Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
File:                     JiNBtDPh-Py3ljItL9kmQJOW560.mft (raw, json)
Hash identifier:          UYnfGUGZOGlr4xW66Hv15l4vLZOlLoDUpb6/jX5UGWo=
Subject key identifier:   09:28:D7:D0:50:3E:26:B4:05:A5:3A:30:46:D1:1B:D6:D8:C0:A4:CB
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Certificate issuer:       /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial:       019FA33C47040B4BF2982B24060FB2B549AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
Manifest number:          1365
Signing time:             Mon 27 Jul 2026 11:01:04 +0000
Manifest this update:     Mon 27 Jul 2026 11:01:04 +0000
Manifest next update:     Tue 28 Jul 2026 11:01:04 +0000
Files and hashes:         1: EDI4hBfvhmhntt7hYvBIEgLQOJA.roa (hash: 2bxpLwvyVSXEk8/vuBLJpeiNYeHTrUFQCELrB9BRYW4=)
                          2: Fqol7Ql1lTnQ1pbIdCZcxbCF39k.roa (hash: +R5PirogobghNFmFq7p4/kohSnTc74mKrNVHXJGdCQg=)
                          3: JiNBtDPh-Py3ljItL9kmQJOW560.crl (hash: 1d6nBZNjeqVqlm61GzsTEKwc77AgTpHjDRxbFP7wmsU=)
                          4: tbK1AbVereS_NngI45L11SaPIkg.roa (hash: pGphgE8cOkuzyKQJOlm5N3l9aQFRIzUTSTIpMJ4LzH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 11:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:3c:47:04:0b:4b:f2:98:2b:24:06:0f:b2:b5:49:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
        Validity
            Not Before: Jul 27 11:01:04 2026 GMT
            Not After : Jul 28 11:01:04 2026 GMT
        Subject: CN=0928d7d0503e26b405a53a3046d11bd6d8c0a4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:17:93:53:ad:8f:d6:80:6b:7e:c5:f2:f6:
                    4e:c8:6f:3a:fa:de:d2:af:c0:ed:28:d0:d1:af:cc:
                    f1:69:5e:1c:79:1b:ce:b6:d3:60:55:ea:a3:ca:b8:
                    8d:91:09:b4:f3:b8:53:85:cc:2a:e9:66:c9:1c:ef:
                    24:63:83:1c:fe:7b:0a:da:fd:50:12:47:d1:eb:aa:
                    a0:86:ca:33:4b:1b:d0:7c:c3:22:a2:c5:07:fe:7d:
                    1d:05:a6:f6:7f:47:0e:4d:c0:b6:83:cd:60:a4:f9:
                    6b:9b:41:2b:79:60:a3:aa:81:f7:fb:cd:a5:50:9b:
                    a8:2b:29:86:d4:df:c7:01:99:98:bf:21:a6:7d:8e:
                    75:30:36:43:d4:4a:e8:09:ee:f4:a9:d3:45:d0:9a:
                    0b:b9:3f:ac:07:e9:7f:f9:fa:86:34:c1:7a:66:d3:
                    fe:5f:a7:cc:d6:c4:59:dd:e2:07:34:1f:c4:4e:70:
                    8f:4e:9e:31:fd:c3:42:53:5d:58:c6:54:3e:af:25:
                    54:31:b8:b9:5d:34:e1:31:37:9e:0e:00:fd:b5:33:
                    02:ae:d0:1c:0a:72:25:aa:8c:c9:80:65:9d:14:f3:
                    d2:4d:4c:b8:84:14:58:10:58:8f:87:0b:ca:ec:95:
                    cc:a9:6f:1e:c5:68:79:37:db:09:1a:be:d6:9e:ae:
                    51:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:28:D7:D0:50:3E:26:B4:05:A5:3A:30:46:D1:1B:D6:D8:C0:A4:CB
            X509v3 Authority Key Identifier:
                keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d6:d3:4b:28:01:b7:bb:65:85:b2:a3:d6:a3:84:3d:c1:2c:
         5b:f3:1f:63:0f:91:18:ed:7f:6e:61:38:ce:c0:64:9b:05:43:
         01:00:d3:36:0b:5c:7f:05:56:fd:0c:09:de:b6:c6:52:59:51:
         85:7a:e6:0b:d8:94:20:d2:6c:ad:32:1a:a2:87:59:98:39:93:
         9a:71:cc:6b:54:93:7e:b8:46:80:bc:ce:17:30:b6:da:c5:2c:
         e3:71:ac:aa:ee:8a:a1:ed:83:0e:71:56:48:45:c9:c4:96:13:
         21:64:fc:ca:8f:10:73:71:dd:51:a9:59:a1:c6:08:78:31:29:
         5c:0d:77:12:ad:a4:b8:5d:7c:9d:90:52:be:ec:02:1e:52:e4:
         e6:56:fc:6e:19:f7:f1:69:c3:9f:18:00:fc:8b:17:7d:db:6c:
         c7:60:f3:37:7b:ec:b1:cf:28:7e:a3:bb:9c:9e:a4:2a:11:e9:
         fc:1c:21:a3:18:af:67:b8:74:41:64:d2:0d:ba:7e:9d:24:cd:
         16:2a:c9:7c:74:9e:ef:2c:e9:86:e7:9a:be:1f:b0:a0:96:9d:
         a2:c7:37:0c:41:1f:ae:c1:ae:80:48:fc:ae:44:3a:0d:20:8f:
         ed:c5:b1:fa:c3:3b:cc:1c:ef:31:42:92:9f:e6:c0:c0:19:4b:
         f6:59:7c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 21:03:31 2026 by rpki-client