Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
File:                     jispgru9Q4t6sawE42wYgPOMato.mft (raw, json)
Hash identifier:          eTKY+0S9pdYbB6716qgCXvWQ2Erwhz+UPVXfr5G7qIc=
Subject key identifier:   AA:E0:A8:CA:AC:08:4E:6A:CF:A4:D6:3B:3B:10:76:7D:11:FD:94:81
Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
Certificate issuer:       /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Certificate serial:       019F946D3DB526BBAECF06E6A4880C1BC6EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
Manifest number:          15AB
Signing time:             Fri 24 Jul 2026 14:00:14 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:14 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:14 +0000
Files and hashes:         1: jispgru9Q4t6sawE42wYgPOMato.crl (hash: s5I7alysA7mgNUSJOumCFg3rCJizkXYxpUaBCJrFeIs=)
                          2: rpLLN-zEc59BcyaW_IW8fwJMCgE.roa (hash: coMYH2LK5We0hlfFCOPDMsdK4brnDNXm6xfRfXEZv9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:3d:b5:26:bb:ae:cf:06:e6:a4:88:0c:1b:c6:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
        Validity
            Not Before: Jul 24 14:00:14 2026 GMT
            Not After : Jul 25 14:00:14 2026 GMT
        Subject: CN=aae0a8caac084e6acfa4d63b3b10767d11fd9481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cd:5c:94:d1:6c:e2:26:10:f5:9b:42:d7:86:
                    9f:c5:8c:2c:16:ad:0b:73:87:5e:b7:cf:93:95:69:
                    8c:87:3a:d8:8d:25:d2:9d:f3:3a:12:21:a2:2f:6e:
                    26:6f:80:d5:79:79:6f:0e:5c:6a:35:5f:94:15:40:
                    e7:1c:f8:ff:b3:ee:81:92:78:70:99:1e:e8:30:3c:
                    28:bd:48:f3:91:d8:8b:2a:41:41:a4:59:f2:d2:dd:
                    1c:d5:9f:45:58:6c:1f:2a:04:01:c6:07:96:6e:9d:
                    cd:75:77:6e:6d:ef:8e:dc:f8:82:d9:d5:52:62:aa:
                    7c:ff:1c:49:56:4d:44:ba:b5:5d:70:a7:da:38:56:
                    93:74:43:f0:24:ee:6b:5b:2e:a3:ab:06:4d:d3:29:
                    84:b5:7f:e4:1b:51:4f:15:a8:00:f2:1a:d3:3e:ef:
                    a1:92:f6:0b:d1:bf:7a:1b:11:43:ca:c5:91:2a:08:
                    55:ab:07:ad:4d:ca:c2:04:09:42:35:f4:b6:93:97:
                    89:87:91:64:18:8c:99:0e:91:90:c6:9c:c0:35:89:
                    20:2b:a2:e8:4a:de:92:95:a7:18:a7:31:6a:68:ba:
                    fc:27:0b:b2:12:11:34:7e:c3:2a:e2:d1:74:7a:14:
                    ba:1b:d5:a6:f6:b5:38:e8:73:5f:4c:2e:61:db:f5:
                    c1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E0:A8:CA:AC:08:4E:6A:CF:A4:D6:3B:3B:10:76:7D:11:FD:94:81
            X509v3 Authority Key Identifier:
                keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c4:b8:e3:70:94:36:5a:7d:c8:56:33:45:f3:e9:a5:0f:46:
         96:a3:2b:d0:f2:77:c2:d6:34:6d:26:a3:54:11:2b:c9:ab:7f:
         20:f8:46:b3:d0:82:d2:e0:e2:4c:37:87:7d:71:0d:0c:c3:4c:
         f4:99:8d:18:82:49:04:e4:7b:55:c9:3b:79:57:a3:58:ab:a4:
         b4:4b:e3:45:6c:b1:12:41:a6:23:36:44:56:be:99:df:79:91:
         38:3e:51:1c:ad:3e:6d:d8:a7:c6:6e:74:9b:e5:b5:f1:c2:ef:
         4d:af:0b:ee:a1:b7:68:89:c3:b7:ca:49:b9:08:81:03:ba:d0:
         74:42:7f:5f:f7:4d:b6:b7:1c:02:8f:3b:e1:3f:a2:70:6f:f6:
         28:b8:35:56:19:0d:a8:83:21:e8:79:f8:6a:11:5f:c5:5d:34:
         26:06:97:76:56:8d:bd:5d:24:6c:b4:f7:e2:5e:99:e0:f2:d1:
         76:46:15:b7:ec:6f:f5:d3:00:fb:15:fa:5d:d4:c3:56:b5:05:
         46:59:b4:e3:a3:e8:ac:a9:d8:fb:2c:11:15:91:66:d7:af:59:
         68:d8:c7:af:77:fe:59:41:6c:63:4e:24:64:99:29:01:81:3e:
         4f:98:43:10:26:be:47:9c:09:1e:e3:b1:29:21:e4:e9:0b:7f:
         63:6b:79:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:16:04 2026 by rpki-client