Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
File:                     j7x_Fwe20LIrzYGA9Puxtj78mfk.mft (raw, json)
Hash identifier:          qXp8UWRZUPK9XbgRb8pTgpVh/tR7ZClwBOkf+abesLI=
Subject key identifier:   5B:58:1E:92:9D:0B:D5:0B:E7:8F:00:CE:68:66:63:38:F2:E3:96:3A
Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
Certificate issuer:       /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Certificate serial:       019F9D71AC3ED2B26D388B32EEB11056D435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
Manifest number:          19CE
Signing time:             Sun 26 Jul 2026 08:01:40 +0000
Manifest this update:     Sun 26 Jul 2026 08:01:40 +0000
Manifest next update:     Mon 27 Jul 2026 08:01:40 +0000
Files and hashes:         1: 7OTQnzrbHyXo119EfPUpBJCKYHw.roa (hash: 2rynQETuFSP28J9DNP84gVl8Pw/3bThUsvE7hH2G5gw=)
                          2: MsTpS_9Ef3SDy2PLq6WfNUkYizQ.roa (hash: Ea2AJU7gEy/xVP6HsAboTHLHs8TQfaChyqKqx20NTwM=)
                          3: j7x_Fwe20LIrzYGA9Puxtj78mfk.crl (hash: 6Hx73xWr/kKxrBpXYvUm/Eldvj1Sz+IgpG3mZQH+vFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 05:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9d:71:ac:3e:d2:b2:6d:38:8b:32:ee:b1:10:56:d4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
        Validity
            Not Before: Jul 26 08:01:40 2026 GMT
            Not After : Jul 27 08:01:40 2026 GMT
        Subject: CN=5b581e929d0bd50be78f00ce68666338f2e3963a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4a:65:ff:0b:74:41:41:f3:83:b2:82:8a:45:
                    f0:3c:dc:b9:7c:b9:3e:ca:f4:ae:c4:88:d1:99:86:
                    61:5f:10:d5:8a:60:a6:5e:ac:1c:f0:85:47:2a:41:
                    62:18:91:d7:57:b3:c0:1d:f1:8d:98:f7:2f:38:52:
                    f4:5c:c9:c6:bf:19:f9:c1:3e:cf:5f:a7:df:e1:94:
                    54:c1:d1:aa:fe:13:e3:2e:ca:af:0e:05:fd:eb:4e:
                    7f:2a:f9:e0:1a:fa:e7:00:03:33:9c:46:0a:b0:d2:
                    70:d2:8d:26:24:da:7e:36:0e:19:7b:e3:15:53:dd:
                    77:6d:be:fd:ae:a3:4a:55:49:c6:50:ff:94:c2:95:
                    9f:f8:ba:e4:92:98:fe:77:f5:4e:fa:91:6d:5a:a1:
                    ac:b9:2d:8d:8d:0b:38:a2:20:39:4f:95:46:3c:96:
                    66:e3:e6:b1:d9:e5:c4:95:f7:d3:01:b9:1b:cc:28:
                    44:45:36:52:b3:ca:60:d6:1c:d8:db:dc:b0:a9:d8:
                    25:35:03:08:0e:d0:34:68:7d:89:40:b3:c4:cf:6b:
                    53:2a:8e:da:a5:1a:60:25:db:98:d2:27:64:90:fa:
                    8f:40:a0:e9:1b:7f:d8:71:2b:60:0a:31:be:55:07:
                    28:60:6c:4a:24:b8:bf:31:a0:f4:57:ce:ff:b2:5d:
                    4f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:58:1E:92:9D:0B:D5:0B:E7:8F:00:CE:68:66:63:38:F2:E3:96:3A
            X509v3 Authority Key Identifier:
                keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:96:06:11:9c:4c:f6:7a:9b:8d:eb:d1:3f:70:14:a2:4d:fa:
         05:17:3c:fb:c5:ec:2d:0d:7c:1c:e7:da:41:fa:3e:f8:df:60:
         9d:e3:06:73:57:d7:ea:13:78:2a:19:43:9a:02:22:55:d8:45:
         cc:03:af:7d:f2:88:57:30:a5:83:64:53:4c:3f:9c:f5:f5:51:
         2d:8e:cb:bd:ba:87:d5:66:ff:7f:3f:0a:52:7f:9a:b3:1d:63:
         67:90:7c:2e:61:0c:44:c4:87:bd:40:2a:df:6a:3f:52:5d:51:
         35:77:cf:ca:73:b1:dd:e9:7e:d9:4a:97:b6:de:20:d9:86:6f:
         89:38:8d:d5:a0:35:8d:ce:25:7b:60:bc:7f:3a:ba:54:c9:cb:
         7a:cc:9c:24:42:e0:11:79:8e:b3:1a:0a:56:e8:5e:68:38:44:
         65:4e:42:c4:7a:2d:b2:b4:97:18:36:1d:8b:34:b2:8b:8c:10:
         c7:3d:9b:58:7d:94:65:ba:82:4a:c6:21:c8:dd:0b:17:3f:d5:
         8c:07:2c:c5:b7:98:68:bf:6c:c9:39:59:61:41:3d:bf:76:f8:
         ff:ca:4d:bb:d0:26:90:f9:cc:e2:ce:35:90:f1:52:57:10:ab:
         b0:9b:3a:44:95:a6:e8:bd:5d:21:d5:46:d2:c9:7f:d4:b9:36:
         9d:da:a5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 10:01:17 2026 by rpki-client