Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5f79b1-4d13-4732-bd27-63882877ef16/1/JuiVZaFGyllM_TtJFCd3oZyzat4.mft
File:                     JuiVZaFGyllM_TtJFCd3oZyzat4.mft (raw, json)
Hash identifier:          quBb3KqDh99hSl5Gb2aiM4fvN37FOjZwr3NK34nGKPw=
Subject key identifier:   94:CF:58:83:B6:EA:2B:B8:BB:CF:BD:3F:08:5F:FF:A3:F0:28:DF:37
Authority key identifier: 26:E8:95:65:A1:46:CA:59:4C:FD:3B:49:14:27:77:A1:9C:B3:6A:DE
Certificate issuer:       /CN=26e89565a146ca594cfd3b49142777a19cb36ade
Certificate serial:       019F85D606B76C57B72927694169548C07E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JuiVZaFGyllM_TtJFCd3oZyzat4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5f79b1-4d13-4732-bd27-63882877ef16/1/JuiVZaFGyllM_TtJFCd3oZyzat4.mft
Manifest number:          66
Signing time:             Tue 21 Jul 2026 18:00:23 +0000
Manifest this update:     Tue 21 Jul 2026 18:00:23 +0000
Manifest next update:     Wed 22 Jul 2026 18:00:23 +0000
Files and hashes:         1: JuiVZaFGyllM_TtJFCd3oZyzat4.crl (hash: c8OSNnSSWEqJQVZSSpK09CNz0tUDOfk72SeNfSYXcXQ=)
                          2: q4Cca3sE-zKf6HtcGsocUrAQM0o.roa (hash: W22Z+Cwog2SpVewzgsjNaqi66bmEVe85hPmA9Jeo6Lg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/5f79b1-4d13-4732-bd27-63882877ef16/1/JuiVZaFGyllM_TtJFCd3oZyzat4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/5f79b1-4d13-4732-bd27-63882877ef16/1/JuiVZaFGyllM_TtJFCd3oZyzat4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JuiVZaFGyllM_TtJFCd3oZyzat4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:d6:06:b7:6c:57:b7:29:27:69:41:69:54:8c:07:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26e89565a146ca594cfd3b49142777a19cb36ade
        Validity
            Not Before: Jul 21 18:00:23 2026 GMT
            Not After : Jul 22 18:00:23 2026 GMT
        Subject: CN=94cf5883b6ea2bb8bbcfbd3f085fffa3f028df37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2d:5f:7f:fd:29:61:46:62:b5:4e:a4:2a:ba:
                    f9:d4:a7:a8:6b:af:91:a0:90:3c:26:6c:89:85:db:
                    6b:a0:50:47:73:74:1e:50:ab:b1:2f:34:68:85:40:
                    18:6c:02:a5:0f:88:f1:35:e3:05:22:ec:65:0f:b8:
                    29:73:a7:e9:95:86:8e:f4:63:07:86:91:31:4a:49:
                    91:b2:25:36:93:d1:34:3e:94:19:b9:f9:1a:a4:67:
                    b6:11:68:bd:56:0a:eb:2f:30:66:23:c9:22:3b:6e:
                    25:97:28:cc:5c:ec:a5:d8:e4:98:11:fb:7c:8d:0d:
                    9b:f1:1a:1f:b6:98:9c:8e:44:54:f0:06:72:aa:a1:
                    3e:ca:cc:24:2d:42:fb:2c:93:0e:54:eb:79:f2:89:
                    07:d1:1a:fa:f8:5b:f9:2c:f9:11:dd:ef:42:f8:4a:
                    38:9f:3f:3b:fd:6c:8a:05:07:7c:bc:f8:07:b1:54:
                    ab:21:1b:5b:52:cd:31:51:25:a3:7f:d1:dd:28:8a:
                    2a:ef:6a:4f:bb:f7:3f:09:30:af:c0:64:15:ab:80:
                    6c:68:e0:b4:a4:23:46:7b:78:7a:67:3d:f5:e2:04:
                    30:57:aa:26:00:51:8b:33:c0:3d:e8:c0:2e:7e:92:
                    b2:58:d4:8d:7e:54:45:5d:cd:ae:95:1a:7b:80:cd:
                    d0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CF:58:83:B6:EA:2B:B8:BB:CF:BD:3F:08:5F:FF:A3:F0:28:DF:37
            X509v3 Authority Key Identifier:
                keyid:26:E8:95:65:A1:46:CA:59:4C:FD:3B:49:14:27:77:A1:9C:B3:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JuiVZaFGyllM_TtJFCd3oZyzat4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f79b1-4d13-4732-bd27-63882877ef16/1/JuiVZaFGyllM_TtJFCd3oZyzat4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f79b1-4d13-4732-bd27-63882877ef16/1/JuiVZaFGyllM_TtJFCd3oZyzat4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e9:7a:f0:7e:91:61:9b:af:8a:21:a7:11:0f:c5:e8:77:db:
         2c:2a:69:6c:61:47:c5:62:91:a8:19:93:66:c8:a8:1f:ce:55:
         eb:46:16:d4:a8:d6:18:82:21:3a:c7:bb:54:18:4c:bb:07:4e:
         6e:da:f7:01:9c:e8:94:0f:b6:9e:c0:22:1a:7f:9a:6f:b7:db:
         b4:50:b8:60:41:e3:14:17:e7:6a:dd:c5:77:0b:a9:0b:26:0e:
         b2:53:30:ae:38:07:a7:33:20:d0:65:a2:ef:df:88:7a:f7:a5:
         0d:f6:b6:f6:a0:4b:dc:eb:ac:86:04:d2:f9:a9:9e:32:74:20:
         6d:60:b9:6c:26:ce:aa:a7:43:53:a2:ef:26:c1:44:d5:8a:9b:
         aa:8c:8b:1b:67:45:69:1e:c0:91:f0:01:45:f1:15:4c:69:16:
         d2:6e:32:47:ca:f1:77:c3:19:9a:90:1a:0e:08:8c:22:0e:0e:
         f8:9c:a0:6b:6c:44:62:ce:11:1f:b0:a0:25:20:f8:5a:4f:f0:
         39:f4:da:59:e4:d2:22:4c:9f:9c:f0:c0:86:6f:ab:e2:c9:bb:
         7d:f3:e8:bb:90:35:eb:ee:7a:0d:c5:a1:5f:7a:be:a6:b1:3f:
         d5:1e:d9:40:45:5d:af:c8:bb:71:24:6e:ac:ab:d9:f1:7b:31:
         b4:2f:8c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:19:54 2026 by rpki-client