Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
File:                     jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json)
Hash identifier:          jThk7RZQfFgK13DbEqMONnNIgxp7O6kVz5tSxH9IEFY=
Subject key identifier:   B4:91:16:89:7E:FE:B1:80:6B:77:85:9E:FC:D1:5F:9C:D7:31:A5:9B
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Certificate issuer:       /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial:       019F85D60240F4EF71EC66FCE38549467D5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
Manifest number:          17DF
Signing time:             Tue 21 Jul 2026 18:00:22 +0000
Manifest this update:     Tue 21 Jul 2026 18:00:22 +0000
Manifest next update:     Wed 22 Jul 2026 18:00:22 +0000
Files and hashes:         1: JJBuxiH7N8lbcBXgw5KQrt5-EvU.roa (hash: yuGCrAPUyjxlYSHRZDhM2aJs4WM249W9d+i/Vuix/5Q=)
                          2: KUSYPuHV0BPhErEp3TcpVUt1EQA.roa (hash: sBg+JjnzDUbRmXsbrD21Od6LO8lyYKiFXNtgEPlf+T0=)
                          3: irgcza7ueUyMGnD413LhS2bOjJI.roa (hash: daWp79CmAXWz32HU7ki6gyN205KgB+0e3s53G3yOlXg=)
                          4: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: CaKRi3adb2UhEIHnJ3eTggH8iWmIQ57ONzL/W7oEM4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:d6:02:40:f4:ef:71:ec:66:fc:e3:85:49:46:7d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
        Validity
            Not Before: Jul 21 18:00:22 2026 GMT
            Not After : Jul 22 18:00:22 2026 GMT
        Subject: CN=b49116897efeb1806b77859efcd15f9cd731a59b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3d:58:07:65:08:95:70:58:7b:d3:3e:8b:44:
                    18:c8:af:6c:53:52:65:e6:cc:15:b4:fb:de:ef:d1:
                    9b:51:36:20:79:00:1b:44:9a:f9:e2:0b:bf:c1:a5:
                    01:20:bb:b6:d8:39:5d:e2:4b:6e:0f:c7:7d:79:8a:
                    d7:33:b4:e1:2e:ec:2e:9e:9d:d3:13:f3:41:db:ec:
                    b8:9a:57:ca:0c:95:99:05:dc:06:3c:c2:a5:85:4c:
                    51:b3:0f:eb:a7:92:c9:4d:12:dc:ba:85:84:51:2e:
                    2b:7c:af:cb:ad:44:77:13:da:1d:71:14:c3:14:c7:
                    fc:e4:8c:9d:a2:f0:71:03:a4:24:bb:86:fc:39:92:
                    d6:6b:22:f3:1a:cc:e7:09:4e:75:ab:b3:c1:c7:b3:
                    67:37:a1:66:3d:2b:0a:0a:74:03:6e:03:14:ca:aa:
                    7c:1c:b8:7a:71:c0:52:4d:73:3e:13:e1:d1:6c:4a:
                    51:f5:ba:2c:37:8a:5f:49:70:8f:b0:91:26:82:ef:
                    43:4c:de:43:bc:6a:7c:a0:a4:6b:c1:25:22:0f:85:
                    56:79:ee:bd:08:9b:44:7a:c9:0f:6c:4d:45:94:f8:
                    b7:b0:3a:47:86:77:3c:29:af:27:a1:84:57:c1:08:
                    18:d2:23:2f:0b:9c:cf:15:35:67:43:01:26:78:c5:
                    d1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:91:16:89:7E:FE:B1:80:6B:77:85:9E:FC:D1:5F:9C:D7:31:A5:9B
            X509v3 Authority Key Identifier:
                keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:50:45:b1:fd:49:95:77:40:63:d5:1b:d0:6b:42:1c:bd:32:
         05:3c:0d:00:bc:56:40:11:01:b2:aa:b1:6b:de:79:b9:71:05:
         ca:83:da:1a:7c:c9:43:1b:b4:6d:e9:f7:0a:dc:11:e8:1f:be:
         3c:c3:27:7c:69:14:0b:5f:b2:8e:86:3d:a8:b3:5d:27:2b:e2:
         e9:17:aa:4d:90:86:4a:c3:8f:e4:de:e0:09:36:83:d3:e0:9f:
         f8:98:e2:d2:32:76:00:ac:2f:db:fe:04:20:43:d7:0f:42:f8:
         d4:42:ca:0a:53:47:08:d8:33:ba:d2:2e:4e:e2:25:6d:6b:03:
         92:92:40:97:f8:31:f9:77:c1:e2:55:fa:5b:ff:12:df:cf:9c:
         81:2d:21:8a:11:d2:22:11:ba:bb:92:a7:28:27:d7:f5:3c:46:
         43:8b:3a:cf:e4:6d:6c:15:d8:af:7f:92:27:4b:38:87:5e:38:
         63:9f:e2:0e:1b:1d:39:ad:d1:55:9c:fd:cd:ce:ae:de:95:a5:
         3c:38:7e:f7:df:79:8d:35:c9:f8:f3:a5:c4:1d:82:7f:42:56:
         56:58:77:b0:f2:f9:07:94:90:7a:dc:9c:18:94:c7:de:b1:c1:
         82:3f:e5:99:40:90:77:a1:fd:10:f4:59:61:f4:7c:d8:13:58:
         cb:57:fc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:23:50 2026 by rpki-client