Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
File:                     JYYj7MjcuRPRAiipRgqG5mDLj7I.mft (raw, json)
Hash identifier:          cWhwhRmvE8/c4/GRFCjoR57NaIy6/lv3KBuYGip19xo=
Subject key identifier:   54:36:70:FE:06:23:0A:B4:85:FE:1E:75:E8:4C:C5:A8:E6:5F:60:C2
Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
Certificate issuer:       /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Certificate serial:       019F9FCCCA01F82E84058085201BBE3F452A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
Manifest number:          19CC
Signing time:             Sun 26 Jul 2026 19:00:26 +0000
Manifest this update:     Sun 26 Jul 2026 19:00:26 +0000
Manifest next update:     Mon 27 Jul 2026 19:00:26 +0000
Files and hashes:         1: 27iJL7tabeRZf9si2vPA81cwEnc.roa (hash: xWHsz8ye7DjPUgv12m50umXvY8HUT0fQ38UrVHv9Jwc=)
                          2: 6zmwp0Ty38xOLaz9dzA80B6hzAM.roa (hash: OlOuB/7WZRu3jgahb4J4hkXzTMRNqdoXbJ2s7Ooyi+Q=)
                          3: JYYj7MjcuRPRAiipRgqG5mDLj7I.crl (hash: gmyt3WPgR+TKs0tSISbYU/U3WnCo+FT95FOCE0KyAyA=)
                          4: Txl_hQPriUVq_Buu0gTEPI2kg_g.roa (hash: svJCwy5lyL58vBvH80bdWo+cEP+N6WrO0t2/0pD94JY=)
                          5: e4fvp8yWlAX8buHeYzF-90rR6Bk.roa (hash: cr5m93AUTTeXzPXmKSQPnNEYJwCdKzbaLZUVJBf9U6g=)
                          6: ljr109WhqKfeYcH-MhSgPoSjR9U.roa (hash: RdTZwN02aq7Yl4Y75F8xayBDhsLyfJXGJDu35AD1V7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cc:ca:01:f8:2e:84:05:80:85:20:1b:be:3f:45:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
        Validity
            Not Before: Jul 26 19:00:26 2026 GMT
            Not After : Jul 27 19:00:26 2026 GMT
        Subject: CN=543670fe06230ab485fe1e75e84cc5a8e65f60c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:d7:4e:9d:dd:c4:4f:39:4d:28:fa:63:fa:
                    f0:cd:7f:09:cd:c8:ec:7e:0f:dd:37:82:af:58:01:
                    4e:1f:e7:04:c2:11:ac:56:a7:0c:c4:c9:4a:ed:45:
                    cb:88:55:ba:29:53:f1:bd:b0:5a:86:de:98:61:98:
                    79:dd:b8:1a:ff:51:de:92:1d:e0:18:f3:d7:b6:99:
                    dd:ad:53:dc:4f:26:66:2e:19:dc:fb:ec:b1:d9:30:
                    66:23:3f:85:75:82:1f:e1:73:a5:00:d6:ae:75:d0:
                    47:3f:c9:2d:89:78:59:d8:62:32:4d:81:48:3e:7b:
                    fd:df:94:eb:9d:22:f1:f8:c3:f9:5f:bf:4b:6b:a0:
                    c8:e0:eb:8d:f3:80:d2:4f:ab:b5:75:4b:4e:5c:b5:
                    13:c9:06:66:6b:c6:20:c3:ca:b0:a2:84:fa:ab:05:
                    d5:28:09:72:ed:f7:f5:d3:4d:1e:d3:67:a1:07:63:
                    21:a0:17:57:5d:5a:47:96:5a:0f:22:a4:20:dd:ab:
                    6b:5b:16:7a:42:d7:ca:8f:c9:72:10:a4:bd:54:c0:
                    04:2d:81:c0:13:e4:0b:d8:8e:e9:8c:88:7d:e4:4b:
                    b9:e7:8b:a3:8d:cf:5e:3a:fb:67:10:87:b9:cf:bb:
                    3d:e7:ab:39:1a:01:32:d4:3d:b6:72:ca:66:c2:62:
                    9d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:36:70:FE:06:23:0A:B4:85:FE:1E:75:E8:4C:C5:A8:E6:5F:60:C2
            X509v3 Authority Key Identifier:
                keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a7:43:da:de:2b:5d:ac:1a:df:54:ee:7a:b7:3e:4b:d9:83:
         54:ce:4b:69:0c:ee:6f:22:e3:ee:b0:9b:08:e0:8d:c2:b5:f5:
         1b:17:89:92:1e:8f:b7:f2:e8:3d:b1:66:50:e0:7c:6b:cc:fa:
         a5:97:0c:4d:cc:af:60:e7:27:20:37:42:64:b4:94:2e:da:a4:
         ce:c6:80:f4:e4:04:f6:5c:ed:b4:4d:8f:75:f0:d5:c8:33:48:
         47:9d:ff:f6:c2:76:74:55:d5:b3:55:98:8d:ec:02:81:38:6a:
         7f:50:da:a9:be:54:20:3b:54:2f:d6:7f:df:9d:2b:a9:cd:95:
         60:d9:81:61:7b:a3:5d:bd:81:7d:0b:30:9f:ef:a3:63:f6:e7:
         db:1c:da:32:8b:33:a6:26:2d:6c:42:5a:79:f0:3c:ba:97:41:
         b3:74:37:23:2d:cc:32:0e:3b:ab:28:c1:ae:4d:e5:b1:bb:ea:
         16:59:1d:4e:35:81:54:ac:11:51:47:51:4c:f3:2d:a6:9a:15:
         49:61:69:34:be:03:63:1b:88:f8:2a:de:bb:8d:bd:00:d6:38:
         3d:99:38:1d:84:de:14:dc:3c:c4:21:b2:d8:62:0c:29:e1:f6:
         4b:fb:af:25:4c:a3:c2:f0:2b:d8:ec:a8:e9:7e:dc:2d:41:f9:
         87:7e:ca:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:27:09 2026 by rpki-client