Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
File:                     JvRVgKY2EDzJWr6BCg0GkouaDd8.mft (raw, json)
Hash identifier:          o6uIYX4Bk+ujuYtWrKPsoH6Mcfgwy+bRIwHWOlcQuk4=
Subject key identifier:   81:6C:12:86:B7:7E:8D:19:90:32:B5:C1:6B:49:9F:98:82:89:09:93
Authority key identifier: 26:F4:55:80:A6:36:10:3C:C9:5A:BE:81:0A:0D:06:92:8B:9A:0D:DF
Certificate issuer:       /CN=26f45580a636103cc95abe810a0d06928b9a0ddf
Certificate serial:       019FA184A60557181E733E3E3923BA2105E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
Manifest number:          0194
Signing time:             Mon 27 Jul 2026 03:00:52 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:52 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:52 +0000
Files and hashes:         1: JvRVgKY2EDzJWr6BCg0GkouaDd8.crl (hash: A2ru59B0S0KPsljsrtBTpqYhUCQnqgvkhzhhpMx847g=)
                          2: w-nnLB0gJHLqHYNGFppYN7WkZFM.roa (hash: QK4oKJXySakBc6G1Ar7UfRyPt44Ci6G96TsVap7g1D0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 03:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:a6:05:57:18:1e:73:3e:3e:39:23:ba:21:05:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f45580a636103cc95abe810a0d06928b9a0ddf
        Validity
            Not Before: Jul 27 03:00:52 2026 GMT
            Not After : Jul 28 03:00:52 2026 GMT
        Subject: CN=816c1286b77e8d199032b5c16b499f9882890993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:76:d7:3c:07:49:86:78:40:62:70:9e:61:2a:
                    7b:55:0a:37:2a:5c:dd:eb:7a:51:87:49:24:32:17:
                    6e:32:0e:21:a5:0d:56:7e:c6:7b:59:7e:88:3a:d5:
                    24:dd:43:2c:ae:b8:66:0c:2c:28:95:c9:77:ed:36:
                    d6:38:80:33:d4:ec:b1:f7:2e:f5:da:88:a1:46:72:
                    22:b3:50:7a:20:ca:30:b5:a6:80:cd:0c:71:fa:f4:
                    63:e9:4f:6c:64:67:78:e4:33:41:f2:cf:8a:04:35:
                    1a:22:38:15:7e:a4:ca:57:b4:b5:88:cd:18:72:02:
                    25:79:d7:7a:ba:ec:ec:62:9a:60:67:98:d2:31:db:
                    f9:a7:5e:05:0c:b5:44:39:13:e4:4a:c3:a6:ce:01:
                    6e:31:0c:f0:32:1d:a6:1a:92:87:61:46:64:02:a6:
                    5d:77:26:29:9d:c0:ca:ec:54:20:78:57:45:f7:24:
                    98:01:66:85:72:be:68:68:a7:59:01:e0:44:a9:18:
                    de:00:d8:5c:ec:46:fa:bb:0c:09:0f:fa:13:e8:98:
                    d7:dc:59:5e:3f:c3:b3:45:d8:e2:4e:f2:89:53:d2:
                    d3:f1:20:38:c8:9f:62:f9:75:4a:03:db:70:3f:0b:
                    75:8b:e2:12:e1:57:13:12:f9:cc:46:68:04:b5:85:
                    ce:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6C:12:86:B7:7E:8D:19:90:32:B5:C1:6B:49:9F:98:82:89:09:93
            X509v3 Authority Key Identifier:
                keyid:26:F4:55:80:A6:36:10:3C:C9:5A:BE:81:0A:0D:06:92:8B:9A:0D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f1:51:bc:54:7a:07:1e:31:c7:a3:b9:a1:a1:6f:21:15:19:
         0c:42:d9:a1:a7:4c:a2:cc:31:85:50:ba:ed:8d:d3:45:f7:5b:
         aa:76:61:6c:08:50:65:f9:ce:32:f1:f7:73:b0:5c:4a:3a:26:
         d6:c3:74:94:95:bb:04:0d:2b:cd:a8:ff:4c:79:3d:e3:a2:5a:
         5a:cf:2d:96:f1:25:89:13:5a:c5:8f:5b:d0:8e:b4:f4:c3:15:
         22:a9:96:1d:a4:bb:6a:0e:0b:ae:67:09:44:3e:34:73:4c:b1:
         08:b4:d3:16:f8:7b:66:3f:63:a3:4d:f4:bb:2a:d4:b6:88:8d:
         51:57:f4:47:9b:ea:46:e7:97:95:9f:b1:3b:66:60:53:04:59:
         94:62:d4:b8:ca:be:eb:1a:61:fd:76:8c:93:72:05:c0:fb:a6:
         80:22:9f:22:c4:45:7c:38:e5:61:52:a9:c3:42:fb:fc:d3:de:
         f2:73:b6:80:4b:6d:cd:cf:16:99:97:d4:f3:06:70:10:57:77:
         76:b6:c1:94:29:a2:8b:c3:15:25:8f:67:8f:a6:07:50:5d:51:
         e6:6c:c0:c9:72:18:84:bd:06:e7:8f:44:6d:bd:01:cd:28:9e:
         26:f8:fe:d9:54:fa:58:30:34:71:e1:ce:a5:57:d8:04:59:22:
         7e:90:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:46:49 2026 by rpki-client