Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
File:                     jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft (raw, json)
Hash identifier:          xNBCdKivVZ74hVBoTTXzX3L7aerlHSF+kaTpaHZGGA0=
Subject key identifier:   97:C9:4A:3A:5B:2D:E5:2F:84:D6:D9:AC:13:71:D0:81:CB:EA:E5:D3
Authority key identifier: 8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
Certificate issuer:       /CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Certificate serial:       019F826769C96335C93BA9300BFB684FC9B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
Manifest number:          19BF
Signing time:             Tue 21 Jul 2026 02:00:43 +0000
Manifest this update:     Tue 21 Jul 2026 02:00:43 +0000
Manifest next update:     Wed 22 Jul 2026 02:00:43 +0000
Files and hashes:         1: 1--5uI7-lFA1vLc5OGC-ol-YopyQ.roa (hash: oRVTaOt3U0YoXKj3+Sn3M9/Gmc3MrUZYmaGBPKb5vvw=)
                          2: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl (hash: 96KEEuf75bHlD5xaKaj2MhEqLcauizUtbpWoxO0gnoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:67:69:c9:63:35:c9:3b:a9:30:0b:fb:68:4f:c9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
        Validity
            Not Before: Jul 21 02:00:43 2026 GMT
            Not After : Jul 22 02:00:43 2026 GMT
        Subject: CN=97c94a3a5b2de52f84d6d9ac1371d081cbeae5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a5:85:71:07:15:8d:b9:20:05:15:77:b7:45:
                    1e:54:c0:35:aa:2a:8f:ec:86:5c:ba:eb:6f:bd:0a:
                    45:b3:18:32:06:fe:2f:03:d2:6e:ec:32:b7:5d:3f:
                    81:7c:bc:a1:82:e7:01:7f:9e:fb:58:b1:7d:d2:f1:
                    7d:de:50:a3:e9:bf:a7:ed:e0:f9:de:5e:a9:ff:a6:
                    17:57:c8:7e:86:09:81:c9:80:42:36:51:ce:52:17:
                    c8:79:5b:c0:37:92:5c:69:08:87:ed:c6:f5:1e:59:
                    86:e2:36:d3:c4:5f:9b:95:7e:35:1d:c4:34:2f:b4:
                    06:98:28:29:43:18:0b:41:8f:12:82:22:d7:18:31:
                    59:0d:4d:e0:ef:06:69:21:4f:fa:14:85:08:b8:91:
                    5b:c9:a2:f3:65:fb:6e:b7:ce:84:b3:26:32:1b:d4:
                    90:e0:69:9f:96:33:f4:48:df:a2:75:0c:01:66:7d:
                    a6:36:fc:13:27:05:74:d4:e9:87:5e:a3:43:4a:e7:
                    78:a1:11:a6:22:26:4d:4b:66:62:9d:d4:74:22:05:
                    e5:1b:1d:e8:e6:55:90:38:a1:68:69:d2:51:ce:e9:
                    86:9d:db:3e:e1:b4:7b:b5:ba:ae:69:24:ff:af:66:
                    7c:7c:7d:b4:fb:5e:17:16:1e:90:fa:54:04:5c:58:
                    af:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C9:4A:3A:5B:2D:E5:2F:84:D6:D9:AC:13:71:D0:81:CB:EA:E5:D3
            X509v3 Authority Key Identifier:
                keyid:8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:fa:77:f1:b7:17:1f:a3:0a:9b:7c:e3:43:83:1d:b5:ba:5c:
         11:0d:9a:90:50:c1:75:80:5c:e0:df:7b:3b:8c:89:78:c1:4a:
         9e:13:ed:7b:dd:89:b1:79:69:ad:ed:b4:c4:6a:91:42:15:54:
         02:e6:d9:9b:17:49:a6:26:08:44:69:3e:b5:56:33:4b:fb:48:
         85:71:da:5f:c8:ad:c8:3b:53:c9:d9:c3:1e:ec:cc:1e:01:7a:
         48:b6:e9:81:00:30:36:e8:30:1c:bd:0d:b7:c5:d6:bb:48:83:
         d8:a4:58:98:ba:36:4b:25:33:07:b0:c8:2d:57:0b:ac:70:c4:
         55:8e:d8:54:c6:7f:7c:12:fc:b0:28:0d:79:f8:97:19:d0:6c:
         ed:a6:e3:98:56:95:b7:55:3b:e2:69:e6:69:ce:e9:1f:6c:a8:
         ff:ad:8b:90:5a:f5:df:fb:79:aa:0c:ff:42:32:d1:82:73:36:
         23:68:99:f6:c1:d0:e5:d0:d5:ab:76:f4:81:07:35:36:ae:1f:
         dd:47:e2:11:f5:b0:00:e7:e3:5b:50:2f:32:2b:32:ee:23:c5:
         38:4c:50:2b:5a:82:3d:fe:bf:3a:2a:13:12:7b:cf:04:38:85:
         b0:ad:57:cd:fa:6b:90:f4:bc:da:64:9e:ef:1d:ad:50:cb:ec:
         d4:2e:79:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:08:06 2026 by rpki-client