Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
File:                     JgGttY6Dyu5nXc94lUugiqkwGg4.mft (raw, json)
Hash identifier:          HejCwuV6EoBvXef4yU8BzME22KDFNEQCKdleDdaK29k=
Subject key identifier:   CC:A8:50:97:41:CB:61:89:C6:5E:F2:10:4F:06:40:96:D5:9E:1F:8C
Authority key identifier: 26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
Certificate issuer:       /CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Certificate serial:       019F8FB4D6D06A9C33183079D25FBEF335B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
Manifest number:          0A36
Signing time:             Thu 23 Jul 2026 16:00:20 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:20 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:20 +0000
Files and hashes:         1: 2l98OJUUaR9ta-P_Yl3BL25xX6E.asa (hash: epA5OEpKpO6J6HOrXhbe4eK7JMJAieEm7djq/rBNlXc=)
                          2: JgGttY6Dyu5nXc94lUugiqkwGg4.crl (hash: g/fbyqQavvCanDBnW4vMTZIf4gF5nY9uuffDdKSsPcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b4:d6:d0:6a:9c:33:18:30:79:d2:5f:be:f3:35:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2601adb58e83caee675dcf78954ba08aa9301a0e
        Validity
            Not Before: Jul 23 16:00:20 2026 GMT
            Not After : Jul 24 16:00:20 2026 GMT
        Subject: CN=cca8509741cb6189c65ef2104f064096d59e1f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0d:64:1f:fe:86:2d:17:35:80:84:51:45:d6:
                    39:0c:c9:f2:50:d3:f3:4b:7c:5b:02:36:5a:4c:d1:
                    20:1d:97:fe:2c:f1:d2:ae:9c:e4:07:f8:f7:c2:f8:
                    22:f2:ae:9b:f1:e6:ca:ac:2a:ed:13:5e:b6:0d:7f:
                    6a:b3:17:3e:f0:38:30:7c:db:e4:1d:66:f9:f7:0e:
                    1d:04:d3:a1:31:9b:3e:37:68:93:03:2c:76:ca:e2:
                    ea:46:60:6e:a7:44:7a:c1:0f:59:e4:f3:7c:a1:56:
                    af:b6:6c:50:07:70:2a:9d:b2:97:e1:b3:23:a4:22:
                    1c:89:3d:3c:8e:51:66:6a:d2:00:55:72:bc:03:30:
                    f2:55:85:1d:56:5a:b4:3a:43:5f:62:e1:db:c3:42:
                    44:00:1e:84:65:ce:0b:5a:93:9e:04:37:4c:c0:59:
                    17:d0:58:39:5c:fa:12:fd:61:a5:cc:83:8b:3b:cc:
                    ba:a4:a6:a8:06:3e:94:d4:06:ce:dd:3b:64:ef:42:
                    8a:93:f7:59:d2:80:e8:fb:84:83:b6:5d:b5:f8:64:
                    9e:56:18:7d:e5:4c:26:8b:d6:f2:c8:36:5d:24:2c:
                    b3:bc:41:29:8b:ca:66:63:1d:ce:ca:79:5d:89:94:
                    a6:b5:10:e2:6e:e3:0e:11:9e:e4:79:99:ac:c0:11:
                    53:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A8:50:97:41:CB:61:89:C6:5E:F2:10:4F:06:40:96:D5:9E:1F:8C
            X509v3 Authority Key Identifier:
                keyid:26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c6:01:2c:fd:5c:aa:b4:3d:38:6b:40:24:8c:78:ee:5c:55:
         f0:e1:96:8b:dc:f0:92:1b:c0:8a:2c:d1:c9:1e:39:8b:7a:c6:
         9d:63:af:58:44:cd:fa:86:63:24:61:43:16:ac:38:f9:90:75:
         69:58:19:35:58:65:f3:9a:f9:d5:56:84:1c:20:04:1a:b3:34:
         34:5a:ff:68:7e:85:d2:27:92:8d:b2:8d:23:4d:df:e0:b6:c5:
         1b:21:4e:50:d0:10:43:3a:28:19:f1:bb:16:c1:9c:62:82:8d:
         6d:b5:14:07:c0:cd:b0:27:41:0f:b5:7f:ab:70:ac:33:85:f9:
         c2:65:53:b6:aa:f0:30:a1:af:86:73:08:ba:fe:33:20:e5:51:
         96:8c:6e:66:33:0d:eb:e5:13:9b:84:2f:d9:3b:a3:4b:d9:0e:
         bd:52:e6:62:9a:b8:f3:9d:c0:5d:81:d7:ac:ab:75:7c:60:24:
         5c:bf:9d:b0:0d:6e:2e:36:3e:cd:43:ec:5c:73:1d:e2:35:3b:
         ef:10:ef:93:92:c3:50:0c:af:c5:90:35:8c:8e:da:d5:10:e6:
         2b:a9:1e:8e:6d:af:01:c9:40:df:61:43:e7:77:c5:8e:ae:2e:
         e0:cf:73:72:cf:d6:f8:2f:3a:b7:ec:2b:98:24:35:e7:0a:55:
         1e:49:c8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:13:24 2026 by rpki-client