Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft
File:                     j7lyrwthAUecHUYZkSh4p6ylX5s.mft (raw, json)
Hash identifier:          2sFeW6EeauPuJuwEtbW+2g7R3UzgbLIIJPsAmrUWb9g=
Subject key identifier:   30:1B:6B:AC:0B:96:F7:4B:E2:F9:AA:17:78:9E:6A:F6:FF:90:F1:90
Authority key identifier: 8F:B9:72:AF:0B:61:01:47:9C:1D:46:19:91:28:78:A7:AC:A5:5F:9B
Certificate issuer:       /CN=8fb972af0b6101479c1d4619912878a7aca55f9b
Certificate serial:       019FA2CDD50E72471D7B3982C5F2D7C10F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7lyrwthAUecHUYZkSh4p6ylX5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft
Manifest number:          49
Signing time:             Mon 27 Jul 2026 09:00:25 +0000
Manifest this update:     Mon 27 Jul 2026 09:00:25 +0000
Manifest next update:     Tue 28 Jul 2026 09:00:25 +0000
Files and hashes:         1: j7lyrwthAUecHUYZkSh4p6ylX5s.crl (hash: 5yb4joePga2TQKtvyi6QPcS7z3bl47lp+GVdW3iQ6AI=)
                          2: kxoI3tnE9aYoA4v-ZLKv8i_BQx4.roa (hash: l4BQilcKqCp6clXu8XgqddZ6lxjo67lqHjYTl9GbYZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7lyrwthAUecHUYZkSh4p6ylX5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:cd:d5:0e:72:47:1d:7b:39:82:c5:f2:d7:c1:0f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb972af0b6101479c1d4619912878a7aca55f9b
        Validity
            Not Before: Jul 27 09:00:25 2026 GMT
            Not After : Jul 28 09:00:25 2026 GMT
        Subject: CN=301b6bac0b96f74be2f9aa17789e6af6ff90f190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:f1:a7:aa:9a:ed:14:41:8a:18:7c:7c:b7:
                    fa:6d:10:88:b3:89:ec:c3:d6:3b:f9:e7:6f:ef:40:
                    85:ff:7d:a3:61:c6:5d:99:6e:75:52:72:4e:68:2f:
                    27:88:59:f5:7e:7a:77:1b:76:8b:ca:7a:0c:b2:58:
                    a5:e6:54:ef:f2:64:d6:32:4f:da:97:24:d3:a8:83:
                    bd:e1:eb:32:d0:93:bd:a1:3e:35:e8:57:38:ef:fa:
                    f6:e9:23:16:74:c3:8c:11:a4:f5:e6:c1:ba:93:be:
                    1a:53:ec:6c:63:dc:14:7f:0e:a0:b1:10:c1:79:5b:
                    25:37:fc:21:2d:04:1d:58:0d:5f:58:2b:dd:6b:f5:
                    c3:aa:1f:bb:c4:32:98:fb:02:f1:c1:4a:0c:99:7e:
                    ed:f3:28:20:8a:aa:c4:da:8d:4e:2f:66:4a:64:87:
                    94:d4:74:db:75:fc:a5:44:ba:ea:0d:af:88:82:bf:
                    22:79:42:a5:dd:80:18:0e:10:09:98:42:d0:26:55:
                    9c:db:8a:02:dc:b9:19:2b:55:92:1f:59:d0:61:b3:
                    c9:11:31:7e:f2:b3:58:16:90:d5:11:8a:ff:bb:79:
                    8e:27:61:71:be:aa:9f:4c:84:d7:4f:51:e7:e2:91:
                    ea:98:08:54:36:0e:99:79:3c:dc:cf:58:25:21:3b:
                    16:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1B:6B:AC:0B:96:F7:4B:E2:F9:AA:17:78:9E:6A:F6:FF:90:F1:90
            X509v3 Authority Key Identifier:
                keyid:8F:B9:72:AF:0B:61:01:47:9C:1D:46:19:91:28:78:A7:AC:A5:5F:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7lyrwthAUecHUYZkSh4p6ylX5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:42:db:7e:db:b2:be:31:17:22:78:99:06:f4:2c:98:d4:29:
         55:2b:64:6b:42:69:3c:fe:fd:3f:b1:b6:be:87:99:0f:57:d1:
         bf:eb:04:8c:f1:42:6d:31:80:3a:b7:9d:96:00:10:13:43:26:
         90:48:d7:01:ba:8d:d5:89:4e:ba:9e:88:76:a2:ca:ff:34:e1:
         cd:86:60:be:d9:24:86:e5:e2:1e:a9:b9:e3:e1:bc:a8:e8:06:
         2d:33:95:2e:ce:21:8a:ce:9d:3a:29:e5:f7:19:7f:b7:56:36:
         77:60:1d:a0:41:5e:94:75:1c:c6:d0:ad:4b:44:de:fd:c3:a5:
         c3:63:a1:67:ce:4a:db:a4:8b:0a:aa:44:99:93:61:38:f9:1a:
         eb:57:81:9e:f7:4e:30:23:61:58:5b:fc:42:a2:bc:7e:1c:ba:
         e1:4b:7a:59:06:1d:f4:0f:7c:6e:28:f8:6d:fb:04:0b:29:de:
         ac:13:d1:e1:36:ce:ac:25:ca:50:26:3a:cf:2a:d7:5b:3d:43:
         83:19:0f:92:a7:20:80:86:af:fe:76:de:d3:7c:dd:d8:a3:43:
         17:86:ae:28:07:2e:da:9c:1c:b5:e7:0b:cd:1c:85:fd:08:8a:
         3a:5f:89:f3:f8:32:41:40:d8:d3:b4:00:aa:26:b8:56:f0:c9:
         7d:da:a2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:45:14 2026 by rpki-client