Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
File:                     JU0Xi-GyC41zhEa-BS4InImgCrM.mft (raw, json)
Hash identifier:          8Y69R4ziRJDn1s7xpaCHWA/j1ZMUA++Rb9zyZzlbOEU=
Subject key identifier:   46:40:46:D3:62:8E:13:DB:61:15:29:DD:BE:1E:DF:85:42:81:39:9F
Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
Certificate issuer:       /CN=254d178be1b20b8d738446be052e089c89a00ab3
Certificate serial:       019FD873FFD272F247D80D021E1E000D9EE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
Manifest number:          19E8
Signing time:             Thu 06 Aug 2026 19:01:48 +0000
Manifest this update:     Thu 06 Aug 2026 19:01:48 +0000
Manifest next update:     Fri 07 Aug 2026 19:01:48 +0000
Files and hashes:         1: JU0Xi-GyC41zhEa-BS4InImgCrM.crl (hash: +IcBiO3f7/rPGlQgVPho+wX+1SiuLEUcWu86qjSWu8c=)
                          2: q-eaNpAC9-NYXDr75-5OxlW81pM.roa (hash: CQhgKaD5oRyS83HVo64oNNz+j4/NbRXCDPlLnL181NA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Aug 2026 13:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d8:73:ff:d2:72:f2:47:d8:0d:02:1e:1e:00:0d:9e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3
        Validity
            Not Before: Aug  6 19:01:48 2026 GMT
            Not After : Aug  7 19:01:48 2026 GMT
        Subject: CN=464046d3628e13db611529ddbe1edf854281399f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:29:25:d5:95:05:3e:53:ee:4e:28:f8:ed:f6:
                    fb:a8:43:9f:c6:82:cb:a1:07:53:29:38:f3:f9:7b:
                    89:dc:fe:15:c9:36:6f:98:9d:25:9c:d7:59:bb:08:
                    ca:df:30:0d:7c:f5:9e:60:0e:76:5c:e6:a7:a0:ee:
                    93:22:38:70:e5:86:22:a8:a8:46:f4:46:36:ee:15:
                    4e:1c:12:56:4d:cf:c7:98:dc:be:7d:f5:46:ee:f5:
                    ac:a9:a0:db:c7:d4:47:a5:cf:cc:35:8c:a0:db:98:
                    6f:9d:39:85:90:78:bd:db:80:30:d2:fa:cf:dd:c1:
                    c1:11:c0:e7:d2:6e:2d:35:c3:02:86:af:ce:62:50:
                    cd:b9:1c:34:0e:53:11:69:5f:a4:b7:2a:b0:b2:43:
                    52:55:9f:61:15:f1:a3:0a:f9:d9:f8:a4:1b:25:45:
                    b4:ce:69:23:d1:5f:4a:fe:c1:81:7c:04:64:f4:5f:
                    7f:25:bf:1b:2f:10:e1:ef:1b:0c:ae:10:91:c9:3c:
                    ae:85:fe:63:a5:7b:70:28:ab:eb:73:37:ab:84:d6:
                    6e:fc:88:71:20:2e:04:0c:cf:51:54:95:95:74:5a:
                    5f:49:c3:e8:d7:96:53:e1:d4:d3:75:48:93:38:b3:
                    ab:18:64:0f:39:08:2d:56:22:88:1b:5c:7e:f1:54:
                    63:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:40:46:D3:62:8E:13:DB:61:15:29:DD:BE:1E:DF:85:42:81:39:9F
            X509v3 Authority Key Identifier:
                keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e5:7b:32:06:9c:fe:e9:b5:0c:74:9d:4b:f3:75:4b:04:fd:
         b1:a6:51:d0:95:cf:03:7f:9c:51:5c:2a:fd:25:12:7a:c9:17:
         db:2f:6c:07:8c:1e:c1:b6:1e:67:f7:70:75:f0:69:fa:94:1c:
         25:af:8d:a8:b6:d9:19:9e:e3:8e:ca:60:37:1b:14:7f:cf:bd:
         67:ed:6c:55:b6:8e:79:97:d1:d6:50:ef:72:7c:b6:da:12:8f:
         6d:03:dc:d8:e1:81:91:86:c7:ae:09:58:48:9e:db:c7:6d:61:
         03:28:57:6e:50:36:87:b1:73:9f:b2:a6:c4:43:f8:6f:b5:11:
         52:ec:40:e2:08:29:f3:ad:fd:dd:01:4e:40:be:64:6b:61:e0:
         40:11:68:6b:4b:09:3e:e4:bf:81:0e:2c:09:f5:26:1b:a8:fd:
         e0:e1:6d:61:4b:0a:ea:2a:3a:78:48:55:4d:5c:c8:7f:f6:8a:
         15:c8:62:ba:7a:94:18:04:b4:58:ab:96:38:d0:77:33:56:89:
         f6:36:68:d5:a9:89:1f:50:d4:95:01:71:a7:51:37:fe:7b:f8:
         ca:ec:24:39:2d:e8:d3:1c:20:0f:d4:1a:64:47:b5:94:1a:f7:
         08:34:68:01:53:c2:35:68:cb:c5:96:09:1a:ec:4e:29:c2:83:
         27:f3:09:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 21:51:08 2026 by rpki-client