Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
File:                     jt9sKtes7K0Gbh93_gWSLwFpFTY.mft (raw, json)
Hash identifier:          5PUkGKSFKUfgjlS4O6wz5A6yV2/aM92uu1UCtO/gyK0=
Subject key identifier:   C9:0C:6E:9F:D3:B7:18:8E:74:5B:BF:13:8D:90:DA:46:FB:CF:A7:96
Authority key identifier: 8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
Certificate issuer:       /CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Certificate serial:       019F859F646D08B9C2DE3C36A0CEA0A29717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
Manifest number:          0A02
Signing time:             Tue 21 Jul 2026 17:00:43 +0000
Manifest this update:     Tue 21 Jul 2026 17:00:43 +0000
Manifest next update:     Wed 22 Jul 2026 17:00:43 +0000
Files and hashes:         1: PQ4kixVMpunmZd3Y9lneEnubVHU.roa (hash: Yf8PqpssV4aPe31IuLnMjahZv8QaQaygjHQtEb4Jhyc=)
                          2: h8m3UyCHdJZvavzOM3kO78iBzSs.roa (hash: 7o6/q7pQ3291TBvgsO2xLF2/udPbMNgFs9of9Kxrm4o=)
                          3: jt9sKtes7K0Gbh93_gWSLwFpFTY.crl (hash: 4lRYI5/aWEE6IIds+djJmENXajJ1mQtSkGoZwFeqYec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:9f:64:6d:08:b9:c2:de:3c:36:a0:ce:a0:a2:97:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8edf6c2ad7acecad066e1f77fe05922f01691536
        Validity
            Not Before: Jul 21 17:00:43 2026 GMT
            Not After : Jul 22 17:00:43 2026 GMT
        Subject: CN=c90c6e9fd3b7188e745bbf138d90da46fbcfa796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7e:eb:7f:29:fa:a2:43:43:47:ef:a8:91:ba:
                    f7:0f:03:38:66:32:b5:04:a0:f8:7f:1a:ee:e6:80:
                    06:18:ce:24:b8:a8:bb:40:06:1a:fa:1c:c9:f5:77:
                    85:55:8e:d5:9e:a3:19:5c:82:3c:36:d0:66:84:4e:
                    fe:12:b3:fe:77:ba:b2:a1:76:74:6f:e4:fb:5a:75:
                    83:14:da:7b:b0:df:17:63:79:bb:ec:0e:52:b1:a6:
                    b2:f6:b3:ef:cd:6c:29:11:d0:1a:81:62:de:89:37:
                    96:27:21:33:f8:c4:1b:1a:dc:e0:ca:25:ff:8f:1f:
                    24:76:f3:28:cd:4e:e3:21:8e:33:94:84:d7:9d:54:
                    92:b0:b5:95:9a:d3:be:c4:5f:9f:ff:2b:0d:c0:79:
                    0f:a8:03:35:2a:09:ee:a0:7b:5d:0c:4f:06:cb:f6:
                    c7:5e:5e:ce:0f:9b:03:c5:b3:76:c8:8b:57:a4:d1:
                    be:2c:38:ec:7a:03:8a:cf:db:3d:9a:47:f6:2f:70:
                    bf:f2:66:86:3b:c1:6e:cf:43:85:b9:a6:a2:5c:83:
                    a3:47:59:1f:00:3a:21:c5:a0:2a:32:19:0d:c0:2b:
                    c5:d0:f5:eb:1e:8b:12:95:68:ff:ae:81:20:e7:1e:
                    42:93:f0:bf:42:07:53:26:b7:9d:71:96:c9:f4:1d:
                    4d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0C:6E:9F:D3:B7:18:8E:74:5B:BF:13:8D:90:DA:46:FB:CF:A7:96
            X509v3 Authority Key Identifier:
                keyid:8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5e:fb:e5:af:d9:4b:11:2e:3c:b5:fd:64:45:4b:69:e0:2f:
         5d:4e:8f:4f:3c:77:0d:29:d5:b2:7e:37:3f:c3:d1:c7:5a:1e:
         3e:c3:0a:f4:5d:1f:24:16:40:e5:27:3a:d3:5e:05:45:44:93:
         83:5c:49:78:87:18:0e:6d:c2:b9:2c:c3:e8:c3:9f:4a:63:41:
         e0:ee:f4:e3:a0:a1:a7:5d:a5:19:01:c0:d1:d8:e0:4c:66:dc:
         06:6c:ad:f1:11:81:95:66:d4:63:4b:2e:78:28:96:49:ec:ea:
         62:34:46:ef:14:28:5a:44:66:bd:f2:9a:62:47:eb:b4:4e:9c:
         a8:10:63:42:02:e2:be:17:47:76:64:5c:d4:81:23:30:46:a9:
         20:00:5d:5f:34:d0:cf:a7:21:48:31:e2:4a:92:b0:d5:5a:62:
         0a:f7:bc:db:cd:23:02:b6:a5:39:ce:11:2e:b6:2b:cc:f9:d1:
         f7:25:cc:55:39:b3:ba:62:7f:20:1c:73:9f:77:05:d4:bb:f9:
         78:b3:71:be:84:f7:bc:e4:4e:a2:70:e0:0e:93:1e:89:7c:62:
         44:31:2d:75:1c:e1:23:21:e2:c5:74:85:aa:21:00:ea:30:02:
         51:f7:75:b0:4b:2a:b2:70:2b:44:25:08:b9:6a:ba:b4:c6:ba:
         9e:b2:c7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:31:54 2026 by rpki-client