Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft
File:                     mJre8bGpea83LsZ1WgtUIaBncbs.mft (raw, json)
Hash identifier:          sfNVzwz8TOuKVVxx93kKQKutRaT4q/C5wYXSHck5vTE=
Subject key identifier:   2B:E5:00:87:9D:FC:67:AD:24:0B:E3:F2:DB:5D:9F:0B:C4:B4:FC:EC
Authority key identifier: 98:9A:DE:F1:B1:A9:79:AF:37:2E:C6:75:5A:0B:54:21:A0:67:71:BB
Certificate issuer:       /CN=989adef1b1a979af372ec6755a0b5421a06771bb
Certificate serial:       019F13E6C2083F09B32358A083834EC207A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJre8bGpea83LsZ1WgtUIaBncbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft
Manifest number:          0197
Signing time:             Mon 29 Jun 2026 15:01:57 +0000
Manifest this update:     Mon 29 Jun 2026 15:01:57 +0000
Manifest next update:     Tue 30 Jun 2026 15:01:57 +0000
Files and hashes:         1: mJre8bGpea83LsZ1WgtUIaBncbs.crl (hash: vQyQ5fIwHmIb0m4pHvaZC6Huq2bSxquoepyM+Plq0rs=)
                          2: tLe7pLUB1FbsxJodBjiaylvPWqY.roa (hash: iCcIo0MXZAGo4QKL7jZTOf07lWCaTF9D6uBBNDm3oqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJre8bGpea83LsZ1WgtUIaBncbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:e6:c2:08:3f:09:b3:23:58:a0:83:83:4e:c2:07:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989adef1b1a979af372ec6755a0b5421a06771bb
        Validity
            Not Before: Jun 29 15:01:57 2026 GMT
            Not After : Jun 30 15:01:57 2026 GMT
        Subject: CN=2be500879dfc67ad240be3f2db5d9f0bc4b4fcec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:21:c1:28:0e:02:8c:11:b7:35:1d:7b:80:
                    ae:6d:98:c6:7b:d6:59:8e:2e:ce:bf:19:6f:3b:bb:
                    d4:b7:9b:77:4f:d8:15:b2:96:2d:27:d1:04:f4:f4:
                    08:3c:72:d9:25:d9:c4:25:5e:a8:76:1e:42:79:84:
                    f1:29:55:53:c5:b9:aa:47:7a:53:1b:26:07:40:15:
                    89:c0:f2:f6:4f:90:84:da:41:58:80:df:36:5e:74:
                    bd:60:33:29:75:df:b1:b9:b9:5d:11:cb:2e:62:8a:
                    30:9a:8c:d5:31:7b:92:43:b6:42:51:6f:94:bd:8c:
                    6c:b2:46:b5:90:ef:e9:d9:0d:61:ba:b2:93:e6:8e:
                    16:cf:ad:2d:a4:da:ec:60:77:9b:36:3c:4f:9d:63:
                    d8:d4:e7:42:c6:68:83:c1:2e:ed:86:b2:64:d8:0b:
                    51:13:7f:98:6f:64:e5:da:37:37:e5:b3:80:f4:28:
                    2f:bc:d2:57:f0:37:fb:51:84:a2:40:b8:47:89:b1:
                    b6:fe:11:db:98:7f:4a:6a:60:c6:70:29:3c:ed:9c:
                    49:47:80:76:0a:87:9d:c2:fe:81:4b:44:58:36:46:
                    48:01:a4:fd:64:60:2b:e6:56:8f:5e:0c:ea:e1:1a:
                    d0:bb:38:0b:fa:0c:68:95:96:f7:7f:55:a6:ee:b4:
                    71:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E5:00:87:9D:FC:67:AD:24:0B:E3:F2:DB:5D:9F:0B:C4:B4:FC:EC
            X509v3 Authority Key Identifier:
                keyid:98:9A:DE:F1:B1:A9:79:AF:37:2E:C6:75:5A:0B:54:21:A0:67:71:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJre8bGpea83LsZ1WgtUIaBncbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:67:bc:cd:7a:3c:bd:8a:44:25:d3:b1:d0:fa:29:19:c4:ee:
         9f:1e:02:ea:7e:98:c9:0c:29:cc:b7:45:25:c8:47:a0:e4:a9:
         e0:e7:6f:04:6e:de:24:cd:62:cb:ef:a7:ef:d8:6a:30:a0:bf:
         ec:99:95:b3:32:a3:50:81:30:7c:86:89:8b:5f:2b:a5:ce:e9:
         42:b8:e3:60:a5:42:74:c5:a3:e1:9c:9c:77:06:f7:ae:f1:86:
         c5:5a:e3:ce:d3:fa:67:be:5a:b3:23:93:12:49:61:03:03:5c:
         7d:46:3e:69:8a:39:2a:14:37:27:7a:64:d8:8e:93:e2:2f:f9:
         ee:db:83:12:dc:fa:5a:b5:7e:d0:a0:33:a8:b6:ec:4f:a0:c4:
         42:ff:55:3b:4b:4c:d3:1e:ca:9b:99:66:f6:6d:6b:63:99:09:
         22:ca:3b:6a:63:be:7e:46:f5:dc:fa:5b:09:36:a4:64:14:6d:
         cb:a3:10:a6:3a:57:fe:22:14:12:92:5d:d9:1b:e5:26:e7:43:
         00:4c:87:d9:d2:ba:20:24:74:1d:a7:82:3c:22:c9:93:a9:b9:
         03:88:42:0e:78:a8:03:62:8b:1d:d5:60:5a:1e:11:09:71:10:
         52:22:b9:8f:28:fe:f3:55:e6:2b:05:49:88:90:71:f8:02:a3:
         2c:5f:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 18:33:17 2026 by rpki-client