Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
File:                     JY9ajila0de0ih4RlYeQBStXolM.mft (raw, json)
Hash identifier:          xwZ/7jyKonY3qBVRDreUUVHSYBNYMI12pPC9XfzTBZU=
Subject key identifier:   51:69:BB:0A:8E:90:E3:D5:32:BC:5B:6A:D1:0A:8D:96:E9:6F:B8:EB
Authority key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
Certificate issuer:       /CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Certificate serial:       019F82D51AC6013C2761F4CBECFF753D20CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
Manifest number:          1916
Signing time:             Tue 21 Jul 2026 04:00:31 +0000
Manifest this update:     Tue 21 Jul 2026 04:00:31 +0000
Manifest next update:     Wed 22 Jul 2026 04:00:31 +0000
Files and hashes:         1: JY9ajila0de0ih4RlYeQBStXolM.crl (hash: XZ7N23hYY1lg3RMux/rBg+I4vCOipGwoC6/JlN9HqVs=)
                          2: XsoOkS5cVinDKGylaIEe4V2iJiI.roa (hash: yUEIW+aXADdubfFegT02HQm/MXVHfJjhRJSJMZb2fr0=)
                          3: d9SsK9JFe4erW3mFTzDPmAS0ODY.roa (hash: eDnr+btVqcRjIrpyGoGoaGlmtxJe33quRXxSlU0qhfA=)
                          4: lcmCUf_CgzeIR8L7taeEF8YZZn4.roa (hash: WXtKI31hDy0GKZrnRRKtBFDImlVMPaG1/eg9VugOcII=)
                          5: lhg5zVYrNMLRf5rtCyfanPHKWCo.roa (hash: tJ2WDHFTAECq/EoCtDCOE9Vj8E1Ebzh5Ex98VPbUM4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:d5:1a:c6:01:3c:27:61:f4:cb:ec:ff:75:3d:20:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258f5a8e295ad1d7b48a1e11958790052b57a253
        Validity
            Not Before: Jul 21 04:00:31 2026 GMT
            Not After : Jul 22 04:00:31 2026 GMT
        Subject: CN=5169bb0a8e90e3d532bc5b6ad10a8d96e96fb8eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:54:0c:5a:19:ee:9a:44:65:b5:82:21:57:77:
                    25:f9:c0:be:72:53:e7:e6:68:b0:20:1d:26:1b:e4:
                    82:74:80:1d:38:45:82:e4:07:8e:59:b8:c6:83:33:
                    ee:51:4b:31:b9:98:62:0d:e2:7a:9f:30:5e:07:72:
                    96:62:33:c2:5c:50:13:aa:04:f7:c3:42:9c:2f:9e:
                    da:4a:e7:ec:6b:9c:3e:34:f6:e2:53:cf:e2:f7:08:
                    48:21:14:09:9d:23:26:81:56:e0:2e:70:a9:ff:0e:
                    d6:72:1a:b6:24:a6:29:52:bf:89:11:88:d7:30:df:
                    4a:bf:1c:f4:62:a9:c5:ac:e1:15:f6:e6:3a:fc:9a:
                    d5:11:4d:74:12:28:6c:e8:87:6d:e7:cc:da:aa:8e:
                    a0:7e:f6:eb:04:57:dc:be:d4:9e:5a:64:2d:d1:b5:
                    6c:8a:53:1d:aa:a6:a0:38:2b:a7:ad:93:e4:aa:77:
                    36:0e:27:1c:c5:45:c9:cb:9f:89:06:21:34:56:30:
                    79:c5:cf:83:ee:ca:c5:fa:7d:62:4a:49:9c:fa:28:
                    4a:5e:bd:94:18:70:12:52:19:12:2f:ce:97:3d:49:
                    bf:4f:20:9d:f3:d2:e0:7f:cc:05:0e:71:45:fe:a9:
                    97:c4:2e:92:1f:76:cc:32:d3:06:01:6d:4b:43:38:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:69:BB:0A:8E:90:E3:D5:32:BC:5B:6A:D1:0A:8D:96:E9:6F:B8:EB
            X509v3 Authority Key Identifier:
                keyid:25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:63:21:96:43:b2:ee:9c:03:ae:87:32:f8:d2:f9:ec:e2:24:
         79:b9:64:9f:c3:97:cc:a3:ff:9d:4c:ab:b4:29:50:90:6b:db:
         c8:ef:b4:9e:bc:c7:38:69:87:84:7b:32:26:28:9f:07:27:4e:
         8a:6a:c7:c8:63:1b:71:23:5c:7c:88:df:fe:1b:f8:d1:c7:3c:
         c8:cc:af:e6:53:72:af:d9:2a:8b:0a:b2:91:c9:c3:e4:26:e4:
         41:31:5c:44:a1:72:69:77:cb:5e:62:07:75:28:b3:23:30:ed:
         e8:d6:b3:16:6a:e6:ae:ca:08:e6:bd:33:bc:6e:28:50:bf:9f:
         bc:c4:fb:60:fb:c3:b4:8e:a8:52:a5:28:a0:bf:08:4f:8f:69:
         eb:3c:56:8c:14:c9:49:01:cc:3d:05:ce:08:5e:f1:9e:6a:0f:
         89:20:93:bf:d2:38:fb:75:7a:ab:46:3b:ff:7c:b9:c4:41:f8:
         32:c3:66:3b:25:1f:20:df:50:17:24:5f:c2:3c:8c:10:dd:97:
         e3:00:69:a4:ef:27:68:a6:a7:f0:e0:c9:d2:1c:6f:fe:7b:c1:
         5e:86:77:33:e4:b4:b9:18:9c:37:f9:09:47:03:5a:45:a9:0e:
         6c:7c:ef:d1:fd:3c:68:17:84:6d:cd:3c:bc:c7:37:84:e5:40:
         30:c0:fb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:07:55 2026 by rpki-client