Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
File:                     JvRVgKY2EDzJWr6BCg0GkouaDd8.mft (raw, json)
Hash identifier:          z2m4fY4quvWj+JoULgwZyNMvKPHyeYfB8Nu1EBV1cS8=
Subject key identifier:   5E:E6:5B:46:B7:1C:49:4A:6F:B6:0D:17:40:49:B6:6B:5F:DE:91:DC
Authority key identifier: 26:F4:55:80:A6:36:10:3C:C9:5A:BE:81:0A:0D:06:92:8B:9A:0D:DF
Certificate issuer:       /CN=26f45580a636103cc95abe810a0d06928b9a0ddf
Certificate serial:       019FA372D760E00425EB912A8582C9A389D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
Manifest number:          0195
Signing time:             Mon 27 Jul 2026 12:00:40 +0000
Manifest this update:     Mon 27 Jul 2026 12:00:40 +0000
Manifest next update:     Tue 28 Jul 2026 12:00:40 +0000
Files and hashes:         1: JvRVgKY2EDzJWr6BCg0GkouaDd8.crl (hash: WQeHWo/ChgWtQB9rQR1U5jHna7qma8mZ5A7XBaMTpSk=)
                          2: w-nnLB0gJHLqHYNGFppYN7WkZFM.roa (hash: QK4oKJXySakBc6G1Ar7UfRyPt44Ci6G96TsVap7g1D0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:72:d7:60:e0:04:25:eb:91:2a:85:82:c9:a3:89:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f45580a636103cc95abe810a0d06928b9a0ddf
        Validity
            Not Before: Jul 27 12:00:40 2026 GMT
            Not After : Jul 28 12:00:40 2026 GMT
        Subject: CN=5ee65b46b71c494a6fb60d174049b66b5fde91dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:c4:4a:ec:21:0c:64:d1:aa:8e:e4:9e:cd:
                    52:23:33:48:d0:e8:8b:13:73:3c:fb:67:31:60:f8:
                    f9:2d:b4:c1:06:84:38:fb:ba:d3:4c:61:74:09:b8:
                    24:0e:31:b1:7c:b3:48:0f:d4:49:38:09:be:d6:91:
                    62:a9:91:a6:4e:dc:e6:6b:90:66:21:d5:ae:ed:39:
                    ed:53:c4:2f:8d:61:00:a9:c9:9a:0d:e4:81:3b:e7:
                    d4:fc:e7:0a:a0:c7:88:ac:d4:36:ab:c0:df:86:a0:
                    e0:71:26:ae:45:d6:93:cf:37:eb:21:62:b1:75:03:
                    ae:24:6b:5f:3f:f4:90:5d:d8:c5:ea:03:54:3c:cf:
                    18:71:d5:3b:13:ed:c9:db:ca:b0:97:ec:c3:d9:3f:
                    99:cc:9a:b4:3b:1e:da:cf:1e:7b:32:83:50:ab:19:
                    d6:6b:94:0e:d7:0d:ba:8e:63:95:3b:bb:6b:fd:a3:
                    1c:9f:78:82:bb:a4:6b:46:9c:1a:b2:75:cd:8c:cb:
                    a8:de:ef:08:34:c1:7c:a4:e4:a0:ef:dc:f9:37:d2:
                    14:eb:a5:fc:31:62:4c:84:10:47:0c:bd:35:f0:08:
                    a9:c8:ef:b7:74:ab:4e:07:0e:bb:ce:c2:7d:30:ce:
                    bd:6d:c9:74:9b:c9:f8:d6:0b:b9:2b:78:17:a6:84:
                    0b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E6:5B:46:B7:1C:49:4A:6F:B6:0D:17:40:49:B6:6B:5F:DE:91:DC
            X509v3 Authority Key Identifier:
                keyid:26:F4:55:80:A6:36:10:3C:C9:5A:BE:81:0A:0D:06:92:8B:9A:0D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ea:eb:ec:78:13:d6:72:9b:3d:b9:74:35:b1:ad:44:8c:b2:
         9c:da:e3:90:f1:0c:a4:8a:95:bf:b8:67:a8:40:89:68:87:ea:
         0f:07:be:50:45:1d:d4:84:84:a6:38:a8:7a:14:95:c1:5f:fb:
         ec:13:fc:6b:95:40:c1:7e:d6:99:b0:81:f5:a6:be:ce:16:12:
         d6:08:71:99:9a:a4:f9:f8:e2:b9:d5:ef:ed:fb:e6:3e:f0:66:
         a4:ce:1a:1d:1d:80:22:58:38:8b:50:b1:1a:9a:6e:23:89:7c:
         66:4c:98:8e:87:29:5d:1d:8d:e5:d1:ba:5b:ad:0e:6f:ee:b3:
         21:65:94:a3:b9:7a:e3:ee:5a:d2:66:b2:69:ef:8c:28:1e:ed:
         4a:98:65:1a:7b:f5:5f:16:24:fc:ec:ed:c7:60:74:5c:0c:85:
         24:21:ff:15:13:c7:02:61:a7:ad:26:1f:67:68:61:8a:5e:38:
         39:84:d2:7e:50:eb:66:a7:f6:90:e3:45:12:c5:6e:f9:d1:86:
         2b:70:5b:ba:e1:d6:7a:cd:d7:f4:e2:ec:3c:e7:63:6e:62:c7:
         aa:c0:fa:d1:44:eb:6a:3c:a1:32:89:c3:7c:72:b9:ad:d2:49:
         0e:d9:04:25:8e:c6:8c:d8:c3:5b:4b:97:a3:52:2d:b7:01:5a:
         c8:a6:d9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:49:35 2026 by rpki-client