Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
File:                     jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft (raw, json)
Hash identifier:          3vmyKd11hpuAlCiCFKrXKegEyxtsbaPA8cbhfP0JI70=
Subject key identifier:   83:8C:68:40:25:C8:76:B9:AB:81:EA:4C:95:61:C2:C6:F9:55:47:74
Authority key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
Certificate issuer:       /CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Certificate serial:       019F84C3962489C7CB5DF34A849C9A6A8F4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
Manifest number:          09D2
Signing time:             Tue 21 Jul 2026 13:00:38 +0000
Manifest this update:     Tue 21 Jul 2026 13:00:38 +0000
Manifest next update:     Wed 22 Jul 2026 13:00:38 +0000
Files and hashes:         1: hzS81GvZENh5FRkGbicEF2LdARk.roa (hash: q8906Tblj2ap141UnuPHJfh6mZPh8QOzg/WX4QoWW8Q=)
                          2: jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl (hash: XDfnXlswjogPA2KhuE7qB16I+VJc+FZaaQXLxCZQIcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:c3:96:24:89:c7:cb:5d:f3:4a:84:9c:9a:6a:8f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
        Validity
            Not Before: Jul 21 13:00:38 2026 GMT
            Not After : Jul 22 13:00:38 2026 GMT
        Subject: CN=838c684025c876b9ab81ea4c9561c2c6f9554774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:08:fd:13:e7:ae:b1:38:cb:ec:68:bd:9b:
                    45:09:bd:de:26:49:e3:12:a9:47:5a:a3:d0:a2:51:
                    48:80:64:87:f6:05:d5:92:59:e8:bc:d7:13:26:5a:
                    44:d2:31:0b:b6:57:15:0b:c1:59:bb:17:a3:26:cb:
                    86:e3:25:fb:99:b2:68:8c:d8:f4:15:a3:6a:cd:9e:
                    b1:fb:c0:98:ba:30:0a:9d:6e:d7:e2:42:2c:a7:72:
                    3c:cd:ca:83:0c:df:3f:1d:08:e2:0e:4e:0d:a0:9d:
                    e3:33:f2:8e:49:f2:9f:9c:dd:0c:63:d7:b7:eb:0a:
                    5a:a0:84:b6:4f:c1:b5:28:f4:a0:0b:af:b7:a0:8a:
                    f9:1b:97:92:da:ed:7a:eb:7b:0e:a3:3e:7b:85:f4:
                    f7:31:5c:c1:00:70:cb:18:31:85:25:50:b6:fa:17:
                    12:86:0e:ff:45:71:27:9f:f4:bc:63:86:16:11:35:
                    68:c6:72:b3:cc:74:38:11:70:38:a7:7e:f8:e6:a4:
                    15:cd:81:cc:21:23:f7:37:19:9d:79:b9:3a:1b:ae:
                    8b:65:da:a8:ac:7c:cb:94:dc:f8:8f:57:20:bf:11:
                    4b:29:e2:80:45:3f:f2:2b:de:8e:81:cd:f4:1c:74:
                    c9:9f:2b:ad:c0:30:c8:bb:97:8c:ed:3b:0e:aa:ff:
                    3e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8C:68:40:25:C8:76:B9:AB:81:EA:4C:95:61:C2:C6:F9:55:47:74
            X509v3 Authority Key Identifier:
                keyid:8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:43:9d:1b:8d:9c:81:03:a6:7c:7a:20:85:ec:55:89:6b:97:
         c1:60:fe:d6:e8:35:36:9f:0f:82:b3:88:b2:2c:f6:1f:28:4b:
         d4:c2:86:1c:3d:09:c4:96:17:c6:5d:1d:51:67:8d:7c:46:dd:
         2f:bc:93:5e:96:28:af:1f:72:ba:f1:a2:0c:19:ce:4f:29:1b:
         31:35:b3:46:15:e5:ad:b3:77:9c:0d:e1:be:fb:44:d1:a9:ee:
         aa:cf:f2:7e:37:a4:29:43:8b:0b:5a:6e:f2:af:41:a5:37:13:
         cd:65:66:90:55:61:7d:c1:84:b4:53:4b:c2:b0:e1:80:aa:73:
         b8:04:cb:17:23:a2:72:2a:dd:fd:5b:c6:20:8b:63:2f:d1:52:
         33:82:be:5c:79:ae:c1:5c:79:83:43:97:c0:35:24:e1:c8:02:
         c0:1f:8a:43:ad:92:19:29:5c:2b:a4:05:3b:b4:65:c5:00:20:
         e9:7d:13:bf:a0:d9:95:3f:bd:f9:2f:bb:59:94:42:81:bd:ea:
         1b:77:15:65:40:25:f3:c9:84:3f:b0:9d:71:9b:5f:07:34:a6:
         fa:32:2e:f7:bb:81:e0:e2:0b:ec:0a:f6:5f:37:0f:9d:b2:f7:
         3a:71:34:f4:96:4f:4a:c8:e0:82:e3:ca:90:02:9f:32:2f:c0:
         26:0d:36:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:13:24 2026 by rpki-client