Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File:                     JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier:          bKzMDgCWcus/82jk5zTqzNucx++lv40OszknQfK/ajc=
Subject key identifier:   EE:F5:E6:50:72:E8:55:20:AC:5A:E2:8A:A5:E6:14:D8:C2:4E:2F:9F
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer:       /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial:       019F954A30AFCBD99F3F615E0492F6814FC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 18:01:35 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:35 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:35 +0000
Files and hashes:         1: A4GalviEuSvDRygo_-qVl6eCT10.roa (hash: sSlPwV0yRve9+trsnROr061h+b28t0Ygn3kbHKwNHiA=)
                          2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: soYuUaT0XBumYsEFynmd45FHaq85MxWfNKsYinuI8nQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:4a:30:af:cb:d9:9f:3f:61:5e:04:92:f6:81:4f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
        Validity
            Not Before: Jul 24 18:01:35 2026 GMT
            Not After : Jul 25 18:01:35 2026 GMT
        Subject: CN=eef5e65072e85520ac5ae28aa5e614d8c24e2f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:42:25:60:6d:ec:3e:77:60:b5:9a:eb:16:4c:
                    a2:62:cf:2d:5b:82:30:86:8f:f7:eb:80:f7:57:4d:
                    c6:8b:52:30:d0:4c:a0:d0:74:e4:f7:41:c1:7d:fc:
                    68:5b:c0:6a:25:6f:63:01:9d:cd:73:05:40:25:61:
                    37:e5:59:00:7d:bd:f2:56:49:be:eb:53:8f:22:fe:
                    22:b4:86:2c:e9:ae:8c:62:65:90:df:9b:bd:77:1f:
                    5c:42:12:da:08:89:ec:72:81:45:c3:64:e1:02:47:
                    28:e2:67:6a:91:34:fa:c9:b3:6f:4e:6c:00:87:7f:
                    9c:42:17:70:9b:e1:5c:cf:72:f9:e4:b7:d4:71:ed:
                    98:a1:66:e2:f1:84:e9:93:ab:61:df:6b:89:29:fb:
                    7f:6e:a8:ce:eb:ff:54:d9:72:ca:3e:a8:71:18:6b:
                    ce:50:14:a6:82:35:c9:0e:b7:17:86:cd:95:76:72:
                    6e:50:ad:bb:81:7e:c1:25:b9:6d:b9:2f:ff:96:e3:
                    5f:f5:05:b1:d4:31:93:a7:fb:32:6e:96:8e:cf:af:
                    95:71:c8:3e:d2:6a:90:53:e3:3a:23:7a:79:62:cf:
                    78:47:69:b8:f4:c3:68:19:1e:7b:15:14:26:bc:e5:
                    a2:73:0a:85:40:d2:2a:a6:bf:8d:d3:d7:20:35:14:
                    2f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F5:E6:50:72:E8:55:20:AC:5A:E2:8A:A5:E6:14:D8:C2:4E:2F:9F
            X509v3 Authority Key Identifier:
                keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:65:9c:04:71:f7:28:d0:61:99:1e:8a:1a:4d:b2:28:a0:dc:
         e2:32:3a:f5:be:4e:35:8e:e5:8e:7f:ac:0f:6e:28:4d:1b:a0:
         f0:ca:12:30:9c:79:bd:ed:f0:62:d4:dd:ba:d8:59:b6:cf:91:
         b1:e4:75:60:a9:d6:cf:d1:bf:aa:1a:3e:27:4b:aa:be:e9:fe:
         ec:71:ef:9a:03:2a:a7:22:e8:7e:64:b4:6c:89:18:7f:2d:10:
         d9:79:29:61:4d:1c:67:a6:55:b0:15:2c:5a:fc:78:66:f0:91:
         06:da:3e:c7:0a:67:bc:e9:1a:e4:80:7b:29:c9:a9:ac:bc:df:
         7b:8f:c7:63:8f:85:09:02:6b:67:6b:5c:0c:60:cd:15:69:1f:
         f4:b7:fa:7c:4e:76:7a:52:a8:eb:f2:cc:8c:d7:db:1e:12:1d:
         0a:05:3d:8e:d9:79:d8:26:6f:09:82:20:a8:6d:82:a1:5d:f1:
         4b:54:e5:11:a6:1d:96:67:b3:a3:69:71:58:45:e6:94:9e:bd:
         fd:7b:f3:93:31:59:6e:59:3e:26:ac:fc:e4:d7:aa:0d:2f:b3:
         23:b0:89:e8:9d:60:f6:3c:4e:c8:f0:5a:0b:53:ff:2b:fc:56:
         d8:67:bf:5a:c8:f0:61:ed:27:31:41:80:91:7f:29:51:51:ae:
         46:50:1e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:47 2026 by rpki-client