Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
File:                     JwKaNvwMyi4KjQRfAi38gxpRcwg.mft (raw, json)
Hash identifier:          moF5rEijurHSHcguAFR+Gexjqd/F20kixm0tv1XxYuM=
Subject key identifier:   2E:91:53:25:35:98:00:11:F6:E6:D3:B2:6D:99:F8:D7:AE:E9:54:7D
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Certificate issuer:       /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial:       019F0E51EED89DB6E647114AB0FC38C1FE05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
Manifest number:          18CB
Signing time:             Sun 28 Jun 2026 13:01:18 +0000
Manifest this update:     Sun 28 Jun 2026 13:01:18 +0000
Manifest next update:     Mon 29 Jun 2026 13:01:18 +0000
Files and hashes:         1: JwKaNvwMyi4KjQRfAi38gxpRcwg.crl (hash: gl20DWcjKN3fgyYNOHBs5Q+j1lCDXVnPhkq9ARX4mLs=)
                          2: OLzTLKZWnHaNaZZXNLTfX_9MFKk.roa (hash: JRtB2SbXcPB1CPRDQRS38H4AmEHg2R09GikXd7+2l5U=)
                          3: aZei7dPraMpoyMe9a8A85iz9U9k.roa (hash: KtkMVG0TF4vgfuc7Eg25bY2/F+3g8sFzTM72NzjE2qo=)
                          4: nYOMmq9r2jYKxOZ_vMZVsG2YoIY.roa (hash: 73YqhTgSFV2KW1q+D3iw3fdx9BOAWsHiW6Qx96ipVDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0e:51:ee:d8:9d:b6:e6:47:11:4a:b0:fc:38:c1:fe:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
        Validity
            Not Before: Jun 28 13:01:18 2026 GMT
            Not After : Jun 29 13:01:18 2026 GMT
        Subject: CN=2e91532535980011f6e6d3b26d99f8d7aee9547d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:d5:d3:6e:61:22:c6:e3:30:a8:85:5e:25:
                    a6:40:df:a8:9b:b4:d4:9c:7d:cf:0c:b2:6b:2a:86:
                    a8:54:4e:d3:14:f0:d7:47:f4:d1:17:90:b4:1f:b4:
                    8b:53:68:16:75:01:0b:b6:43:f4:ab:da:8c:a2:4f:
                    55:90:70:ce:b7:7d:f4:43:79:c9:ae:af:c7:2b:a3:
                    15:c1:33:26:09:d6:9d:d9:48:c4:68:18:e2:7b:25:
                    bc:84:8a:98:c5:6a:ca:19:cc:89:c0:e1:dc:fb:0e:
                    c4:99:ee:a3:56:dc:90:0a:66:12:54:d5:0b:be:db:
                    66:76:de:b6:52:c1:49:01:be:cd:c4:d1:9e:ae:e7:
                    90:0b:1d:4c:3a:4f:22:86:f0:47:2b:5c:c1:44:18:
                    33:a2:02:85:83:c4:e9:c4:a4:3f:b1:c2:b7:e8:31:
                    95:99:c4:d1:e1:e8:52:18:f5:a0:49:7d:46:01:a7:
                    ea:98:63:c2:6d:dc:29:9b:25:11:a7:77:5b:13:32:
                    a8:88:6b:a5:62:1e:eb:22:43:0a:7c:93:b4:96:fe:
                    05:81:c4:f0:b6:c9:f1:e7:3f:ad:4d:15:2b:f4:c6:
                    6e:f2:a9:ec:64:7a:98:7c:b0:12:14:79:0d:ef:61:
                    1b:a4:7e:fc:77:8e:2b:db:ec:2e:54:7e:2f:8c:58:
