Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft
File:                     Jg12BCKSiW-WU6ponkFgeUKzT4c.mft (raw, json)
Hash identifier:          C70VPGDe6Cuj+sbffSrTdSUZ3bwkIJy0fZ8BPqU0AGg=
Subject key identifier:   51:C0:35:9D:95:20:43:12:9F:09:5E:44:CB:2E:2A:C9:22:58:60:18
Authority key identifier: 26:0D:76:04:22:92:89:6F:96:53:AA:68:9E:41:60:79:42:B3:4F:87
Certificate issuer:       /CN=260d76042292896f9653aa689e41607942b34f87
Certificate serial:       019F853129AF59389CCA4B10B5F9A148F687
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jg12BCKSiW-WU6ponkFgeUKzT4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft
Manifest number:          2A
Signing time:             Tue 21 Jul 2026 15:00:19 +0000
Manifest this update:     Tue 21 Jul 2026 15:00:19 +0000
Manifest next update:     Wed 22 Jul 2026 15:00:19 +0000
Files and hashes:         1: Jg12BCKSiW-WU6ponkFgeUKzT4c.crl (hash: klgCiujAmtgk4zKCK8Eh/JIGA4Xs7ovAqTVMc/6GPbo=)
                          2: dA5GHyWkiinW-X3ggJL5uaWKg90.roa (hash: AobSuh+m+/JdWn6/war1pe24bAV9jiWfGNJFdO8s0gA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jg12BCKSiW-WU6ponkFgeUKzT4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:31:29:af:59:38:9c:ca:4b:10:b5:f9:a1:48:f6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260d76042292896f9653aa689e41607942b34f87
        Validity
            Not Before: Jul 21 15:00:19 2026 GMT
            Not After : Jul 22 15:00:19 2026 GMT
        Subject: CN=51c0359d952043129f095e44cb2e2ac922586018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:15:0a:34:45:8f:23:47:7b:fd:8d:90:3b:
                    0f:4e:b9:cb:7c:45:63:62:15:fd:5c:21:3e:29:d5:
                    bb:77:05:16:f8:ce:30:fc:2a:cc:ce:dd:aa:6f:e9:
                    59:db:9c:32:5e:61:65:b8:63:f2:2d:f9:ff:31:18:
                    67:a2:99:23:37:9f:eb:80:70:ef:d6:14:7d:9c:c6:
                    00:e1:3c:12:39:70:43:6a:aa:1c:33:88:37:0d:f0:
                    2e:62:69:1b:b6:e6:ec:d0:93:e7:a4:4c:e1:ed:36:
                    3b:b0:65:24:03:b7:9f:60:d3:cc:3c:87:94:79:ab:
                    e6:8f:d5:b9:09:ba:e5:ba:5c:72:c1:82:cb:49:8e:
                    dc:91:dc:52:51:d9:31:5f:d7:1a:dd:dd:44:09:b1:
                    28:cc:f3:8e:dd:76:36:e9:11:9c:4c:9b:f2:a9:46:
                    c1:58:17:b6:50:66:cd:81:22:56:31:6d:86:8c:c1:
                    70:e6:5a:47:a8:88:2e:45:4c:69:09:9c:61:6c:ed:
                    b4:5b:27:8c:d3:42:4c:c7:53:28:78:ce:85:90:b4:
                    2e:9c:64:91:2b:de:1a:e2:22:cc:d3:83:77:ec:55:
                    0b:5a:44:28:5e:df:5a:f7:5e:d7:05:25:58:ab:c8:
                    22:e7:9a:92:03:55:a0:2a:f6:03:0d:c3:90:49:0c:
                    9d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C0:35:9D:95:20:43:12:9F:09:5E:44:CB:2E:2A:C9:22:58:60:18
            X509v3 Authority Key Identifier:
                keyid:26:0D:76:04:22:92:89:6F:96:53:AA:68:9E:41:60:79:42:B3:4F:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg12BCKSiW-WU6ponkFgeUKzT4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:25:d5:e6:07:dc:e0:6e:e6:f1:80:07:a1:2e:75:a9:cf:05:
         8c:72:6f:34:f7:0f:fe:7e:62:66:0e:59:1a:3a:8a:7b:ce:0d:
         24:5f:5d:06:bd:2a:50:df:60:35:bd:0d:96:03:09:e1:a9:00:
         08:cf:3b:4d:29:23:36:3a:fa:bb:3a:b0:2a:ba:d5:41:d9:6c:
         ca:f3:a3:06:82:32:a6:c1:31:3a:f4:b0:ed:08:e8:fc:ff:74:
         8d:e9:51:9e:2b:3f:52:c3:5b:f0:13:75:cb:0f:53:f4:84:7c:
         58:50:fb:9d:8f:20:31:77:62:6d:73:b3:ec:aa:7a:d2:ba:91:
         99:f6:f9:0c:3b:99:3e:6b:e0:08:43:5d:4c:e0:5f:44:3c:62:
         c4:58:6d:42:6b:30:3f:db:57:dd:2f:8e:5d:f5:52:5c:f6:9f:
         46:13:23:a2:5e:e0:a3:45:e1:5f:e3:be:06:37:f9:13:ef:52:
         0b:8a:15:00:39:9c:42:88:2c:a0:ed:d7:a3:0b:43:64:3f:29:
         da:2c:48:a1:e8:3c:e9:99:69:b4:2c:4f:79:a6:2c:5c:a1:d9:
         0f:79:8e:4a:c7:b7:c1:97:fe:7f:5d:c2:af:ed:f3:41:9c:0e:
         90:8e:e8:05:be:fa:a8:64:40:21:12:c2:9c:5b:05:f8:d9:c6:
         47:f7:86:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:08:08 2026 by rpki-client