Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
File:                     JiNBtDPh-Py3ljItL9kmQJOW560.mft (raw, json)
Hash identifier:          ZJWoszxpIFcybRtDbBwrAqErWqJiNBkb/t/hOm/epBE=
Subject key identifier:   DF:D3:0E:62:7B:6A:2A:5C:88:45:C1:CD:3E:A6:7F:D8:83:87:40:91
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Certificate issuer:       /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial:       019F93C955C9ABAA6CFD2ACD9B5583530A50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
Manifest number:          135D
Signing time:             Fri 24 Jul 2026 11:01:13 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:13 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:13 +0000
Files and hashes:         1: EDI4hBfvhmhntt7hYvBIEgLQOJA.roa (hash: 2bxpLwvyVSXEk8/vuBLJpeiNYeHTrUFQCELrB9BRYW4=)
                          2: Fqol7Ql1lTnQ1pbIdCZcxbCF39k.roa (hash: +R5PirogobghNFmFq7p4/kohSnTc74mKrNVHXJGdCQg=)
                          3: JiNBtDPh-Py3ljItL9kmQJOW560.crl (hash: SwUQ4MVAW6jTcb+huSDJz+KbJRnHzXzgAybl0wC19bc=)
                          4: tbK1AbVereS_NngI45L11SaPIkg.roa (hash: pGphgE8cOkuzyKQJOlm5N3l9aQFRIzUTSTIpMJ4LzH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:55:c9:ab:aa:6c:fd:2a:cd:9b:55:83:53:0a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
        Validity
            Not Before: Jul 24 11:01:13 2026 GMT
            Not After : Jul 25 11:01:13 2026 GMT
        Subject: CN=dfd30e627b6a2a5c8845c1cd3ea67fd883874091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:72:28:bb:51:4d:2b:26:c5:3a:a1:d0:88:aa:
                    67:2b:98:b1:26:cd:3b:3c:0e:40:65:76:cf:b5:bf:
                    a6:ad:81:d4:60:16:d8:7e:fe:41:80:c6:ca:f1:6a:
                    56:e8:06:1b:9b:a3:68:a4:ec:3c:e8:27:a9:c5:a3:
                    54:eb:bf:4b:dc:7d:5c:48:b8:72:54:eb:ee:ab:2c:
                    fa:e2:98:98:75:9f:49:4e:10:e1:52:50:80:0f:6f:
                    c2:0a:97:31:ea:12:ae:4d:df:60:99:1d:45:31:c9:
                    20:48:eb:e2:12:c1:27:5b:8c:b5:0b:aa:98:56:50:
                    a1:33:26:10:a9:85:45:75:ac:44:45:88:ff:bc:5a:
                    b5:e2:b8:3f:a2:5c:96:ae:93:e6:87:7a:85:cc:16:
                    22:bd:d2:d3:a5:6c:bf:41:90:80:22:9c:62:03:cb:
                    91:be:35:b1:42:68:92:1b:f8:ca:1d:d6:28:0d:ac:
                    02:7e:cb:d4:df:bc:b8:54:8c:b3:f1:1c:bb:57:c5:
                    d0:29:05:61:6b:27:3c:60:fd:57:af:bd:a0:bb:79:
                    a1:e3:ee:ea:d9:1e:57:af:78:9e:13:46:5d:a2:0c:
                    e3:12:de:35:85:93:97:08:f5:53:4b:25:85:40:d2:
                    b7:23:fc:32:41:9d:ed:db:46:66:6b:f7:47:61:cd:
                    e5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D3:0E:62:7B:6A:2A:5C:88:45:C1:CD:3E:A6:7F:D8:83:87:40:91
            X509v3 Authority Key Identifier:
                keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:98:fe:8d:71:69:29:dd:73:a7:0c:f1:a9:d5:b0:8e:9f:27:
         6d:79:6b:c9:d6:26:0c:16:8d:b8:94:4d:07:53:7d:3d:7d:52:
         08:f5:c3:f1:b6:cf:76:23:fa:c8:e5:6a:9c:c8:37:f3:a7:ad:
         47:47:87:e5:44:05:81:42:9f:60:d8:84:47:43:e0:bf:31:6f:
         db:7b:7c:5b:f0:fd:ba:62:cb:b0:94:21:bd:16:df:60:c4:41:
         67:e0:82:34:da:1e:75:55:c9:67:44:65:84:da:09:a2:80:f1:
         c3:fa:7e:77:9e:39:bb:1c:84:52:1c:a8:05:04:5e:3e:d3:0c:
         f1:70:74:3c:88:a1:c2:7d:9a:d6:e8:b8:99:f9:65:db:a4:d2:
         a2:36:1f:1f:01:00:1e:3d:90:df:92:94:f0:57:90:60:26:72:
         8b:00:86:b2:49:55:5e:f1:af:fd:ee:cb:29:0a:5f:b7:3d:d9:
         41:26:79:a8:3d:e8:5a:35:a2:1b:2d:f2:17:7d:98:c8:7c:30:
         46:1d:33:26:bc:17:e9:1b:e2:e8:77:66:3a:04:93:13:f1:03:
         f5:e4:3d:a8:65:4f:43:ab:a4:7f:ae:8d:3a:f1:2d:fc:eb:e3:
         9c:a7:cb:f6:3a:0b:05:82:76:9f:41:77:05:35:15:64:db:e4:
         b4:ff:d3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:43 2026 by rpki-client