Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
File:                     jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft (raw, json)
Hash identifier:          la+DICwNekWcRWI2a0yuuRVvQXYwOPpeamZ1HmHFK3g=
Subject key identifier:   8C:95:42:FB:98:CD:FA:7B:9A:73:07:52:DF:A0:A0:AB:53:C4:38:B0
Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Certificate issuer:       /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Certificate serial:       01A01FB0A1FDB1E738AA2E833117402290BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
Manifest number:          1612
Signing time:             Thu 20 Aug 2026 15:01:04 +0000
Manifest this update:     Thu 20 Aug 2026 15:01:04 +0000
Manifest next update:     Fri 21 Aug 2026 15:01:04 +0000
Files and hashes:         1: DDNpOrAqAOY0hs2uDPL3iCWLdnM.roa (hash: 8faJdkXXJZqTecw2oUQhwrCEcBbQjYDmWPFG/2WQ35U=)
                          2: YTLyjD8Zm08JN9ilWwpHNjSNOgM.roa (hash: ctWafbXvuy+Ew0x5ejjfVIYon0eWDnM21tPyQNTYZdQ=)
                          3: jhwcBBc8oOvXs_IDaLwdciLIw5g.roa (hash: 2wOw67KJ6XBImFQRXWSqni2LckUYvmgNYdwa7nlm6bU=)
                          4: jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl (hash: nRPQXm3bWQfpcPHDCKaziLThY3LI/na/P6SE6pddOnU=)
                          5: oVTQSnnZbgxF4uVxhrTKvTjBHlc.roa (hash: EHUZVTErWURFxtqmqMqxx38zSEmivlq5W8eBCUAE6Hw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 15:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1f:b0:a1:fd:b1:e7:38:aa:2e:83:31:17:40:22:90:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
        Validity
            Not Before: Aug 20 15:01:04 2026 GMT
            Not After : Aug 21 15:01:04 2026 GMT
        Subject: CN=8c9542fb98cdfa7b9a730752dfa0a0ab53c438b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:b2:9e:2b:67:a4:59:e1:db:a0:db:a1:38:
                    ff:8e:fd:90:02:60:23:46:0a:c2:41:9b:c3:7c:fd:
                    26:b2:d7:09:0d:53:1c:b8:f5:7b:89:ee:38:8e:a9:
                    49:41:4a:2c:69:2a:1b:c5:89:e9:ba:10:d8:29:df:
                    3a:eb:e1:21:1d:96:a9:df:67:c7:d6:12:f6:af:b2:
                    66:5c:cb:7a:54:a9:7f:8b:83:62:f2:56:27:3b:ee:
                    88:53:79:24:f0:56:7d:45:87:e4:6f:63:e2:de:8e:
                    04:30:17:af:40:23:73:91:17:98:fc:c8:10:cd:2d:
                    89:cf:69:5e:7f:88:7a:6f:39:25:02:e7:3a:57:d4:
                    a7:da:03:0f:aa:50:92:7f:c8:7d:fa:92:6a:e0:f8:
                    8f:ee:30:96:ed:b3:10:49:61:d9:eb:3b:aa:7e:ef:
                    ae:a0:68:5e:18:4e:88:3e:34:28:1d:7c:75:de:14:
                    92:90:40:09:70:b1:b6:f2:64:a0:fc:6c:e0:18:04:
                    58:a8:47:52:ee:ce:f5:41:fe:66:75:e2:31:bf:c5:
                    a5:18:e6:e2:1e:f0:55:91:fb:d1:2a:2f:80:b5:1d:
                    7d:9b:28:39:ca:a2:5e:43:9a:fb:00:a4:21:82:a8:
                    0a:fd:0a:86:b9:b9:b8:59:f8:8a:26:b3:cc:67:a7:
                    38:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:95:42:FB:98:CD:FA:7B:9A:73:07:52:DF:A0:A0:AB:53:C4:38:B0
            X509v3 Authority Key Identifier:
                keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:6c:e9:5b:23:21:b7:fc:1c:be:11:5e:e3:9d:8d:d9:56:f5:
         00:4c:c9:13:cf:6b:a6:19:05:43:17:e8:f9:48:2c:ce:8f:3f:
         ad:54:86:9f:7e:bc:64:70:b6:a3:bf:2d:82:2a:35:8d:d6:ce:
         38:3a:b6:30:5a:42:9e:43:4c:73:fe:06:2b:c5:d4:17:05:24:
         26:61:47:7f:d9:3f:f8:b3:79:29:4f:cb:b5:02:76:f9:33:fd:
         3d:ed:41:e2:9e:32:69:71:7e:12:32:61:8b:12:d5:c9:b6:d1:
         63:4e:4f:92:e2:69:87:c3:ab:ae:b8:29:be:d4:fd:5d:73:0a:
         09:b7:aa:a1:01:ef:50:ad:60:15:3d:0c:21:e4:34:4e:fe:dc:
         33:fc:14:ff:d3:1b:c8:44:a4:d7:c1:c7:58:b7:35:08:6f:3c:
         e1:cf:2c:28:b5:31:e0:52:92:bb:05:63:fd:df:38:b0:ff:29:
         23:64:31:32:c0:d4:69:e3:0f:c2:08:86:e2:24:6b:73:a5:fe:
         78:fc:b2:a7:4f:60:92:c4:ec:bb:17:29:2a:41:85:f9:39:66:
         b7:57:2a:c0:ca:7f:b2:5e:50:ba:4d:ee:95:0f:6e:61:7e:4a:
         e1:57:31:ed:a0:67:23:3a:8c:3b:7d:b1:01:03:47:53:e8:17:
         f9:7d:bc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:47 2026 by rpki-client