Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
File:                     JygMxTRRbRwdnqAk6q-9Af3GjJc.mft (raw, json)
Hash identifier:          eQ9tz353iiqtoXWDN8owCD55rs0+wL6mBeQe9RUnjT4=
Subject key identifier:   D8:88:43:6A:7E:CB:99:1D:4B:49:B7:6C:00:C9:A5:D5:8B:B3:70:FE
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Certificate issuer:       /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial:       019FA00452217F095B3BDCAAD6FC18009692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
Manifest number:          19D1
Signing time:             Sun 26 Jul 2026 20:01:05 +0000
Manifest this update:     Sun 26 Jul 2026 20:01:05 +0000
Manifest next update:     Mon 27 Jul 2026 20:01:05 +0000
Files and hashes:         1: JygMxTRRbRwdnqAk6q-9Af3GjJc.crl (hash: E53I1PwUqLZmwcnnrhDYjoETWdjtFbsQlZYtbU9+W9I=)
                          2: Zq2cQmDy7q3A5_xdFvl7YbbhwIc.roa (hash: PgMe36er/jf5wuEzDom6ucc6sQi96pKMuPFdurESUyQ=)
                          3: k8z_313Hx8hvd4ufZZCaGYZBw0Y.roa (hash: k20SFgFV65J9lEt18uaFg+XOBiT1Sd/tRFmAU9F/loo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 20:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:04:52:21:7f:09:5b:3b:dc:aa:d6:fc:18:00:96:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
        Validity
            Not Before: Jul 26 20:01:05 2026 GMT
            Not After : Jul 27 20:01:05 2026 GMT
        Subject: CN=d888436a7ecb991d4b49b76c00c9a5d58bb370fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6c:a7:04:65:31:58:5d:8a:d6:dd:0d:ca:40:
                    d6:5b:57:78:96:ab:ef:29:51:9e:c1:69:b0:3e:74:
                    8f:57:b3:64:82:ad:ea:6a:f5:c5:34:97:38:b3:7a:
                    fc:28:b4:f0:21:b8:04:ed:06:f1:86:cb:05:9d:65:
                    cc:c0:6e:b7:6e:29:99:2c:0d:71:82:3b:70:99:86:
                    0d:fa:b7:86:93:03:e5:7e:06:35:a7:e8:e3:66:d3:
                    cd:33:ae:0c:4f:f8:9d:9a:2d:f5:a1:f1:23:6d:d1:
                    bd:ca:b4:64:b8:00:d7:e4:13:f7:ea:02:43:92:57:
                    ce:ff:58:c9:7e:bf:f6:9c:1b:df:c2:de:e0:be:74:
                    8c:76:95:6f:33:c9:1e:82:ef:f2:a2:66:75:4b:40:
                    9e:53:53:f0:0d:c4:da:9a:e7:61:f7:ed:92:27:bd:
                    49:88:d0:ae:dc:20:24:ad:0e:4c:f4:9a:c0:c0:7f:
                    48:c2:e6:80:c8:e8:14:ad:b6:9e:16:bd:5a:c9:49:
                    6c:02:bc:ce:55:78:e3:07:99:1b:1e:33:f8:af:7a:
                    c4:cd:f6:88:47:f8:8e:4f:0d:9d:12:b2:45:e6:7b:
                    59:69:79:f3:e7:ee:df:31:e9:a5:cb:36:23:2e:2e:
                    e6:2f:8e:a2:fe:b2:06:6a:b6:a5:de:b1:35:fd:34:
                    03:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:88:43:6A:7E:CB:99:1D:4B:49:B7:6C:00:C9:A5:D5:8B:B3:70:FE
            X509v3 Authority Key Identifier:
                keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:13:61:36:94:83:46:db:4f:3f:1c:8e:84:42:03:ed:f4:c9:
         76:2e:2d:fc:19:ca:74:82:6a:0f:43:1c:c1:68:9d:a5:46:18:
         70:85:29:a0:72:2a:92:6e:4d:1c:89:73:08:28:67:98:67:c3:
         cc:cc:10:7c:0d:ae:9c:f3:4e:fb:1b:8a:37:bd:8b:1c:95:5b:
         1b:16:60:8b:e4:ec:6b:bc:06:ba:06:08:ce:44:8b:8b:2e:6d:
         e9:97:84:5b:91:33:08:7c:e9:00:ab:11:86:ef:4f:3e:4d:69:
         e1:af:22:fa:8f:73:28:b0:10:ad:2b:14:17:18:f6:06:8f:24:
         54:1e:b5:ad:f1:c1:3b:21:92:b0:11:0b:83:6f:6a:fd:a4:01:
         53:ba:cf:05:67:94:b1:a2:1e:2e:a0:46:f7:62:91:aa:6d:91:
         c9:4d:ba:6d:20:3e:2d:c1:0e:3e:2e:06:9b:50:d3:7c:43:91:
         4c:2a:93:68:02:d9:21:69:54:c8:c2:5c:d6:e4:11:8f:68:6d:
         11:eb:fc:94:16:4f:e1:85:9e:a2:22:b9:ca:ef:2b:e9:6f:85:
         a1:35:93:95:a8:40:ca:a0:bb:72:08:af:5a:74:18:bd:52:32:
         6a:2d:27:b9:41:2f:77:ae:7e:81:4c:8b:4f:37:20:a1:8d:c4:
         0a:dd:e2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:52 2026 by rpki-client