Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
File:                     jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft (raw, json)
Hash identifier:          131aWzUKQe9oqcv13etBgiRCDNehmpF6PBjOeNu9YwA=
Subject key identifier:   E4:97:81:35:41:51:37:68:F2:97:74:C2:E9:11:EC:07:09:41:95:85
Authority key identifier: 8C:2B:C6:8C:6B:18:01:DC:43:03:3F:76:FC:A7:35:C7:D8:46:79:E3
Certificate issuer:       /CN=8c2bc68c6b1801dc43033f76fca735c7d84679e3
Certificate serial:       019F9FCCD7A106D000176F42DF3BCCB4F97A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
Manifest number:          3B
Signing time:             Sun 26 Jul 2026 19:00:29 +0000
Manifest this update:     Sun 26 Jul 2026 19:00:29 +0000
Manifest next update:     Mon 27 Jul 2026 19:00:29 +0000
Files and hashes:         1: Tj-2zHDfL3Pm8wXS0UwNWI0Hm20.roa (hash: rYP1Gh9xmcWC06XPLj4CF87qroyF6GWHDQDHGo84ucQ=)
                          2: jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl (hash: KRyD9huobULJamSh61yru7Mk5i9xVZFhu2Q+KfsTpgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cc:d7:a1:06:d0:00:17:6f:42:df:3b:cc:b4:f9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c2bc68c6b1801dc43033f76fca735c7d84679e3
        Validity
            Not Before: Jul 26 19:00:29 2026 GMT
            Not After : Jul 27 19:00:29 2026 GMT
        Subject: CN=e497813541513768f29774c2e911ec0709419585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:32:e0:2d:34:b5:48:69:48:45:4d:3f:33:63:
                    79:e9:9b:8c:1b:d4:4d:75:49:43:80:5e:35:eb:69:
                    2e:99:f5:29:dd:20:ee:c7:c0:8d:21:ec:b5:a1:67:
                    70:7f:cb:64:5c:64:98:a8:89:52:86:b4:91:d4:cb:
                    51:52:75:c4:fd:24:aa:16:06:0e:75:1f:91:9e:d4:
                    3f:53:03:0b:ab:cb:59:f6:8e:4e:76:20:fb:41:f1:
                    2d:51:66:e7:b2:a3:c5:55:96:55:15:1f:3c:0f:f0:
                    aa:32:97:56:d8:f2:1d:f0:b2:e7:fe:eb:6e:69:32:
                    9e:7e:28:c2:81:aa:a0:13:4c:2a:4d:38:c1:a4:67:
                    73:f2:1f:49:63:d9:83:b4:e9:f2:12:e8:78:4b:e1:
                    f1:6b:da:d5:22:ea:8f:12:84:e5:c2:59:99:d0:a0:
                    69:79:94:f6:0f:c9:4d:82:8a:2d:d4:2a:9e:7f:60:
                    ef:70:8e:31:ce:45:d8:1d:02:e7:c8:de:fa:9c:58:
                    cf:ea:e1:46:38:9e:9a:25:4a:02:53:d6:96:8c:ae:
                    0f:db:af:f1:1b:f1:8e:bc:f7:53:29:bb:e4:8a:04:
                    b5:16:43:9c:83:59:0d:a7:3b:57:21:2f:98:15:21:
                    26:c8:18:54:11:bd:df:e9:4a:99:b4:52:47:e4:57:
                    b1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:97:81:35:41:51:37:68:F2:97:74:C2:E9:11:EC:07:09:41:95:85
            X509v3 Authority Key Identifier:
