Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
File:                     JojvNz-PAOAcJc-SS08ujsaiGdE.mft (raw, json)
Hash identifier:          jt9XWOYt/NlZeSGyQLSEXkHCtGUNwfhgzGX5jFHIE+A=
Subject key identifier:   C7:92:66:DC:19:9B:63:42:BD:85:CF:83:A8:9D:29:90:BF:43:BB:85
Authority key identifier: 26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
Certificate issuer:       /CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Certificate serial:       019FA1163C891AA5E08C33DDCFCAD1B9ABA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
Manifest number:          19D2
Signing time:             Mon 27 Jul 2026 01:00:16 +0000
Manifest this update:     Mon 27 Jul 2026 01:00:16 +0000
Manifest next update:     Tue 28 Jul 2026 01:00:16 +0000
Files and hashes:         1: JojvNz-PAOAcJc-SS08ujsaiGdE.crl (hash: dWMqP2QlZ2SP5wjG+yfGpa6bQawiy0G60G2p+scHECY=)
                          2: lMxeGirQXYR0GmDk4V1MklHdGZ0.roa (hash: FHwqA5/kX+tzwJy24N20vnc6oaI1ZNK+QVCJ/kD2Qfg=)
                          3: w71z6e1nnczS-eMiXSgzScyOD6k.roa (hash: IC3JerQQwAfGduvYY+qJSAnye5COvgk3vpfNs1yG+I4=)
                          4: zkOZlou0wZ6me2DfEVkQRqyFe8k.roa (hash: pU85jXVjO3BbHeMnI95HpijaHL/9kMqJ0g5Ywj9M28E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 01:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:16:3c:89:1a:a5:e0:8c:33:dd:cf:ca:d1:b9:ab:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
        Validity
            Not Before: Jul 27 01:00:16 2026 GMT
            Not After : Jul 28 01:00:16 2026 GMT
        Subject: CN=c79266dc199b6342bd85cf83a89d2990bf43bb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0d:e2:af:82:e3:5d:f3:45:4a:1d:02:8c:13:
                    83:77:42:a8:f6:e3:77:aa:48:c6:99:ae:20:52:80:
                    44:fb:44:1d:c0:e8:76:56:46:71:92:f2:1b:9b:eb:
                    63:dc:2c:6f:71:c5:95:98:45:e2:0d:87:3b:f8:53:
                    21:99:88:bd:4c:5b:56:a6:a2:a8:4a:33:5e:96:58:
                    a4:8e:ce:62:e2:60:96:fa:52:dd:b5:77:5c:00:79:
                    c6:ec:5c:4b:04:a9:28:fe:9c:d6:35:5c:7d:63:2b:
                    ee:fe:c2:be:4b:a9:53:c9:2a:84:c2:06:a6:51:68:
                    ef:a9:12:96:f6:63:b3:d9:6a:3c:f7:e0:12:7b:38:
                    69:a9:29:68:ab:93:b0:92:b2:fe:3a:16:ce:0f:8d:
                    35:6d:f1:76:4f:3e:c4:b8:f1:13:47:0f:bc:dd:c8:
                    e3:85:70:ef:be:78:bf:65:93:a5:6c:fc:64:41:2e:
                    57:fe:4a:5e:c4:7e:b5:97:e0:75:85:e3:56:af:d7:
                    52:72:4f:08:93:a3:62:d3:d4:ed:29:c0:1e:b1:65:
                    98:85:1a:27:20:26:a2:ff:e6:96:04:14:3c:d7:fb:
                    6d:28:87:59:8c:3c:8d:01:99:88:f9:3c:3d:d7:78:
                    fb:73:1e:7e:70:ee:bb:d5:26:78:ce:68:71:a4:a3:
                    10:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:92:66:DC:19:9B:63:42:BD:85:CF:83:A8:9D:29:90:BF:43:BB:85
            X509v3 Authority Key Identifier:
                keyid:26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:18:c9:f2:27:1f:4e:68:ff:3f:9e:ec:95:ce:1d:00:93:08:
         c2:89:ec:21:10:68:21:80:51:48:d4:2a:c6:7d:0f:fa:fd:05:
         87:0e:8c:53:ec:da:fa:58:ce:35:dc:00:90:c5:ad:05:25:24:
         82:48:59:11:14:30:52:ad:1a:0b:b1:28:a2:7c:a6:a3:94:9b:
         cd:14:be:82:4d:e2:79:7e:70:bf:7d:49:65:cc:51:26:ab:c1:
         eb:82:18:ec:d3:15:42:e3:4b:ca:66:bc:bc:3e:13:97:d1:9f:
         f8:a8:51:e0:1e:c4:ae:f4:30:46:f6:03:53:7e:a5:d1:c8:87:
         d7:43:8b:82:96:d4:d2:33:1a:2b:58:60:fe:c2:cd:3d:29:0f:
         60:af:c3:6c:67:1c:3f:64:b3:aa:95:f4:ed:c0:79:d3:c9:e3:
         71:4c:2f:30:2c:d5:33:12:0c:9b:85:d5:f3:c3:2a:2d:3d:a0:
         53:07:f4:d7:70:b5:6d:cd:c0:da:0e:d4:c4:68:0d:9f:1f:39:
         61:9c:75:4e:f7:ef:87:a3:b3:3b:45:93:31:b5:16:b8:ce:aa:
         57:2d:ae:15:71:f6:9d:74:9c:e6:c1:3c:80:f5:e0:38:29:e5:
         d2:22:c3:39:24:e5:69:a1:fd:a4:6d:f1:f4:48:b8:9d:03:3b:
         2e:09:fc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:27:23 2026 by rpki-client