Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
File:                     JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json)
Hash identifier:          c7r+X2KzpTF5OmTT66AaDo1lK1bk9vFaUWyOp8vx6is=
Subject key identifier:   7C:CF:3F:E4:20:AD:80:E5:6B:45:92:CC:95:18:4C:8A:85:DE:CC:B6
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Certificate issuer:       /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial:       019F935B962BDEB836AA1310EC2035AAD5AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
Manifest number:          0983
Signing time:             Fri 24 Jul 2026 09:01:20 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:20 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:20 +0000
Files and hashes:         1: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: n1DncIlpN90DH7FYhH8Rlz7Q7hqXtD3Y/JnsXWSBBb4=)
                          2: gW_qGfKQeIjCzm5uq8uaZ6bICSo.roa (hash: kRJ+XX/gU6aPLqrNsFhQwdwg4zAQl3rYc3y2VSOo9h8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:96:2b:de:b8:36:aa:13:10:ec:20:35:aa:d5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
        Validity
            Not Before: Jul 24 09:01:20 2026 GMT
            Not After : Jul 25 09:01:20 2026 GMT
        Subject: CN=7ccf3fe420ad80e56b4592cc95184c8a85deccb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:61:9f:82:b4:73:fc:7a:22:4e:6f:9e:13:ef:
                    50:63:61:d2:96:39:1c:59:60:c7:79:be:c6:2a:0d:
                    28:15:8f:3c:41:45:29:ae:b0:d8:4c:5a:8b:de:1a:
                    a4:be:80:10:3c:f6:0b:13:35:35:0e:d3:f8:20:9b:
                    8d:9d:4b:f4:24:94:ea:2c:86:05:90:86:58:b5:af:
                    be:08:03:d0:80:f2:80:da:b0:af:6c:ec:88:1d:a3:
                    25:f5:f6:77:c1:18:0f:1a:e1:8a:48:2d:22:3e:68:
                    2a:76:a1:83:85:e7:19:d5:d6:fa:16:95:64:16:cc:
                    42:67:37:1b:88:a4:0c:10:6a:2c:81:f8:27:60:38:
                    e0:c4:f8:aa:f0:9c:3f:62:12:df:83:01:28:0a:be:
                    d7:09:c6:0b:bd:67:2b:59:7d:df:b2:8d:b9:28:72:
                    2f:d1:77:e0:1e:7e:cf:57:63:20:1c:2a:5c:d4:99:
                    b2:8f:5a:f1:58:d2:5c:05:f3:e6:30:4a:3b:93:32:
                    f4:cc:ac:af:06:fd:bf:7e:c2:a0:4e:43:a0:2e:8b:
                    1d:df:a4:c5:f4:fc:fd:95:4a:dc:f4:f4:f3:28:d1:
                    7d:bb:20:ee:06:07:9c:5a:6f:aa:95:91:d0:5e:97:
                    49:a1:51:64:cb:79:a8:6d:52:bd:7a:de:79:f5:a1:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CF:3F:E4:20:AD:80:E5:6B:45:92:CC:95:18:4C:8A:85:DE:CC:B6
            X509v3 Authority Key Identifier:
                keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:7f:ca:b7:68:cb:7c:30:55:40:60:bd:c4:d1:36:66:33:0b:
         92:ed:26:3c:f3:ca:36:ee:fa:4d:22:8a:6f:5e:0d:4c:3b:52:
         f3:91:60:fc:a8:bd:7a:74:7d:22:66:c9:f3:8d:36:ea:e2:59:
         d1:4c:0c:33:c0:78:0b:61:a1:c8:94:6e:b1:cb:df:2e:46:64:
         33:22:e9:b0:34:30:4a:b3:dd:33:bf:e7:22:4f:e5:97:0a:e9:
         1d:f8:ad:9d:16:92:3b:15:e4:19:f4:5b:28:22:ba:d5:99:ca:
         65:f3:fc:db:9e:ce:66:f0:5e:d8:02:8a:6a:95:6d:d4:3d:31:
         40:09:81:d2:af:b5:0e:d8:ce:42:9a:61:1a:4b:3c:ab:37:10:
         21:2b:e8:1a:fb:68:32:ee:f7:88:81:1e:32:c6:6f:b0:e8:40:
         38:45:51:8a:cf:8c:6d:1a:72:58:33:95:4c:a3:1b:03:d4:39:
         73:5d:b5:9b:e0:94:4b:68:aa:73:4a:4b:f6:59:02:66:58:2f:
         65:25:05:16:4c:85:78:da:2b:70:77:9e:b8:15:95:0f:32:e5:
         2c:99:6c:ad:cd:94:45:93:79:be:f1:97:c5:a2:a1:e1:fe:d6:
         f7:69:f7:53:e3:38:4e:4e:a4:12:12:f7:00:4e:fe:c6:de:f2:
         93:f4:48:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:00 2026 by rpki-client