Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
File:                     jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json)
Hash identifier:          /sh8K6sHg1eO1FJ00ppzUF5XGQS4liAzzEnMrX/Wssc=
Subject key identifier:   66:27:9C:45:5B:FA:F0:C2:A3:73:BD:69:54:FE:9C:45:1D:0F:0E:0C
Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
Certificate issuer:       /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Certificate serial:       019F9F5F7F083A8EA2AC0BD3BDD5E4FD225A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
Manifest number:          0D3F
Signing time:             Sun 26 Jul 2026 17:01:03 +0000
Manifest this update:     Sun 26 Jul 2026 17:01:03 +0000
Manifest next update:     Mon 27 Jul 2026 17:01:03 +0000
Files and hashes:         1: 402WgFEvx-MCA7DFemnXw9EsHq0.roa (hash: I1gPCHaPoQ70/m4H48LGfcyzChehib1qKqxsJxfnGkA=)
                          2: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: hROUMLlUs8jxdRRiDdOzzzMuiR7ulWR2uCaEI6s+2c8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:5f:7f:08:3a:8e:a2:ac:0b:d3:bd:d5:e4:fd:22:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
        Validity
            Not Before: Jul 26 17:01:03 2026 GMT
            Not After : Jul 27 17:01:03 2026 GMT
        Subject: CN=66279c455bfaf0c2a373bd6954fe9c451d0f0e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f2:e3:2f:04:3a:8e:1e:f8:ad:5b:d1:1d:a6:
                    54:8a:e9:bb:4a:3d:a9:db:68:d2:e4:3c:b0:60:06:
                    ff:a8:2b:62:92:69:6e:78:57:35:b1:00:f3:69:8d:
                    21:ec:9a:0a:6f:04:8b:7d:e3:49:87:d7:1a:3b:c9:
                    65:1a:2b:b4:09:46:b9:c4:33:85:a6:0b:18:87:ba:
                    34:59:ea:86:bd:83:b0:15:40:d2:2a:d0:e4:75:df:
                    b0:5a:fd:b9:22:f4:28:cd:b9:52:bc:4f:6b:a5:41:
                    07:90:86:34:93:f9:bb:b3:8f:3d:87:6a:d9:b3:2d:
                    e6:be:8f:dc:41:1d:c6:c7:fc:76:62:e6:ad:30:49:
                    f9:15:64:9a:72:36:5d:a4:34:c6:6d:1f:25:26:49:
                    61:af:e9:3a:3d:1b:96:e9:92:33:55:2f:e6:01:f6:
                    af:fe:57:f2:2e:6c:3f:7f:24:9f:03:3b:13:46:b8:
                    08:ba:70:6b:22:a8:46:79:b8:7e:97:54:2a:2f:ba:
                    35:07:f4:60:38:52:91:a0:cd:10:2c:ab:53:be:39:
                    b6:6d:eb:e1:3d:1b:37:e9:65:cd:8d:bd:1b:38:b9:
                    fd:21:5a:58:5a:08:d9:e8:39:d2:e9:c7:20:f6:9d:
                    be:98:5d:5d:82:8a:7b:17:e7:59:d9:db:70:00:c9:
                    0b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:27:9C:45:5B:FA:F0:C2:A3:73:BD:69:54:FE:9C:45:1D:0F:0E:0C
            X509v3 Authority Key Identifier:
                keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:53:b4:15:28:a8:14:72:fb:cb:9c:d2:19:53:77:38:3b:0c:
         41:4a:79:4b:a2:3d:11:c2:53:a6:9f:ed:06:12:22:63:25:1f:
         8c:69:e1:f0:d1:4c:3d:89:c2:24:98:fc:6b:d7:63:3b:61:70:
         24:3f:53:84:c0:0c:09:b9:c7:63:07:be:ce:bf:fa:4c:e0:87:
         4c:e4:36:7b:48:7d:a1:9e:f5:a9:62:82:f4:99:d2:24:38:79:
         c2:ef:70:3f:f3:b2:8a:bc:69:64:d2:9a:e0:fe:a9:32:96:fe:
         58:a0:18:25:4e:48:0d:f3:c2:d5:49:91:f9:a9:38:3f:13:34:
         96:c9:12:68:49:af:45:d4:a8:d6:3e:3d:d8:cf:4a:8c:b3:c2:
         f8:1c:1a:70:8f:8c:cc:35:92:e2:c0:a6:16:23:54:df:12:1c:
         2f:bb:28:e2:f5:4f:08:e2:d7:27:4c:0d:bd:62:8f:11:e3:25:
         8e:d2:63:8a:80:da:47:53:a7:54:52:5f:bc:c8:48:1a:3d:01:
         4f:f3:fd:77:fe:0c:82:4c:35:73:03:ab:56:6c:fd:19:d7:0e:
         f7:14:06:0a:5c:d4:80:1d:ee:a2:15:fb:63:66:e2:56:c0:7e:
         99:37:c5:b1:a2:34:34:9f:05:00:ef:f2:d4:d7:48:26:bb:bb:
         d7:43:10:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 22:29:31 2026 by rpki-client