Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
File:                     jxVuaflETCsGaHJWCFtqek6Yh_Y.mft (raw, json)
Hash identifier:          FMBPL2FlzUoZhQ2q5CTc3k46UBnN4GDEVDQoDNBOqVg=
Subject key identifier:   FB:E4:9B:46:2F:10:82:55:AE:FD:80:E8:D7:5D:89:B5:75:AD:6D:A4
Authority key identifier: 8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
Certificate issuer:       /CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Certificate serial:       019F8B6A2E69DA819EA9B36D76CA6015A9FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
Manifest number:          0D6E
Signing time:             Wed 22 Jul 2026 20:00:19 +0000
Manifest this update:     Wed 22 Jul 2026 20:00:19 +0000
Manifest next update:     Thu 23 Jul 2026 20:00:19 +0000
Files and hashes:         1: IGqxlIKv9pQSduOZbyMGfJbT9RI.roa (hash: YZCvKKKTyHwkIul63DB5RjCHdqSG34xePQX/iOEjVC8=)
                          2: jxVuaflETCsGaHJWCFtqek6Yh_Y.crl (hash: zA8fauxBnIhx+1qb3IhY3bjlnbMjmbK6z2xa26SH/6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8b:6a:2e:69:da:81:9e:a9:b3:6d:76:ca:60:15:a9:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
        Validity
            Not Before: Jul 22 20:00:19 2026 GMT
            Not After : Jul 23 20:00:19 2026 GMT
        Subject: CN=fbe49b462f108255aefd80e8d75d89b575ad6da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:c8:94:e0:8c:2d:98:ba:22:19:57:a9:b1:
                    e1:48:07:e7:2c:d9:a1:3b:05:a8:00:7f:bb:e8:9b:
                    c0:29:57:ad:3b:37:eb:83:4e:38:4f:71:95:60:ea:
                    17:e9:e9:79:cb:52:6d:19:31:a9:90:de:a7:65:bc:
                    0a:9e:40:53:98:dd:b3:5b:44:43:d9:98:11:1e:83:
                    ce:af:19:c9:ad:a0:7c:16:3a:16:bc:dc:8d:bb:fe:
                    b7:f0:60:d0:a3:41:d0:5d:ba:1e:cf:bc:c0:d1:e8:
                    21:41:46:6d:6e:e9:25:a5:1e:08:ff:72:45:33:89:
                    14:66:50:e2:62:55:f2:4e:7c:80:72:84:f8:69:17:
                    df:bb:94:f3:69:4a:58:ae:8a:27:28:9d:96:f5:ec:
                    b2:ec:25:93:ef:fe:6e:12:ad:f7:d7:a0:85:cd:e3:
                    d8:28:ca:43:dd:e1:e9:f4:fd:00:c1:08:1c:8e:7b:
                    da:46:7a:67:03:b7:e1:d6:15:8b:2b:26:28:80:30:
                    17:f3:e0:2e:fb:e3:f0:e1:cd:e2:67:73:7d:75:f9:
                    b2:ea:75:73:6b:63:2e:73:bb:f6:31:48:f5:19:a8:
                    b3:f8:80:d8:b4:db:81:12:79:ad:ac:8a:bb:e0:4c:
                    be:9a:ac:2c:ed:b2:c9:ab:f7:3e:02:5f:28:52:1e:
                    04:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E4:9B:46:2F:10:82:55:AE:FD:80:E8:D7:5D:89:B5:75:AD:6D:A4
            X509v3 Authority Key Identifier:
                keyid:8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ce:cb:b3:40:34:49:2c:1b:8f:27:48:01:b7:08:6a:7d:51:
         93:c5:a8:aa:dd:5c:23:1b:dc:8d:3e:32:08:ba:81:cc:1a:75:
         c4:7f:7c:5a:1e:d3:1c:8c:bb:b0:03:86:90:fd:d7:65:fc:96:
         38:19:43:2f:a7:b9:68:9f:9c:47:d9:3f:63:da:73:e6:2b:a1:
         4b:5e:22:8f:13:73:21:10:cb:74:15:7b:81:31:f5:f4:23:f9:
         78:97:ac:a4:db:b8:41:bd:09:32:99:51:88:5e:0f:e9:6f:b4:
         44:65:51:af:fd:4c:c0:e4:14:32:f0:f6:02:f2:58:95:da:81:
         68:b8:d7:26:f5:cb:02:ad:55:78:34:e3:1d:cc:ee:5e:37:6f:
         3a:56:ec:8c:6a:8f:db:ee:4b:83:70:93:43:71:11:cf:6b:16:
         55:ed:27:af:23:05:c6:5b:13:74:28:39:f0:6b:ff:4d:f0:ac:
         73:77:28:cd:ab:c6:9d:b4:de:e6:0e:a3:fd:3b:77:16:8f:2a:
         73:bc:69:1e:c0:02:d9:7d:c1:0b:da:61:19:c9:8d:5e:13:5a:
         c9:10:58:37:6f:f0:7a:3e:61:23:db:94:7e:30:97:cc:87:55:
         40:02:5e:46:6e:67:3a:e4:ba:55:1d:35:18:20:76:27:18:2f:
         3b:81:19:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 04:27:44 2026 by rpki-client