Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
File:                     JI9eJvHAj0SGyZEci2Cerotst00.mft (raw, json)
Hash identifier:          yOrZG6Gh4eNv35Rg5iZnMDedzG1uQztYrWOsjcVXp3o=
Subject key identifier:   05:6E:45:AC:46:AE:8A:08:25:E9:C0:7E:7C:B5:05:5A:E3:66:A9:C5
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Certificate issuer:       /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial:       019FA14D8C255AB2F59EFC14B261C1F5AA2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
Manifest number:          19D4
Signing time:             Mon 27 Jul 2026 02:00:41 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:41 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:41 +0000
Files and hashes:         1: 9WiLMBOOIFui37XsSkkIFcDbunw.roa (hash: 41f5PwE35LBjKoYTvONiL6ypIZadvUiy3rHjOLDko1A=)
                          2: C0xNgAEq_VkYSa0gjqSo4X9OgDk.roa (hash: rs9H4EjX84lTTLv+iIvf+6h9tBHNg+MMsrqn9SRaoow=)
                          3: JI9eJvHAj0SGyZEci2Cerotst00.crl (hash: SXmlhz+osX1Ki/uujK1332+dyWcRlASQTrBJp0+8nP0=)
                          4: PpAX2uR7dOm-fqI5gBjMqcI_sj0.roa (hash: hBH45ktoJ8q7ItYmiVnvXeZkIWerDTCntuxa+oH08yo=)
                          5: XVbyZDeAu74wqWgE4Lug0IJ0xJ4.roa (hash: G5/qOs1gotpqFOvbgNgnzqAQEWPvAJWudCVSYuYf4PQ=)
                          6: gVsFB1HmrHHx_F0oTpBh0qNylSQ.roa (hash: 0WvPL4gzlPSQJArhjHg92bA8wa85QK1qdsvxPM8R9XY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:8c:25:5a:b2:f5:9e:fc:14:b2:61:c1:f5:aa:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
        Validity
            Not Before: Jul 27 02:00:41 2026 GMT
            Not After : Jul 28 02:00:41 2026 GMT
        Subject: CN=056e45ac46ae8a0825e9c07e7cb5055ae366a9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:29:b8:81:61:c8:81:0c:4a:40:23:8d:17:57:
                    7a:06:43:ae:e4:dd:b0:10:93:1a:2e:e3:10:ec:9e:
                    c4:06:d8:bb:06:3c:0b:ed:91:76:c0:e8:79:cb:7a:
                    cb:80:4d:97:4f:f6:57:5b:73:a6:a3:58:bd:46:65:
                    2f:a9:79:88:de:63:d4:5e:ff:72:3f:93:39:84:95:
                    ed:c0:e2:32:ce:40:b2:bb:a3:91:cb:f1:24:f5:8b:
                    ad:88:aa:f0:cc:0c:00:42:16:8a:ab:ac:08:50:38:
                    ad:af:fa:45:0f:54:ab:b3:54:12:e3:fb:c6:b9:37:
                    01:76:26:42:ac:ee:fc:a1:d4:4d:59:e3:21:9e:21:
                    21:e4:fe:f5:32:79:2c:4a:4d:b9:6f:2e:bc:d3:22:
                    f8:09:ba:31:de:be:38:d8:da:68:c0:fe:4f:a0:04:
                    d6:83:d5:86:57:de:56:65:fb:a0:67:02:92:f6:ac:
                    de:03:18:36:1d:04:83:9b:94:d7:20:8a:95:92:3b:
                    1a:f7:b2:02:44:95:df:78:39:7c:cd:07:76:a2:f4:
                    a9:f2:66:58:0f:90:b5:05:1f:81:ea:06:18:30:8b:
                    83:d1:15:84:d5:06:bf:54:9c:e3:74:5c:5f:21:a5:
                    e0:70:9a:46:2f:94:97:47:09:4f:a1:6b:69:17:e8:
                    cc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6E:45:AC:46:AE:8A:08:25:E9:C0:7E:7C:B5:05:5A:E3:66:A9:C5
            X509v3 Authority Key Identifier:
                keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b2:95:90:18:d4:cf:43:b7:7c:81:3e:2b:33:6b:0e:6a:a3:
         ea:0c:98:cb:37:eb:30:32:a8:4a:80:4f:2a:ef:cd:87:d2:de:
         12:21:9d:fe:5d:e9:ec:e8:4a:f9:25:73:62:0d:96:39:05:58:
         03:3e:b3:e1:af:c7:fb:81:89:5d:30:a0:8e:24:5a:0c:dd:ab:
         68:5f:f9:b8:8a:db:24:05:57:3c:38:4c:eb:9c:5e:18:b4:93:
         1f:a1:b9:e3:c2:4a:9b:3b:8e:6e:d7:7d:ff:a1:8e:ae:8c:bf:
         c7:d5:58:6d:29:5f:e4:ec:20:c0:8f:e5:b6:2b:83:78:3c:51:
         8f:ac:43:b2:9a:95:bb:06:69:a2:61:01:4e:06:28:39:9f:6c:
         9c:a0:f8:68:ae:2a:88:ce:ac:8e:b7:42:16:15:f7:0e:a1:d3:
         a3:db:75:be:87:fa:c6:ed:f1:2e:57:be:a3:76:6e:5c:42:8f:
         58:13:a5:40:f1:f8:51:53:d7:c8:66:7d:8a:d8:e2:78:01:2b:
         b5:ed:7a:85:e1:9f:31:20:b9:95:d4:3f:4b:a5:67:bd:99:4c:
         96:1c:dd:cf:ba:5a:da:ae:03:45:b5:13:10:49:27:54:c9:14:
         6b:62:ea:23:4a:db:b9:d1:d5:c6:45:a8:a5:ad:bd:82:69:dc:
         f4:86:55:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:29 2026 by rpki-client