Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
File:                     1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft (raw, json)
Hash identifier:          ydw29YSKkRVsjntAYJyua3HoXOa7HxG1ULtRHLmgUdE=
Subject key identifier:   4A:6B:85:E3:3E:47:2B:73:FB:9A:F2:78:D1:08:18:C3:75:74:1E:69
Authority key identifier: F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2
Certificate issuer:       /CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2
Certificate serial:       019F9136084CCBD5D05EEA83A7970C2270C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
Manifest number:          02CD
Signing time:             Thu 23 Jul 2026 23:01:05 +0000
Manifest this update:     Thu 23 Jul 2026 23:01:05 +0000
Manifest next update:     Fri 24 Jul 2026 23:01:05 +0000
Files and hashes:         1: 1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl (hash: Qj6MnUQK2hPrbR2O38cIga8ySpnwlem6OSrGOP/L8hk=)
                          2: QzF6zdAmWlqa8MJWx9j94DfMPOM.roa (hash: GR81IrpEx4ZIKShy/solAKxjvbcjUDvmJG95WKquc+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:36:08:4c:cb:d5:d0:5e:ea:83:a7:97:0c:22:70:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2
        Validity
            Not Before: Jul 23 23:01:05 2026 GMT
            Not After : Jul 24 23:01:05 2026 GMT
        Subject: CN=4a6b85e33e472b73fb9af278d10818c375741e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:32:de:7e:4a:e1:09:fd:41:f3:b2:10:3f:0b:
                    6a:54:a9:fc:8f:e2:a3:ff:48:78:b6:45:2b:a3:d7:
                    21:98:a7:7e:19:69:21:19:bb:79:9c:18:c6:6f:b2:
                    55:ed:22:df:e2:36:35:5a:94:52:a0:57:0e:3f:7f:
                    81:fb:21:f7:9a:2d:eb:e4:da:a5:69:c0:3a:30:8b:
                    e2:f4:c7:00:a2:d1:e8:14:51:64:b6:9b:1d:c0:b4:
                    19:3f:95:c5:b4:a7:a2:0d:22:f4:2c:48:fc:40:c3:
                    8d:c9:aa:e1:d8:92:1f:d8:26:c3:9a:a8:6e:81:c7:
                    9e:6b:6b:66:4d:07:64:b6:c6:5c:43:db:43:2a:5d:
                    09:83:a2:c1:a6:be:2e:7b:6b:b8:6c:52:da:af:bf:
                    45:69:a7:a1:5f:89:7e:66:f5:71:b8:d6:de:01:f4:
                    d3:fe:75:af:18:56:34:25:da:05:55:ea:c6:95:ea:
                    d1:a1:41:a5:f8:b1:5d:fd:d5:c3:39:3d:77:aa:43:
                    84:e1:9d:ac:c5:66:42:66:e2:99:7a:63:b2:a9:f7:
                    c9:f5:23:5f:fe:72:82:a5:3b:7d:09:f7:a8:f4:26:
                    88:4b:31:e7:f8:69:2e:51:4d:ce:6a:1c:ac:f6:24:
                    ef:88:35:33:c4:80:47:f2:be:0a:e3:05:bb:8e:db:
                    d7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6B:85:E3:3E:47:2B:73:FB:9A:F2:78:D1:08:18:C3:75:74:1E:69
            X509v3 Authority Key Identifier:
                keyid:F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d0:90:30:26:8e:9f:86:2d:15:28:34:6a:31:f3:5e:6b:62:
         75:cc:47:53:8c:84:b6:d5:e3:e9:9f:11:35:ad:60:e2:2d:ea:
         38:3f:8d:d2:15:06:1c:da:4c:18:85:d8:3e:b4:80:db:58:0d:
         e1:1a:8c:f6:4a:e4:2b:7c:7b:9d:e3:8d:ce:be:f7:6b:81:ef:
         cf:df:5d:51:39:5a:9d:f2:dd:de:ef:6b:05:0a:35:3e:be:6b:
         87:b2:85:f8:2b:43:ca:8c:8d:f0:a2:6e:f2:be:8e:dc:76:f8:
         a4:07:ff:32:cb:ef:2a:08:33:3f:5e:64:16:94:eb:ed:b2:a0:
         91:94:8c:8a:a7:52:c6:0c:4e:64:f2:72:cd:36:94:18:f3:c6:
         09:3f:80:8a:0c:14:e6:c8:1d:e9:70:68:e6:7f:f5:ad:a0:87:
         18:8e:b1:a4:cc:87:17:87:d3:ac:7a:ce:3d:cf:a8:01:4d:fe:
         27:0f:e4:84:d1:b0:0c:4b:dc:e7:9c:ad:89:d6:cb:fc:0f:d5:
         1e:f8:52:58:bf:91:25:e0:b1:a5:76:df:19:6a:71:c9:ad:88:
         4f:e4:2d:92:1e:f0:e9:73:71:22:c8:31:8c:b1:fe:47:df:0d:
         33:2f:51:31:68:fa:92:a7:1c:c1:8a:14:31:e6:40:73:35:5e:
         62:ee:d0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:59:52 2026 by rpki-client