                keyid:8C:2B:C6:8C:6B:18:01:DC:43:03:3F:76:FC:A7:35:C7:D8:46:79:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d9:02:55:82:03:b3:52:b6:0d:36:53:68:3b:ef:4f:32:10:
         50:0f:ae:df:d9:29:b5:9b:0d:2b:32:45:c2:50:4c:78:7e:2d:
         fc:92:4a:43:29:4e:39:8b:57:aa:8e:c6:10:07:27:d0:c2:b6:
         e3:d7:91:21:15:39:67:aa:2a:7a:c8:6c:aa:04:e2:b0:6a:23:
         2f:1c:60:5d:b2:51:92:47:83:56:f3:9e:9f:44:c7:17:0a:bf:
         c3:a6:3e:aa:c8:44:79:54:36:4d:8c:11:98:59:94:2e:ac:7a:
         5d:6f:82:a4:fe:94:74:08:9b:de:e1:c5:33:5c:4f:91:3b:ce:
         f9:d5:56:30:75:f8:5a:bd:43:5c:fb:7c:7e:46:5f:d7:c4:ba:
         b1:6a:01:47:8a:a0:dd:15:22:21:e2:8e:7c:8d:37:70:b0:94:
         ea:d4:7a:3a:dc:6e:fc:6a:1a:f7:30:a3:91:cd:b3:d4:1f:3e:
         9c:d4:64:ff:45:c8:b6:8f:49:95:18:d0:5f:c3:73:58:7b:48:
         5d:77:5c:c2:f3:28:ff:0b:9c:98:00:2a:0f:73:cb:c4:b9:1a:
         24:c0:06:46:b7:27:78:2f:3c:32:78:23:f1:ac:11:6a:51:88:
         ee:b6:2f:5c:e2:c0:1f:b7:4e:63:6a:2c:4f:49:b0:23:af:21:
         86:cf:68:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fzNehBtAAF29C3zvMtPl6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMmJjNjhjNmIxODAxZGM0MzAzM2Y3NmZjYTczNWM3ZDg0
Njc5ZTMwHhcNMjYwNzI2MTkwMDI5WhcNMjYwNzI3MTkwMDI5WjAzMTEwLwYDVQQD
EyhlNDk3ODEzNTQxNTEzNzY4ZjI5Nzc0YzJlOTExZWMwNzA5NDE5NTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijLgLTS1SGlIRU0/M2N56ZuMG9RN
dUlDgF4162kumfUp3SDux8CNIey1oWdwf8tkXGSYqIlShrSR1MtRUnXE/SSqFgYO
dR+RntQ/UwMLq8tZ9o5OdiD7QfEtUWbnsqPFVZZVFR88D/CqMpdW2PId8LLn/utu
aTKefijCgaqgE0wqTTjBpGdz8h9JY9mDtOnyEuh4S+Hxa9rVIuqPEoTlwlmZ0KBp
eZT2D8lNgoot1Cqef2DvcI4xzkXYHQLnyN76nFjP6uFGOJ6aJUoCU9aWjK4P26/x
G/GOvPdTKbvkigS1FkOcg1kNpztXIS+YFSEmyBhUEb3f6UqZtFJH5FexUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSXgTVBUTdo8pd0wukR7AcJQZWFMB8GA1UdIwQY
MBaAFIwrxoxrGAHcQwM/dvynNcfYRnnjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakN2R2pHc1lBZHhEQXo5Ml9LYzF4OWhHZWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wODVhYzYtZTAyNi00MTA2LTg2MjIt
YmI5OWNkMjhhMDAzLzEvakN2R2pHc1lBZHhEQXo5Ml9LYzF4OWhHZWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wODVhYzYtZTAyNi00MTA2LTg2MjItYmI5OWNkMjhhMDAz
LzEvakN2R2pHc1lBZHhEQXo5Ml9LYzF4OWhHZWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNkCVYID
s1K2DTZTaDvvTzIQUA+u39kptZsNKzJFwlBMeH4t/JJKQylOOYtXqo7GEAcn0MK2
49eRIRU5Z6oqeshsqgTisGojLxxgXbJRkkeDVvOen0THFwq/w6Y+qshEeVQ2TYwR
mFmULqx6XW+CpP6UdAib3uHFM1xPkTvO+dVWMHX4Wr1DXPt8fkZf18S6sWoBR4qg
3RUiIeKOfI03cLCU6tR6Otxu/Goa9zCjkc2z1B8+nNRk/0XIto9JlRjQX8NzWHtI
XXdcwvMo/wucmAAqD3PLxLkaJMAGRrcneC88Mngj8awRalGI7rYvXOLAH7dOY2os
T0mwI68hhs9oig==
-----END CERTIFICATE-----
Generated at Mon Jul 27 03:06:23 2026 by rpki-client