Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
File:                     J4YXdA7NlbcE2pel-eU8AxFEQms.mft (raw, json)
Hash identifier:          GGNF51uftGtB3j6BU8HU4mPm2+pEQl6WL5G19A7AIUA=
Subject key identifier:   25:12:60:89:B9:E5:8A:B4:A2:AC:2B:A5:D1:DB:CB:8D:84:D7:50:98
Authority key identifier: 27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
Certificate issuer:       /CN=278617740ecd95b704da97a5f9e53c031144426b
Certificate serial:       019F946D7E707ED176B66C0A358FBB61D16B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
Manifest number:          1571
Signing time:             Fri 24 Jul 2026 14:00:31 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:31 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:31 +0000
Files and hashes:         1: J4YXdA7NlbcE2pel-eU8AxFEQms.crl (hash: CxwJTq2CPB3u2m1UslKdo4DayNIB79qyOihhLfwG1Xg=)
                          2: hv5F2fKm7cZ-fqlTGhS4HLwa_Mo.roa (hash: 3e8QQ5wpWIE1xn2kF+A/CiSMbxQICMGVp/zM+nv9PN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:7e:70:7e:d1:76:b6:6c:0a:35:8f:bb:61:d1:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278617740ecd95b704da97a5f9e53c031144426b
        Validity
            Not Before: Jul 24 14:00:31 2026 GMT
            Not After : Jul 25 14:00:31 2026 GMT
        Subject: CN=25126089b9e58ab4a2ac2ba5d1dbcb8d84d75098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ad:b6:11:e0:3a:b0:d1:68:28:9d:58:8e:37:
                    f2:11:a0:b6:e6:ef:cd:ce:21:9c:1a:36:da:d0:47:
                    80:bd:d9:5f:ed:db:a3:05:9d:8d:84:fa:c6:af:32:
                    36:78:5f:76:68:ce:37:83:ae:5b:c3:0c:13:0d:d8:
                    98:83:49:27:29:1b:79:2e:21:77:eb:2c:0b:05:59:
                    59:32:d4:c7:3f:4e:5b:61:ce:04:02:62:26:79:79:
                    99:38:cc:b2:53:69:25:31:2b:48:51:ae:9e:f7:b9:
                    20:f3:02:de:7b:17:b7:f4:cd:1e:c3:a7:c3:52:16:
                    46:0c:31:8e:22:e3:62:e8:1e:52:d0:bd:84:35:67:
                    a1:19:3f:72:a7:d1:d8:9d:bb:cc:82:06:b3:08:07:
                    c7:a7:67:b3:8d:e8:aa:76:13:eb:a9:b1:0c:48:3a:
                    21:7e:b2:d6:0e:33:5d:6f:b7:ef:22:7a:db:89:88:
                    f5:08:a0:56:b7:4e:5b:a9:cc:b2:a4:4b:3c:e3:80:
                    6c:69:74:7d:37:83:d6:2a:85:98:3f:54:56:45:66:
                    ea:19:ca:95:de:da:25:e2:ec:74:5f:97:36:fa:bf:
                    f5:5b:70:cf:b2:8f:6a:8c:10:29:9b:ac:5e:56:7c:
                    11:b8:0a:54:bd:a4:88:16:dd:d2:e2:88:c1:0b:db:
                    2c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:12:60:89:B9:E5:8A:B4:A2:AC:2B:A5:D1:DB:CB:8D:84:D7:50:98
            X509v3 Authority Key Identifier:
                keyid:27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b3:d8:61:78:29:0a:fb:96:d8:42:f5:81:78:8e:58:2b:e9:
         36:47:34:66:c8:be:c0:24:a0:e8:24:9d:c5:f9:91:bd:ef:1c:
         27:7c:b2:8a:e3:45:00:01:85:ff:4e:03:93:f7:be:49:04:8e:
         0f:41:91:9e:19:02:cc:91:b7:a4:e9:4b:c3:ac:65:a2:7f:44:
         7e:bb:aa:7f:4a:44:78:b1:fb:cc:03:b6:2b:68:f7:14:3c:a5:
         90:d6:81:81:ca:75:6c:0a:48:b6:41:e5:eb:23:f7:ae:fe:d1:
         c3:c0:80:30:29:b8:54:c7:cb:75:3d:be:19:20:c1:8f:72:70:
         93:13:a6:4f:f0:01:96:9a:4f:c0:91:c6:fe:b7:4f:f0:06:ac:
         d4:f1:6c:99:4b:06:ff:43:42:0b:35:28:c6:8b:4b:b9:08:e7:
         31:69:c7:45:c2:04:bb:62:f2:84:db:bd:9a:fb:92:53:54:5e:
         3a:32:fa:66:a5:08:84:05:99:70:91:c5:73:32:bf:56:91:62:
         4b:7f:a6:3f:de:94:be:bc:60:6b:07:b8:74:0c:da:77:5d:29:
         ef:c8:87:2a:9f:43:d4:ad:f0:99:57:ac:9b:1a:93:52:15:ab:
         ac:ed:53:e9:f0:cf:98:4c:de:c2:20:88:5a:85:18:dc:40:2e:
         7e:6a:44:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:24 2026 by rpki-client