Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
File:                     jcayOVFjzkewNvrgKnH5SIBL9V8.mft (raw, json)
Hash identifier:          muIw/8CIiEfsLVwMiqkFi8bcpPsKujGPJyWCxP96vS8=
Subject key identifier:   5F:93:51:F6:7C:D5:FB:33:7E:38:3C:74:C3:A9:FB:6B:A4:8A:EA:17
Authority key identifier: 8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F
Certificate issuer:       /CN=8dc6b2395163ce47b036fae02a71f948804bf55f
Certificate serial:       019FA003A49F27C58AC579FEB000F40E925A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
Manifest number:          0139
Signing time:             Sun 26 Jul 2026 20:00:20 +0000
Manifest this update:     Sun 26 Jul 2026 20:00:20 +0000
Manifest next update:     Mon 27 Jul 2026 20:00:20 +0000
Files and hashes:         1: UqSLybQPqtyf12w058GGJrCrwlE.roa (hash: ay496TJzckN/WV79yGM4pv+K/GRv47GhhBgHEduwC9o=)
                          2: jcayOVFjzkewNvrgKnH5SIBL9V8.crl (hash: ltBva1UIdvSfZHkgoJ6ZSBNIUaBez0vNt2GUO+AWIto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 20:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:03:a4:9f:27:c5:8a:c5:79:fe:b0:00:f4:0e:92:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc6b2395163ce47b036fae02a71f948804bf55f
        Validity
            Not Before: Jul 26 20:00:20 2026 GMT
            Not After : Jul 27 20:00:20 2026 GMT
        Subject: CN=5f9351f67cd5fb337e383c74c3a9fb6ba48aea17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:ed:79:b6:9c:39:1c:f2:92:78:71:b1:cf:
                    64:61:53:55:74:b8:54:e1:1a:b2:1d:9e:c5:07:5d:
                    f4:13:67:10:95:ba:c4:f5:a2:6c:3e:4c:7b:9b:59:
                    a6:0f:28:ee:85:64:69:cd:bf:64:e1:68:37:bc:07:
                    4b:3e:e7:ec:2e:55:6b:a0:c8:7b:97:1a:18:e4:56:
                    ec:18:60:0f:2f:68:54:95:99:9e:b8:a8:80:6f:74:
                    3e:06:fd:85:6d:f1:38:a5:a0:9a:50:52:ba:94:d7:
                    b9:04:03:e1:7d:e6:03:d8:86:3e:ec:6d:5b:09:c8:
                    f5:99:e9:8b:e2:ae:db:d7:3b:e5:03:3f:58:7d:1a:
                    21:e7:64:2e:f6:43:81:a4:6a:8c:ea:73:5f:dd:b5:
                    cf:a3:ac:dd:63:a7:4d:a9:85:4a:06:f0:c7:f0:90:
                    1f:4c:b1:b7:46:ce:49:de:38:ee:c4:91:6f:ae:68:
                    69:33:d1:71:59:4e:7d:7a:03:f6:99:b2:ec:2f:15:
                    db:97:a5:42:57:e3:c5:3f:dd:97:88:22:d1:fe:3d:
                    78:fa:2a:93:68:97:e6:55:d5:f5:5b:1b:a7:d7:14:
                    60:41:8d:23:e3:66:a2:3a:51:65:73:f9:dc:9b:02:
                    7b:76:4c:6f:21:78:25:fa:d2:4e:5e:55:b3:d6:10:
                    26:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:93:51:F6:7C:D5:FB:33:7E:38:3C:74:C3:A9:FB:6B:A4:8A:EA:17
            X509v3 Authority Key Identifier:
                keyid:8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:65:a0:66:cd:a7:2c:a4:4c:9b:7f:1c:83:df:cf:e9:18:3b:
         fb:1c:b7:f9:8c:0b:1e:06:a9:49:56:ff:ae:b3:c9:ad:04:48:
         88:44:70:02:be:e8:64:32:3e:78:98:b7:d8:12:0e:e6:4f:44:
         20:e6:a5:4c:86:db:3f:f6:74:d7:f0:7b:ab:24:6d:8f:7a:5f:
         a7:6c:d1:84:3f:c2:1f:05:b0:01:53:b8:7b:6c:cf:c9:fb:5e:
         f5:f9:57:22:7a:69:88:c7:d2:a3:64:a4:5f:1a:2b:6b:2c:ec:
         f8:8b:d2:0b:6f:cd:80:5f:b1:07:56:ae:46:96:b0:5b:b5:6e:
         5a:21:ce:ba:9b:79:7e:6a:82:a3:bf:ec:81:b1:d2:47:2a:b4:
         dd:29:2d:df:d0:d5:73:5f:e1:9e:9b:02:38:04:b1:ee:a7:e1:
         e3:b4:bd:59:9a:14:35:0c:05:c8:03:c1:c3:b8:20:76:26:80:
         f2:c2:e3:62:36:9c:09:43:6c:be:d0:b8:21:be:87:63:d5:1f:
         58:cb:98:31:3a:46:db:3d:2e:22:75:a3:3b:8c:50:05:2d:e4:
         e7:49:f8:77:9c:33:51:51:94:ee:52:93:6d:9d:cd:b5:34:9d:
         1a:1b:f6:19:76:b9:53:b0:f0:cc:48:62:bb:9c:47:2d:bb:f5:
         cb:35:e5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:15:31 2026 by rpki-client