Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
File:                     jlVrUrjk5wn6Vpta43LG4oJm8jI.mft (raw, json)
Hash identifier:          t90t0PC8s0BQph1Vbq9uUtKnxeKkETw8pDbC1VmYdXI=
Subject key identifier:   1F:8B:EF:9D:6F:60:41:64:2A:2D:1C:7C:E8:C7:C5:79:29:AC:68:93
Authority key identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
Certificate issuer:       /CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Certificate serial:       019FA0E06A67923EF7AC80797F50F55E5F41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
Manifest number:          0C5A
Signing time:             Mon 27 Jul 2026 00:01:29 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:29 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:29 +0000
Files and hashes:         1: GyqUfMO0Omp9MapGvwm3OQxHuzY.roa (hash: eLOF15igrreolUrbJjNbYGfrAHmsABhFJ5BXUuXuCaI=)
                          2: jlVrUrjk5wn6Vpta43LG4oJm8jI.crl (hash: FRxUAhByWpZCJu8Nd1rsOMaqM+B+G2ABU6pRZSWZrjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:6a:67:92:3e:f7:ac:80:79:7f:50:f5:5e:5f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
        Validity
            Not Before: Jul 27 00:01:29 2026 GMT
            Not After : Jul 28 00:01:29 2026 GMT
        Subject: CN=1f8bef9d6f6041642a2d1c7ce8c7c57929ac6893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:02:55:4e:2c:7d:63:10:9c:23:cf:37:5c:72:
                    8b:08:32:6e:01:14:60:71:89:4d:31:df:57:dc:27:
                    07:ec:7e:14:4d:8c:58:bb:d9:38:fb:7d:cc:64:31:
                    a3:77:cc:7c:98:55:e5:a0:a8:e9:90:7b:bd:e7:ab:
                    4c:8f:7a:b5:37:1f:57:71:e4:c0:71:2b:69:8e:41:
                    c4:4a:42:b3:55:be:60:bc:6e:df:13:9e:ee:69:3e:
                    89:c5:48:7d:41:58:f5:43:b7:06:ee:c2:23:da:e3:
                    48:15:1a:31:33:bc:40:1f:0a:d3:ef:47:ff:c2:09:
                    84:75:31:be:c1:8d:af:e8:9c:7a:af:6b:d3:f2:12:
                    04:aa:00:b8:e1:fe:92:05:c6:36:b6:60:7d:1a:1b:
                    5d:42:6b:85:37:a3:b2:f6:10:41:cb:a2:26:b3:9b:
                    c3:e0:af:d8:32:2e:41:ab:33:cd:3f:11:96:ee:61:
                    f4:99:fc:d6:e1:ec:3c:36:41:06:3c:26:cc:e5:24:
                    5c:fc:29:e3:36:6a:36:a6:1a:b3:67:e7:1a:2c:85:
                    32:f6:14:dd:5d:1e:eb:48:3c:26:fe:e4:68:f2:d3:
                    51:cc:c7:31:52:96:e5:bf:2e:50:45:87:ae:b2:67:
                    53:81:af:d4:e4:78:e5:ec:8e:3c:ed:e5:19:81:13:
                    2b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8B:EF:9D:6F:60:41:64:2A:2D:1C:7C:E8:C7:C5:79:29:AC:68:93
            X509v3 Authority Key Identifier:
                keyid:8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f6:0e:52:72:a6:25:05:62:14:bd:00:0b:69:50:1c:ae:1c:
         18:b3:7b:4a:63:5f:4a:dd:06:14:2a:b0:57:4b:ad:49:93:4e:
         8b:e7:dc:be:f5:31:24:fd:b4:e2:ac:b1:6a:99:04:e0:ff:25:
         f4:f1:0d:f7:cf:3a:97:83:a1:81:a1:77:29:ef:cf:e3:44:ba:
         99:d5:68:4c:47:ab:58:68:82:e6:b1:12:22:72:19:91:22:14:
         82:ac:a2:76:a3:3c:db:3f:39:19:dd:1c:01:00:a6:c4:73:a5:
         d5:4f:48:b5:47:56:cc:ac:5a:cc:ae:ee:71:bd:49:21:e9:5e:
         b0:67:4a:e7:8f:3a:cd:ca:e3:2a:31:70:5d:44:a2:37:e7:6b:
         48:c5:5c:3d:d3:d1:77:13:36:1b:89:9f:89:e2:bb:08:3e:7d:
         19:c4:ae:a2:af:1d:c8:8d:0e:cb:ed:62:e0:12:14:d6:0d:9c:
         7c:b6:8b:3b:ca:51:6e:45:fe:a5:68:d7:83:6b:05:0b:6e:d2:
         8d:36:ce:f4:66:b0:f7:95:e4:41:2b:e8:67:65:5d:89:fe:15:
         47:20:25:6d:7f:92:9e:2f:3f:e0:09:32:47:cb:a5:19:00:e3:
         01:f7:df:c3:79:63:e2:7f:a7:77:9a:4f:38:0c:6f:5a:ea:a0:
         40:02:57:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:19 2026 by rpki-client