Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
File:                     JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json)
Hash identifier:          DJqnEkF5TyYeHOuEXP9WbxWDQkcsiPkYoudWSSsx6Dc=
Subject key identifier:   9F:E5:E5:4D:05:C3:E6:C8:0A:30:2E:5E:18:59:93:26:91:A8:8F:E1
Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
Certificate issuer:       /CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Certificate serial:       019F93FF9C4EED1F42B6EFDA01D41161BE60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
Manifest number:          03FC
Signing time:             Fri 24 Jul 2026 12:00:29 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:29 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:29 +0000
Files and hashes:         1: D17eb-YaN69zmYAWu9of4KG5E8Y.roa (hash: stGJZzeKt4km6Sv/uUT+Q3OWclxmp1dOYGAe5XGVe2w=)
                          2: FZgi84RMvT9_2vE42FDuM9M6yQo.roa (hash: MWv0A+a3Hv1l7nsYC0PKMV2mBEaDOEQF7nbo1KN1I5Q=)
                          3: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: PV2e+oJZE+QOEmvXrG60wExVRw5H64pABuqJkwehveU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:9c:4e:ed:1f:42:b6:ef:da:01:d4:11:61:be:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f
        Validity
            Not Before: Jul 24 12:00:29 2026 GMT
            Not After : Jul 25 12:00:29 2026 GMT
        Subject: CN=9fe5e54d05c3e6c80a302e5e1859932691a88fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d6:aa:1a:3c:6a:f9:6a:d5:22:bf:5e:29:b3:
                    07:45:3d:a0:6c:36:27:48:c3:e4:75:39:00:38:98:
                    e0:18:1b:fd:f9:b5:c7:cc:3c:27:69:c0:aa:49:84:
                    30:63:e0:c9:b6:9f:79:f6:e2:d9:02:4d:40:b7:86:
                    56:23:85:bf:bc:8d:1e:1c:19:80:5e:3b:36:88:83:
                    19:37:fc:12:6f:c1:39:60:24:1c:ec:10:65:31:7d:
                    ad:fb:24:36:20:8b:94:c0:37:e4:d0:79:07:a9:0f:
                    3c:a1:b6:97:46:50:2a:23:b2:73:f3:c3:f8:29:56:
                    36:1a:dc:c6:b4:30:48:25:0e:f6:cf:77:b5:98:a0:
                    b0:95:89:c8:15:1a:2b:00:e0:ff:48:da:2b:50:00:
                    8c:34:99:dd:bc:68:4d:32:d3:46:67:6e:3c:33:a0:
                    23:95:b2:f5:51:42:8f:8e:a3:86:63:90:23:79:e6:
                    8d:f4:0f:82:75:04:26:d3:c2:03:93:09:0f:62:7c:
                    81:f4:1e:15:3e:e4:85:0b:4b:1a:b5:d7:30:c3:b2:
                    8b:13:cf:e6:4f:76:e5:c3:6f:93:f2:ae:d8:0c:d0:
                    e5:44:57:e8:2b:bb:b0:7a:ee:2c:49:9d:07:9b:d2:
                    e2:f1:83:eb:85:ad:6d:99:60:26:d1:0c:de:6a:88:
                    93:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E5:E5:4D:05:C3:E6:C8:0A:30:2E:5E:18:59:93:26:91:A8:8F:E1
            X509v3 Authority Key Identifier:
                keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:1e:df:21:fd:98:7a:80:bd:c9:af:ec:ca:51:87:b1:e6:72:
         f9:fe:31:1d:af:7c:51:3d:8c:27:bd:b2:07:df:b9:22:9c:3a:
         72:09:bc:fa:98:56:ab:a0:7f:f0:49:47:70:ce:75:f8:4e:c8:
         d6:33:b4:83:2d:de:41:15:c6:4e:5e:77:4c:69:8b:3b:a4:fb:
         a3:fd:6b:d8:b3:5e:f9:2e:c5:ff:c9:b8:d0:2b:62:99:90:1c:
         56:2b:12:fe:c1:8f:31:bf:23:a5:dd:57:18:44:5d:8f:a8:34:
         7d:ee:38:ca:43:d4:da:ae:25:21:f0:be:76:6c:e8:27:46:8b:
         4f:a1:4d:e6:47:e0:4c:59:01:92:ba:d2:0c:82:9e:3e:4d:55:
         ae:2a:bf:26:ee:a5:08:be:f4:f2:38:f0:0e:a5:87:30:db:76:
         22:4d:de:d5:e4:53:d5:e0:25:72:41:39:3a:a3:56:bd:0b:5e:
         0f:55:48:fc:65:bc:1d:b7:9b:04:47:52:4c:7a:ae:7d:f2:47:
         2f:fd:87:2b:02:59:83:b1:2b:9d:34:c4:c4:2e:63:30:9a:76:
         5e:dd:37:b7:af:5d:e4:81:a5:ce:bf:ec:39:79:5e:e5:02:6e:
         42:b3:9d:de:bb:73:4b:bf:da:ac:d2:29:85:43:55:7e:cf:d3:
         50:b6:ad:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:24 2026 by rpki-client