7a:54:25:07:da:a0:a1:57:94:93:50:1a:71:e4:
         76:df:aa:fc:dc:6e:4c:04:58:a7:e4:59:9f:6f:ea:84:bc:27:
         6b:e3:85:a3:2c:ed:59:8e:4b:b6:23:07:6f:87:a2:b5:8e:ce:
         b8:59:6e:98:10:48:87:71:72:93:9f:6e:cc:0c:c2:1d:99:07:
         d6:d7:af:36:2d:36:98:9c:c4:76:a0:e2:62:52:f7:1c:99:8e:
         00:c5:59:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:24:05 2026 by rpki-client