Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
File:                     j9V6dd1-lSvuKDk11t8pJdKCoHA.mft (raw, json)
Hash identifier:          N9LKVjHL/HrX81MSLWb/m/W6FNmjMrf3wIDMdVtb6M8=
Subject key identifier:   28:93:7E:71:BB:3A:77:D1:3C:2D:9D:2E:17:39:1A:4D:A7:86:2C:1B
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Certificate issuer:       /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial:       019F419AB174186D05E862E691909734CE5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
Manifest number:          1925
Signing time:             Wed 08 Jul 2026 12:01:24 +0000
Manifest this update:     Wed 08 Jul 2026 12:01:24 +0000
Manifest next update:     Thu 09 Jul 2026 12:01:24 +0000
Files and hashes:         1: 1-ProWPAo3xOPAlfLXyHl2FoLaSQ.roa (hash: UipbPGi/LNsdDzSZcU72FThIZcRNZgYBDRQICzZQdtI=)
                          2: TxAodq-PWJbB0yRlZgotd8wKMYY.roa (hash: B1bJrRcIm/UVOcci99q39RXXf3qdHKs7kJRjCqO0v8g=)
                          3: _1Cvu-C3Eeb74QQ01oJI3VbAErk.roa (hash: veWk/S2496THUfG9z5Kmti3rd3m5NbM9tA+VyMVoV+s=)
                          4: gqRQBpLK3zXQTfzBnWEhQSsGto0.roa (hash: qD6m/RkAZJfynFeSG5lvjcc7zHJ2to6IwFe26TyaUJs=)
                          5: j9V6dd1-lSvuKDk11t8pJdKCoHA.crl (hash: tKC9pJAw9jb70/zBGyr133Nk7mXdbPqk5VoUzbFgaSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 12:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:41:9a:b1:74:18:6d:05:e8:62:e6:91:90:97:34:ce:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
        Validity
            Not Before: Jul  8 12:01:24 2026 GMT
            Not After : Jul  9 12:01:24 2026 GMT
        Subject: CN=28937e71bb3a77d13c2d9d2e17391a4da7862c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1a:fb:78:cb:39:f8:a8:7c:8f:db:90:02:f9:
                    08:6b:66:a9:a6:15:01:00:6e:ff:f2:56:8d:89:98:
                    04:cb:36:a4:8b:36:84:09:82:22:66:ca:c3:ba:82:
                    25:30:8c:6f:22:ed:e9:61:a3:72:32:1d:ac:87:27:
                    d5:da:64:73:7a:25:76:fd:5c:8a:29:69:49:6a:26:
                    ad:60:43:53:91:6c:79:fc:d6:2e:99:67:d0:63:7a:
                    4e:6d:ca:c3:a9:96:74:3c:0a:51:50:2f:0d:c8:59:
                    c0:64:67:6c:9d:f5:75:50:4b:77:ff:f7:21:98:ec:
                    15:06:25:c5:9d:93:13:ef:c9:e2:48:4d:19:a7:5c:
                    ba:8f:43:36:6b:f5:9d:4a:45:a0:53:5f:a8:67:26:
                    e7:84:31:81:55:96:3d:5f:9a:02:3d:28:28:c7:7e:
                    c8:9e:00:1e:e9:1f:80:04:43:9f:0d:25:fd:8e:e1:
                    46:66:11:46:f6:9a:a6:9c:49:3c:55:8d:05:e0:79:
                    da:5e:fe:3f:42:0a:8b:c3:88:f3:e5:5e:d2:03:70:
                    e2:9e:86:ae:0c:f6:d0:41:8b:43:6b:2b:bc:00:95:
                    92:27:d4:15:a6:08:d9:70:43:9b:9e:6d:8d:f8:3f:
                    5f:c9:09:40:e4:cc:3c:7e:a9:8a:6d:6e:fd:a3:3c:
                    61:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:93:7E:71:BB:3A:77:D1:3C:2D:9D:2E:17:39:1A:4D:A7:86:2C:1B
            X509v3 Authority Key Identifier:
                keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:5f:d9:84:3e:d5:ad:6e:65:15:32:ef:db:50:b2:8f:ce:35:
         6d:af:0d:a6:2f:dc:e0:a0:88:f0:61:d4:8a:f7:86:5b:f0:3b:
         d7:9a:a2:eb:0d:72:5d:31:1f:13:48:e3:b8:99:31:97:4b:68:
         5d:1e:bb:e2:ae:6e:5a:2d:e2:c0:45:8c:eb:bb:dd:53:09:84:
         23:bb:03:82:37:15:83:65:68:d7:b6:ba:89:03:93:c0:77:dd:
         28:a5:5b:3e:23:b4:df:98:ed:d7:61:0e:46:47:1d:ce:25:10:
         01:39:56:44:3b:00:d9:5a:77:e4:04:ed:d7:a3:02:35:ed:2b:
         12:3c:f6:84:72:c3:18:1c:16:6f:28:5c:3a:3d:6d:d2:ea:07:
         18:24:f9:88:3c:30:cd:a8:54:b0:2f:f6:79:d0:05:d2:27:5f:
         8f:fc:33:08:bd:bb:19:12:d5:3e:67:93:67:03:c1:77:8f:23:
         c9:78:ff:44:1c:cc:b1:d5:16:a1:36:37:f7:2e:69:0e:74:75:
         cb:0e:ea:9b:c2:2e:25:1c:5e:c5:78:b9:4d:de:de:29:01:27:
         a6:8d:ef:30:c1:df:10:4b:91:31:d6:15:9f:66:06:a9:f1:9e:
         49:f9:b5:10:36:f8:6e:81:62:72:a4:04:a0:b0:b5:78:4f:92:
         45:6b:11:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:31:32 2026 by rpki-client