Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File:                     jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier:          mX6EgiIj05/z4DN0uSSDLoGvoxK483/mXVIYu8HZaow=
Subject key identifier:   7A:D2:A3:A4:41:33:68:C5:7D:1C:56:DC:13:29:24:35:DB:3A:D1:CF
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer:       /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial:       019F9F95BE089F778CA81D2C69D6F3DA670E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number:          10B5
Signing time:             Sun 26 Jul 2026 18:00:18 +0000
Manifest this update:     Sun 26 Jul 2026 18:00:18 +0000
Manifest next update:     Mon 27 Jul 2026 18:00:18 +0000
Files and hashes:         1: 5wC3q6B54eAcdpMGYy8JKiEzECU.roa (hash: YD5/mldtyyZxQxTmZPfE5GxbPet+CghI1yjmDd9E8V0=)
                          2: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: qntoFRw3L2t5hmJ82d3R7/nDHc+aDNE/eXiRyTtEj6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:95:be:08:9f:77:8c:a8:1d:2c:69:d6:f3:da:67:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
        Validity
            Not Before: Jul 26 18:00:18 2026 GMT
            Not After : Jul 27 18:00:18 2026 GMT
        Subject: CN=7ad2a3a4413368c57d1c56dc13292435db3ad1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:14:56:54:c4:b5:e6:a3:9e:4c:f8:bf:fd:
                    15:85:1b:9f:20:7c:0e:47:a6:49:83:3c:c7:2c:a5:
                    4d:ab:bd:32:a1:38:3d:bb:24:9e:17:21:f8:cf:94:
                    82:9f:37:7d:6c:d5:70:8c:f7:c7:a3:2e:d5:c8:4b:
                    e7:9c:50:ee:b5:37:9d:90:8f:a8:e6:75:7b:3c:80:
                    4a:ed:33:ea:46:a7:ea:4c:c8:09:e5:74:64:b6:69:
                    e4:1c:37:24:bf:94:7f:d9:79:c9:27:6f:ef:d5:da:
                    2a:b9:b5:36:ab:ae:42:f3:b7:72:35:cb:3e:52:dd:
                    71:0e:24:af:c1:1a:74:03:4b:89:29:ce:48:3a:ac:
                    7b:58:ba:d9:2e:85:c3:32:7d:b1:e0:2a:0b:8a:70:
                    38:92:40:0a:3b:46:98:1c:eb:73:d3:35:76:36:04:
                    2e:f3:5f:d6:55:80:de:ff:9c:1c:b4:2b:d7:a6:f2:
                    2a:a0:94:79:8a:e1:8b:83:69:d6:6d:62:5c:1e:85:
                    4f:43:ed:8d:a4:f7:6c:c3:c2:37:e9:a2:92:1a:af:
                    83:cd:c5:fa:8a:1b:19:ab:3f:bf:0d:16:ff:9d:fb:
                    a2:8a:83:89:a4:59:d6:3f:d8:b7:1d:5d:04:ff:08:
                    ce:e1:b6:a4:4d:cc:ce:c3:0d:6b:96:e7:f4:fb:82:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D2:A3:A4:41:33:68:C5:7D:1C:56:DC:13:29:24:35:DB:3A:D1:CF
            X509v3 Authority Key Identifier:
                keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7e:20:36:52:7d:b9:5c:e6:be:27:6f:71:3c:6b:76:10:2e:
         9e:50:33:b7:f2:de:0f:2f:69:04:c1:19:13:cb:da:0c:0f:08:
         1d:cc:5c:92:b1:d1:f6:51:56:dc:88:b9:17:8f:12:c7:58:d0:
         8a:17:1f:90:5c:2d:ff:a3:1c:da:17:bf:25:6f:04:c6:76:5b:
         17:e3:0b:ec:67:58:34:9a:f5:44:4c:38:4c:bd:77:f8:26:7c:
         96:cb:51:a5:81:3d:db:cb:3c:2d:53:4f:d3:19:4b:9d:4c:9f:
         9d:58:f9:e2:b3:95:22:de:91:86:3f:e6:ba:d5:4a:62:3b:5a:
         54:9f:99:b0:21:e1:10:94:98:1c:85:87:94:95:e2:79:9a:84:
         ae:22:0b:e7:fe:53:ff:d0:14:b5:c1:b6:61:53:4a:b7:6b:7e:
         59:19:91:53:cf:34:76:94:d6:ad:95:5a:cf:8b:a6:55:bc:d4:
         e2:ec:ce:7a:15:b0:de:ca:73:ee:31:ef:1f:0c:66:24:a8:ef:
         13:3f:05:a3:bc:62:ca:19:fb:bd:63:26:c2:40:72:b4:a3:2d:
         d8:20:bb:a9:7f:b3:2f:75:4c:54:52:20:3f:b2:a5:79:e4:3a:
         07:4a:33:c7:17:f5:ff:5c:29:63:06:0d:d7:6d:3c:3b:e6:dd:
         f1:9c:e3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:54:37 2026 by rpki-client