Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
File:                     jagkvGMczuGumdcQOv0tx08eKcQ.mft (raw, json)
Hash identifier:          TKW9SS1Zlnm/qjODX3ui6nP0OHc0DnItIi9IEhUmtas=
Subject key identifier:   DA:11:BB:EF:C9:3F:4F:B4:81:1F:AD:0C:2E:4C:58:1D:56:07:F6:B3
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Certificate issuer:       /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial:       019FA3A9C6B0738BC32EAA1A2040B9944716
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
Manifest number:          1963
Signing time:             Mon 27 Jul 2026 13:00:40 +0000
Manifest this update:     Mon 27 Jul 2026 13:00:40 +0000
Manifest next update:     Tue 28 Jul 2026 13:00:40 +0000
Files and hashes:         1: gl2nmwO4v0CeZLjHm3SDRIyos8Q.roa (hash: XbNVPIMyzYNGS/m6xHDz4/G85Dxs4nrc/Ehwb2bG/rs=)
                          2: jagkvGMczuGumdcQOv0tx08eKcQ.crl (hash: cehy3wXcCLB52ljm0OtoV8uDBl+5kTpDyD0zdeVL9O0=)
                          3: kNR-gUHIBkAVG5LDVgVJxvEY3q8.roa (hash: d0VW7tyS0/KepNZdJ2Fz8K2kUTPgtIVFBZK37jfxU0M=)
                          4: kUXgXHjZh6Dhv7swtP0uScwOUOU.roa (hash: quIM8+yqzd47fNHZBFQKX0gUs534hYfsNXJItcjTlM4=)
                          5: v9YovKS0rkxgh-imaNT6dS4t8wE.roa (hash: +gjCRrqjahMp/Uxvqf8OR5Yjihz0o/VceeWEOtR4+ZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:a9:c6:b0:73:8b:c3:2e:aa:1a:20:40:b9:94:47:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
        Validity
            Not Before: Jul 27 13:00:40 2026 GMT
            Not After : Jul 28 13:00:40 2026 GMT
        Subject: CN=da11bbefc93f4fb4811fad0c2e4c581d5607f6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:4e:49:45:25:4f:07:a4:fc:f1:ec:2b:c9:
                    65:18:13:78:ae:c5:b4:f7:d2:37:05:dc:f2:73:9e:
                    95:44:f8:b8:7f:3c:43:8a:de:56:d3:5d:b9:6c:08:
                    ec:f4:12:99:d3:b0:42:9e:07:77:be:9f:17:85:29:
                    90:67:12:36:b2:9f:e1:6c:69:c7:fc:ef:e4:b7:71:
                    1b:6f:8c:2c:24:0f:87:bd:63:9a:f2:3c:a0:b7:ba:
                    03:f8:ea:d4:ce:91:a6:57:6f:ea:e7:68:7c:ac:00:
                    80:e0:61:c4:2a:eb:f0:a0:3d:d2:a7:c8:7f:54:ff:
                    f0:32:f6:c3:b6:88:f3:69:dc:5f:df:14:9b:98:a9:
                    91:67:02:ea:8d:26:e9:79:24:86:9c:03:4a:02:ef:
                    1a:66:3f:a7:ef:80:23:60:72:7f:17:51:15:52:bd:
                    3d:40:d6:f1:0e:5e:7b:49:7b:3e:26:2b:c5:ec:bb:
                    f6:e0:e6:ed:f1:38:69:5e:4d:ce:20:5d:51:d4:88:
                    11:a7:4c:8d:81:f4:20:70:54:5f:67:da:de:fa:13:
                    aa:98:17:06:57:3e:d4:9f:b3:22:5e:cb:60:51:ca:
                    76:ba:ca:b6:eb:bd:87:18:c0:0d:e7:8d:4f:91:a3:
                    a2:73:cd:80:b9:a1:b5:46:49:9d:11:54:9b:64:d8:
                    fb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:11:BB:EF:C9:3F:4F:B4:81:1F:AD:0C:2E:4C:58:1D:56:07:F6:B3
            X509v3 Authority Key Identifier:
                keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:14:dc:cf:11:f9:82:a3:7f:11:01:30:fa:77:2c:21:e0:58:
         9d:e8:f3:6a:5a:2a:57:83:78:c5:b4:ce:0c:b8:9c:a1:1a:52:
         eb:3c:5d:d3:cb:cc:c4:cd:29:54:42:5b:17:83:45:c6:02:bd:
         b2:94:07:bd:a4:3a:42:3f:85:18:93:1a:5d:cd:f2:fe:d4:ee:
         0b:15:78:70:5c:82:48:8d:fc:0f:d9:e7:aa:e4:6d:2f:89:0c:
         bd:30:05:08:69:de:5e:50:52:ad:0e:4c:3f:79:8b:71:ca:01:
         ad:e6:ed:50:d0:b3:42:9f:f6:4d:9a:99:cd:87:7a:cd:c1:c8:
         f9:8b:11:1b:70:29:49:9e:01:91:61:6e:a2:58:a5:a8:60:78:
         f8:93:22:fc:06:e4:d1:b3:4f:81:55:14:17:39:a6:84:df:42:
         b3:24:2d:d0:47:54:ac:c9:3b:6e:25:69:39:cd:8e:16:ab:79:
         bc:c9:e2:f1:9c:18:3e:d5:76:c8:78:9b:73:14:22:e8:1c:0d:
         00:0a:5d:d6:aa:09:95:c5:5b:1d:53:78:4f:c3:e1:76:a5:5d:
         41:d3:f9:5e:d0:03:68:a0:fc:0c:9e:74:e5:95:97:b1:c4:f1:
         38:a4:24:c7:72:e6:c7:2a:63:36:47:51:e5:fd:6d:0a:79:8d:
         2b:4e:32:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:04:15 2026 by rpki-client