                    90:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:91:53:25:35:98:00:11:F6:E6:D3:B2:6D:99:F8:D7:AE:E9:54:7D
            X509v3 Authority Key Identifier:
                keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:6d:2c:43:29:e3:3f:67:68:5c:50:b9:98:38:b0:f2:45:1e:
         70:5f:6e:82:be:2d:ca:59:5d:84:bd:45:91:5e:ee:81:93:06:
         f8:50:34:e7:f8:44:76:10:8f:3b:86:d9:49:99:b3:49:05:0a:
         a3:9b:3f:82:60:67:9e:65:87:34:44:3d:d2:25:3d:98:13:55:
         66:a1:c4:ee:50:63:e4:5b:11:14:c7:44:ce:3d:a9:a2:c1:ff:
         a5:6e:b3:61:64:46:89:75:8b:2a:61:ac:0e:e9:97:19:77:3d:
         ce:36:88:c3:59:15:f2:87:68:a0:b4:69:72:79:5e:72:71:87:
         32:9c:ff:d1:b2:81:d7:da:38:0a:fd:0f:93:26:6f:14:cb:f0:
         a6:8e:e9:b8:0f:09:13:b3:7f:c1:16:3b:bb:64:b3:c4:26:df:
         8c:9b:b2:6a:a7:88:31:3b:4e:45:83:54:75:4f:59:b2:f2:fb:
         33:87:d1:6a:9f:27:b7:ca:b8:69:a9:01:96:12:e4:66:c8:e0:
         78:0a:2a:32:28:56:f5:a8:f0:43:60:de:30:6f:59:01:30:33:
         c8:73:f8:9b:ac:41:b1:8d:04:53:3e:9b:7a:01:f3:8a:87:04:
         af:fc:2b:b0:24:4f:61:aa:bc:69:fa:66:5b:19:33:5e:5f:96:
         2c:92:3c:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8OUe7YnbbmRxFKsPw4wf4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MDI5YTM2ZmMwY2NhMmUwYThkMDQ1ZjAyMmRmYzgzMWE1
MTczMDgwHhcNMjYwNjI4MTMwMTE4WhcNMjYwNjI5MTMwMTE4WjAzMTEwLwYDVQQD
EygyZTkxNTMyNTM1OTgwMDExZjZlNmQzYjI2ZDk5ZjhkN2FlZTk1NDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz7V025hIsbjMKiFXiWmQN+om7TU
nH3PDLJrKoaoVE7TFPDXR/TRF5C0H7SLU2gWdQELtkP0q9qMok9VkHDOt330Q3nJ
rq/HK6MVwTMmCdad2UjEaBjieyW8hIqYxWrKGcyJwOHc+w7Eme6jVtyQCmYSVNUL
vttmdt62UsFJAb7NxNGerueQCx1MOk8ihvBHK1zBRBgzogKFg8TpxKQ/scK36DGV
mcTR4ehSGPWgSX1GAafqmGPCbdwpmyURp3dbEzKoiGulYh7rIkMKfJO0lv4FgcTw
tsnx5z+tTRUr9MZu8qnsZHqYfLASFHkN72EbpH78d44r2+wuVH4vjFiQTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6RUyU1mAAR9ubTsm2Z+Neu6VR9MB8GA1UdIwQY
MBaAFCcCmjb8DMouCo0EXwIt/IMaUXMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTct
NTBkMGE1MzIzNjQxLzEvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTctNTBkMGE1MzIzNjQx
LzEvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOW0sQynj
P2doXFC5mDiw8kUecF9ugr4tylldhL1FkV7ugZMG+FA05/hEdhCPO4bZSZmzSQUK
o5s/gmBnnmWHNEQ90iU9mBNVZqHE7lBj5FsRFMdEzj2posH/pW6zYWRGiXWLKmGs
DumXGXc9zjaIw1kV8odooLRpcnlecnGHMpz/0bKB19o4Cv0PkyZvFMvwpo7puA8J
E7N/wRY7u2SzxCbfjJuyaqeIMTtORYNUdU9ZsvL7M4fRap8nt8q4aakBlhLkZsjg
eAoqMihW9ajwQ2DeMG9ZATAzyHP4m6xBsY0EUz6begHziocEr/wrsCRPYaq8afpm
WxkzXl+WLJI8eg==
-----END CERTIFICATE-----
Generated at Sun Jun 28 23:14:59 2026 by rpki-client