Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
File:                     JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft (raw, json)
Hash identifier:          2rfHuFNZpRCFOYW4+lRgchOr8C49mfHiqxsqoawxHBg=
Subject key identifier:   AE:4B:A3:B2:F8:10:80:CF:9C:15:98:7E:DC:52:E5:3B:AE:64:25:2F
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Certificate issuer:       /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial:       019FA071B72CD45EF1598AFB23E7C9327260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
Manifest number:          11C3
Signing time:             Sun 26 Jul 2026 22:00:34 +0000
Manifest this update:     Sun 26 Jul 2026 22:00:34 +0000
Manifest next update:     Mon 27 Jul 2026 22:00:34 +0000
Files and hashes:         1: 98ygSkK-1Ztw7Q-MRFc_SpdR9Co.roa (hash: 0au9RALDzOJkPfyVu6dInrBQ1yun08eIF9gTvZfdo5Y=)
                          2: JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl (hash: MXbYV6IiixHqmkm4QoYHdGULuVRwSbS+wj5YcI6R8+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:71:b7:2c:d4:5e:f1:59:8a:fb:23:e7:c9:32:72:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
        Validity
            Not Before: Jul 26 22:00:34 2026 GMT
            Not After : Jul 27 22:00:34 2026 GMT
        Subject: CN=ae4ba3b2f81080cf9c15987edc52e53bae64252f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7c:14:43:89:61:95:3f:38:ca:7c:8e:bb:07:
                    ad:95:6c:b4:58:db:ae:41:2d:d4:c9:34:4b:ea:55:
                    ca:b2:8e:8d:96:1f:41:39:ea:33:78:09:11:29:ee:
                    0f:c0:d3:45:c3:58:79:3b:d2:ee:56:64:87:b3:89:
                    2c:95:15:2a:36:b6:34:6a:e8:dc:af:2b:b4:31:b2:
                    49:04:d7:ae:51:c4:a5:07:d8:d9:7a:1a:ca:10:48:
                    3c:27:3b:e7:49:b0:ba:45:71:40:ed:f4:6b:cc:6f:
                    e0:6a:a5:7f:bf:63:89:7a:6c:fa:75:ef:5e:c8:6d:
                    9b:bc:81:36:71:02:d1:c4:33:b0:83:df:c2:c0:3d:
                    8d:a0:20:f6:12:ef:aa:9f:09:ac:c8:27:5d:ed:31:
                    bf:5e:c5:6a:21:50:c7:0f:52:75:34:c8:b3:f8:3a:
                    dc:3c:25:2c:09:b0:85:f6:11:22:dc:9e:40:e0:30:
                    6d:9e:22:10:6c:1f:54:8c:88:cb:2b:ce:17:92:18:
                    e0:7f:ad:70:02:7e:da:8f:fc:b3:d2:48:1e:58:a6:
                    05:50:fd:11:e6:b0:ca:29:3c:86:25:ca:4f:1c:ad:
                    55:37:80:a0:9d:3c:a1:1c:d0:9f:1e:c1:02:da:51:
                    54:c6:62:36:54:66:db:5b:85:9c:2d:28:12:3c:35:
                    98:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4B:A3:B2:F8:10:80:CF:9C:15:98:7E:DC:52:E5:3B:AE:64:25:2F
            X509v3 Authority Key Identifier:
                keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c2:71:d6:eb:22:85:13:b2:4e:af:32:23:1f:fd:a9:17:13:
         04:c1:71:01:c5:43:73:af:7a:0b:35:6a:20:ea:d6:1d:17:fd:
         20:97:c9:99:64:8f:c2:86:30:68:b1:ff:9f:f3:d2:07:3d:bb:
         7c:c7:74:8d:34:6f:d9:3e:e8:e5:ca:3a:1f:d0:45:82:f9:08:
         33:bf:5b:1b:14:34:db:c2:dd:98:e1:e5:26:8c:8d:9a:d3:6d:
         30:5f:c2:57:1e:3e:2f:1d:d3:3e:59:cd:87:da:25:1f:0d:d1:
         6a:3f:11:b6:9d:31:4a:9d:38:1e:59:1a:58:89:0a:8b:6c:00:
         bc:4d:8f:1f:db:20:31:ff:99:ac:2d:4a:20:ad:14:62:ca:bd:
         8f:74:b9:a4:3a:e8:e7:69:a3:4c:62:b7:ef:e7:f3:dc:7f:57:
         fd:03:b8:bc:a2:16:17:75:94:3c:45:f3:91:2a:7e:8c:ed:e0:
         fb:04:0b:30:99:b7:e2:a7:8c:0d:bf:7c:1a:62:8a:b3:9d:7f:
         83:e3:35:a7:1b:fd:c0:a9:85:2e:61:3e:8f:9b:22:ce:c9:e6:
         3f:9d:75:a6:12:d6:17:41:8a:58:67:95:f8:d0:b0:c9:d0:35:
         86:71:1d:78:0e:49:1d:99:e8:77:da:35:74:a0:33:8a:f3:12:
         e1:92:d3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:23:20 2026 by rpki-client