Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
File:                     jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json)
Hash identifier:          sLCiiiwVzOvR64yv8KzLORYxBHFItOp/fKNSWPIJiA0=
Subject key identifier:   F9:2F:F9:81:1E:21:29:4C:52:E5:73:F5:D2:31:EE:DF:05:76:DE:5E
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Certificate issuer:       /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial:       019F864478059F0701E1E7F95A8B71F4F7B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
Manifest number:          1875
Signing time:             Tue 21 Jul 2026 20:01:01 +0000
Manifest this update:     Tue 21 Jul 2026 20:01:01 +0000
Manifest next update:     Wed 22 Jul 2026 20:01:01 +0000
Files and hashes:         1: iufQHL1rrp5XzvULdBkr0SPCCu8.roa (hash: o7Un0OaNswzLrJGI0RBqiK6v18+B62LAaKhklEYedo4=)
                          2: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: IJiVP3boe70npCWCpoArcdA/JcwTLJCYhPIrmXRkLt8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:44:78:05:9f:07:01:e1:e7:f9:5a:8b:71:f4:f7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
        Validity
            Not Before: Jul 21 20:01:01 2026 GMT
            Not After : Jul 22 20:01:01 2026 GMT
        Subject: CN=f92ff9811e21294c52e573f5d231eedf0576de5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c4:27:c7:ef:41:54:24:a2:29:f9:cb:d1:08:
                    4e:26:56:ac:cf:ae:e7:f6:bf:69:dc:48:87:4c:d3:
                    74:7f:99:96:d5:0c:5b:6b:d2:8f:e6:cf:d9:c3:27:
                    c1:19:ca:3a:3b:92:99:c3:8d:23:80:6f:26:2a:27:
                    48:98:02:df:39:6d:fe:68:df:7e:c1:e5:7a:6f:94:
                    b8:4e:fc:ee:77:87:f7:2d:fb:b5:63:a9:34:ae:e6:
                    35:9b:04:8d:08:bc:35:47:89:a1:52:10:bd:75:a3:
                    65:85:1d:f5:71:0d:dc:14:bc:b0:3a:07:d8:00:12:
                    23:2d:69:5f:15:d2:48:f5:a9:6d:dd:95:04:18:06:
                    0d:85:83:4e:6d:7f:84:b5:a5:84:0e:7e:e0:1b:5d:
                    67:98:44:0f:c6:49:de:6f:a6:6a:13:e0:d8:b0:27:
                    cc:8f:6b:ee:64:e4:a4:be:32:dd:9a:45:ab:cf:1b:
                    41:54:9f:e4:fb:10:b1:31:c4:07:d4:c6:63:92:e4:
                    4e:bc:2d:0e:bd:d6:a1:73:e6:06:aa:77:cf:ac:a3:
                    08:6f:58:88:e5:64:04:37:63:c1:0e:ba:04:53:49:
                    36:82:83:76:59:7a:7a:27:3a:81:be:5b:9b:7f:c0:
                    d3:b4:5a:8d:f4:a4:41:fa:68:41:cf:88:b3:c5:32:
                    49:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2F:F9:81:1E:21:29:4C:52:E5:73:F5:D2:31:EE:DF:05:76:DE:5E
            X509v3 Authority Key Identifier:
                keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4a:18:6e:03:47:f2:e9:1b:4d:e4:3c:c3:dc:c6:66:61:08:
         ec:04:74:8e:aa:18:56:cb:d3:ba:3f:b5:ed:9a:3f:74:f9:8b:
         14:5a:b5:6a:10:d4:12:cb:8a:57:98:27:fd:8c:9e:5b:ed:d0:
         28:79:4c:2c:f2:9b:d4:4c:8a:89:1d:fe:2a:b9:d3:f3:91:12:
         3a:5b:65:c8:35:63:e4:b4:c9:d9:3a:a9:fa:ce:50:fb:68:08:
         3f:cc:e1:d5:ce:e5:40:ed:98:51:25:57:9b:6b:91:83:82:21:
         03:ec:c9:c8:f3:62:14:6f:35:78:62:ba:a7:2f:cf:d5:69:f6:
         76:2e:b4:1f:32:21:65:25:fa:b8:4d:a0:8b:e3:f0:87:b2:9f:
         f7:8b:ab:20:98:1d:76:d9:d0:aa:c7:29:bc:95:84:90:ab:c5:
         a3:83:0e:09:0c:26:80:dc:d7:f0:d4:78:81:22:a0:7c:31:72:
         f3:80:6d:34:e1:e2:ac:62:89:29:f6:21:12:57:38:fd:e5:66:
         a6:e6:7e:b0:eb:4e:fc:09:f0:a2:7b:64:01:e8:49:df:8e:03:
         8a:f8:37:e1:ed:37:d8:ee:ce:80:69:1d:d9:37:42:db:4d:c6:
         0d:3c:8b:6e:31:e0:22:34:fc:85:3e:e3:42:f4:33:11:8f:4e:
         1f:66:44:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:07:23 2026 by rpki-client