Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
File:                     jntpkn3SG7nhRV-ojtiO0kfHGNo.mft (raw, json)
Hash identifier:          YNduNjACUoDig4U3J5T9RC2SOa9ksaBgQn0B0JGXj68=
Subject key identifier:   F7:5B:98:FB:5B:CD:EA:F1:6C:62:06:8A:DD:70:37:C4:69:13:4C:54
Authority key identifier: 8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
Certificate issuer:       /CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Certificate serial:       019F9EF24FF3FF9BE94C2B0A66189462B84F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
Manifest number:          173C
Signing time:             Sun 26 Jul 2026 15:01:47 +0000
Manifest this update:     Sun 26 Jul 2026 15:01:47 +0000
Manifest next update:     Mon 27 Jul 2026 15:01:47 +0000
Files and hashes:         1: O01TpHeHqBiUeJused6g5bROXeI.roa (hash: lprGNMtGbZUy/qu3fbQs2Y1Q7vEBDCNvAujKwUnYorA=)
                          2: jntpkn3SG7nhRV-ojtiO0kfHGNo.crl (hash: x7hosgaLV9VTZutp9gDCNHPaf/wI+m7WboPUle9ML6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f2:4f:f3:ff:9b:e9:4c:2b:0a:66:18:94:62:b8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
        Validity
            Not Before: Jul 26 15:01:47 2026 GMT
            Not After : Jul 27 15:01:47 2026 GMT
        Subject: CN=f75b98fb5bcdeaf16c62068add7037c469134c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:60:e3:77:79:25:26:39:a6:ef:85:22:d3:02:
                    d8:b0:9d:61:00:91:54:e2:eb:69:6e:cc:11:39:8f:
                    4d:54:16:71:3b:88:5e:d5:5f:32:78:22:be:fb:b8:
                    25:ba:25:0c:cd:af:a7:77:12:6b:e1:a9:c3:0c:86:
                    ac:10:74:50:7e:67:a6:6e:ad:05:db:72:a3:69:4d:
                    52:47:06:67:6e:03:62:d6:df:ec:c1:53:30:ad:58:
                    bf:bd:9a:d9:ae:1d:96:62:37:f2:4a:76:07:d6:e0:
                    d4:dd:4d:bf:8b:0d:a0:69:d4:58:cf:42:34:f7:6b:
                    7a:35:f0:2e:ff:83:92:03:61:6a:78:ff:a6:c1:ac:
                    2a:86:18:75:46:f3:c9:16:25:fd:38:ba:74:24:b1:
                    24:92:1b:da:10:ed:91:28:13:03:7d:94:a7:12:72:
                    8d:6d:17:18:a2:cf:3d:1f:32:bd:af:7b:8c:c1:23:
                    96:8f:b1:62:9d:76:92:66:c1:fa:de:56:52:df:8b:
                    dc:7f:06:60:b2:2b:6b:2b:53:86:4c:2f:b6:a9:f2:
                    10:70:5d:4f:da:f6:61:06:a3:83:3b:a3:df:6d:ee:
                    2b:2b:f0:e3:b8:27:07:63:63:30:8c:a4:5f:ff:46:
                    09:c1:fd:20:e4:8d:6b:42:bb:44:24:9f:e3:f8:46:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5B:98:FB:5B:CD:EA:F1:6C:62:06:8A:DD:70:37:C4:69:13:4C:54
            X509v3 Authority Key Identifier:
                keyid:8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:03:a4:9f:0d:fc:76:c9:22:56:ec:3c:de:87:6f:9c:5d:4e:
         a5:f5:d7:6f:43:52:52:87:88:d0:86:07:1d:99:80:3a:c7:d2:
         24:4d:2a:a4:7a:33:20:c9:68:f5:b5:28:eb:72:40:9b:c1:a2:
         59:23:32:49:87:b2:05:64:4c:95:78:46:b1:d5:b2:04:98:49:
         b9:e2:50:57:3a:ff:2d:21:0c:87:f1:2d:c0:a5:d7:d7:ea:9b:
         48:6f:ad:d7:c8:4e:c7:7a:12:59:77:fe:f4:f1:eb:af:ed:85:
         9c:e5:c8:5a:dd:e9:fc:97:d5:01:d4:99:84:2e:21:55:1f:38:
         3d:53:d6:06:d5:4a:61:e7:42:44:48:80:7c:6d:22:41:1e:45:
         5c:c5:6a:39:10:35:cc:10:bf:20:8b:61:cd:ac:df:4e:d7:53:
         47:43:8f:2c:7d:cf:65:4c:6e:1f:d5:d9:88:11:c6:31:a6:f8:
         f9:49:24:6d:e0:cd:4d:01:e0:fb:5d:9c:f3:66:ca:ef:64:d7:
         7a:a0:c0:40:58:00:f6:6c:39:a3:50:4d:3b:47:23:9a:89:b0:
         9c:19:a8:ce:ff:91:d9:e6:bf:1b:ed:f3:6a:05:08:e7:a5:ed:
         60:5f:16:4f:ec:1f:4d:e6:7d:b7:32:c9:5f:0d:fa:83:d3:04:
         b9:9a:92:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 22:35:48 2026 by rpki-client