Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
File:                     jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json)
Hash identifier:          gv39SrL0IiqwfczWFjNGTJcUnAqq76Qf6xdlKhet1Ww=
Subject key identifier:   14:36:1A:AC:CD:37:9C:69:53:FF:91:37:75:F3:B6:4E:39:BD:CC:C4
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Certificate issuer:       /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial:       019F93C963162AB9DB72249D49559F65BA66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
Manifest number:          0AB3
Signing time:             Fri 24 Jul 2026 11:01:16 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:16 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:16 +0000
Files and hashes:         1: 6ckN970H7cpuN5SlW3wkVE1-uM4.roa (hash: 4RC2uU6qxyV9bc9Cvszgx0ISOMF1kgJvTGxyXOpdXhI=)
                          2: 6j9AVsDIcLErIkpn3X-eJeF1GGI.roa (hash: ZsMGjImkdIZH7VCwDNjWJbDGVpBmnhjQHnLW0jKIHBo=)
                          3: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: S3i6ynWs+PH00g/dbqQQtaFGthvVWrF0QnNIGjcixYQ=)
                          4: yQpjhvw8i6e9KzrpvjEnSpkHzwc.roa (hash: tuojuZc92088axUvGHKz4onECSlWfJI0kA5M4lGnMdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:63:16:2a:b9:db:72:24:9d:49:55:9f:65:ba:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
        Validity
            Not Before: Jul 24 11:01:16 2026 GMT
            Not After : Jul 25 11:01:16 2026 GMT
        Subject: CN=14361aaccd379c6953ff913775f3b64e39bdccc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:af:5c:0f:6e:0f:49:a4:a8:4c:fb:10:5f:
                    a5:84:cd:cf:6e:cd:2e:28:37:a7:89:92:1a:16:85:
                    46:9b:26:8f:92:af:d0:ed:bc:8f:fb:8e:9f:c1:59:
                    e6:9f:70:18:98:9e:c7:4e:2e:13:b0:71:f5:39:df:
                    32:97:08:d9:10:19:10:c7:0d:39:e2:9a:c6:d6:7e:
                    61:8d:4e:8f:f0:28:2a:34:18:21:9f:fa:84:81:5d:
                    99:d8:97:7a:88:70:55:42:0b:6e:bc:cd:30:90:80:
                    c7:4f:23:99:25:21:5e:da:83:28:9e:3c:32:5e:da:
                    14:eb:f5:b0:71:87:90:c7:a6:42:a5:56:49:99:e3:
                    cc:b7:04:a2:f9:b2:17:bd:85:70:a0:10:55:5c:5a:
                    d4:0d:9a:66:3e:09:1a:89:e0:68:3f:ca:23:35:b1:
                    7f:69:96:76:f6:c5:1b:42:ef:e0:8f:6b:55:ab:55:
                    28:47:e0:a0:48:13:a3:ee:85:52:d5:8e:93:22:8e:
                    37:88:ff:32:74:be:a4:e7:13:fe:22:05:2a:ca:b1:
                    51:fb:39:e1:3c:8e:02:5a:48:0f:0a:de:0b:63:0d:
                    bb:ac:8f:26:00:92:ff:5e:07:35:c4:c5:ac:e2:d0:
                    27:dd:10:cb:61:18:e9:e0:4b:94:93:fc:c6:71:89:
                    a0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:36:1A:AC:CD:37:9C:69:53:FF:91:37:75:F3:B6:4E:39:BD:CC:C4
            X509v3 Authority Key Identifier:
                keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:61:8d:24:04:d4:51:3f:d3:d0:72:07:9c:07:c0:15:a4:65:
         5f:ed:5b:f6:21:19:d3:5c:c9:ab:11:29:fe:6a:bc:d7:d1:86:
         2b:57:88:c0:1a:30:de:60:ad:76:ad:6c:0c:97:e3:5c:99:68:
         68:d5:8c:38:ab:0f:d4:aa:3a:3b:cd:3c:4b:d4:71:a1:59:6b:
         d6:67:31:b4:f2:10:bc:50:d0:a3:ec:29:4f:fb:cd:75:9c:e3:
         47:5c:73:46:08:a9:fc:b4:5c:81:1d:fa:9d:87:96:26:82:8f:
         59:04:55:fd:cb:12:fe:83:b9:a0:0b:86:6f:f5:39:81:35:83:
         bb:c8:32:47:1b:42:5e:75:67:23:a0:0e:11:ed:f1:3f:68:e9:
         a1:db:05:35:86:20:69:f5:68:6b:6e:2e:94:dc:d6:17:0c:fe:
         5b:d0:63:7e:ef:0c:b7:10:40:2a:ac:33:d2:e1:89:1e:45:cb:
         0a:c4:74:1a:16:de:44:62:01:55:31:f5:05:1c:60:24:69:b5:
         75:42:0a:18:ba:08:dc:35:ac:94:8c:18:9c:9e:4a:9f:6e:f5:
         59:4e:22:7b:77:35:36:57:de:99:01:7d:c7:93:f3:e0:ed:b8:
         2b:8a:99:8f:f1:73:8b:5c:9a:9f:12:2b:c3:82:c3:8a:aa:83:
         80:96:02:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:21:59 2026 by rpki-client