Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
File:                     jeQsVg_CKLW7T0zwDt4t_ibGYws.mft (raw, json)
Hash identifier:          uBMpvPFUPrHsVcClSq16pL53WGRHABIY9nT/f+6ul3E=
Subject key identifier:   6A:B5:49:97:4A:BE:ED:93:E6:11:8E:57:07:F8:21:B2:3E:0D:9B:6C
Authority key identifier: 8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
Certificate issuer:       /CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Certificate serial:       019F11C051B2BA26B6D2C15BC049D4C7B4E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
Manifest number:          1A61
Signing time:             Mon 29 Jun 2026 05:00:44 +0000
Manifest this update:     Mon 29 Jun 2026 05:00:44 +0000
Manifest next update:     Tue 30 Jun 2026 05:00:44 +0000
Files and hashes:         1: SEZ6fU5AhjTcT-v2AF7aa1Lk33I.roa (hash: nyDU2awTDtLEQn8KT2rzLnNR5fVOBeEGOrOK5V7gTs8=)
                          2: YVVa8qXq8lG3mkbmd2P3XRnWZu8.roa (hash: /hcrN2c7yYYNROlrx3P8uAt7fQlO7FXIyMlqkaVFXbY=)
                          3: YW3dbYMvMGpRlXCgljvs9WEA8II.roa (hash: 0QFB4Z6/oF+6LZXj3qGwOBveMLWnuMyB/KPTEoXelQI=)
                          4: aXme4fkR3g5tq5ZfdCY7Gb9LrXk.roa (hash: fcjrdZtO5ioe8UQUXyhkgSh13a7siJM9IAyjaI0lqrI=)
                          5: jeQsVg_CKLW7T0zwDt4t_ibGYws.crl (hash: tz5gkroBNmFbB7TDlEFrrxfWvGFufYZRznvtNLNzg6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 05:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:c0:51:b2:ba:26:b6:d2:c1:5b:c0:49:d4:c7:b4:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
        Validity
            Not Before: Jun 29 05:00:44 2026 GMT
            Not After : Jun 30 05:00:44 2026 GMT
        Subject: CN=6ab549974abeed93e6118e5707f821b23e0d9b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3e:64:e0:59:90:7c:75:90:33:a2:74:0b:63:
                    3b:91:e6:9f:be:f6:f6:e1:ba:9a:82:b1:ae:0a:2c:
                    bd:28:c8:7d:e5:43:2c:a7:f5:1a:1d:1b:a7:8b:e5:
                    cc:98:93:65:99:df:8e:5e:bc:f7:32:36:1a:01:d0:
                    8b:0b:d9:0f:50:98:49:96:05:12:13:ba:5f:77:3b:
                    de:dc:e6:02:1d:a6:50:9e:6b:9f:fe:0f:14:d3:0c:
                    07:3e:c3:f6:0d:6a:e4:72:2e:ff:d5:b9:14:98:34:
                    3d:ef:ac:85:1a:32:d4:aa:b8:2d:82:5d:6a:7e:6e:
                    7e:13:a4:d0:b0:c8:ba:b6:c0:03:2f:70:da:1d:0c:
                    b6:12:91:5f:8c:86:1e:b4:7a:01:01:ea:6c:df:63:
                    fe:f5:38:06:8d:1b:eb:87:33:39:99:dd:23:d5:e2:
                    39:b1:22:cf:c7:e9:b4:11:f1:c1:12:a9:20:4e:ee:
                    00:80:a0:3a:0f:d8:00:e4:9d:ec:7e:fa:1f:b9:15:
                    dd:8b:f5:66:48:b1:b9:d3:99:44:15:62:5e:1f:f3:
                    42:bc:32:b5:38:48:66:15:a1:f5:84:52:a7:28:39:
                    aa:21:b0:ab:bc:bc:44:25:57:83:24:bc:a8:e9:57:
                    08:fe:b0:ff:be:a8:60:1a:10:01:3f:7d:44:ad:0f:
                    3d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B5:49:97:4A:BE:ED:93:E6:11:8E:57:07:F8:21:B2:3E:0D:9B:6C
            X509v3 Authority Key Identifier:
                keyid:8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3a:c7:49:0f:ea:d8:d4:2a:c7:5a:00:24:94:20:12:58:5a:
         ad:1b:96:04:6a:13:56:eb:7a:71:b0:6c:9c:15:fd:c7:d6:be:
         2f:5f:92:32:14:21:ce:84:3d:dd:dd:a9:f3:2c:51:a3:a3:1c:
         8f:5c:21:14:3e:1b:1a:aa:48:b0:a8:e3:ec:6b:b5:5b:79:03:
         52:f1:e7:9f:40:a4:94:1d:d0:c9:4e:c3:dd:e3:ae:82:22:9c:
         83:11:43:6a:a1:15:c0:d8:7a:2c:7f:25:c8:1e:77:ec:ec:4b:
         99:78:20:3c:a0:96:04:3f:7d:4d:63:e4:ed:2b:13:33:d6:39:
         12:c6:f3:a5:ea:cc:9d:96:29:f1:34:54:d3:6e:26:02:be:2e:
         c0:b4:e5:8c:dd:c2:95:62:0e:39:40:3c:07:93:3a:ff:5f:59:
         9b:f9:68:77:0d:dd:53:42:d5:e9:9a:05:57:93:78:90:ea:71:
         31:30:a9:e4:c4:dc:49:98:ee:7d:5f:d8:9b:c9:0a:c7:7c:5e:
         5b:de:88:57:0f:98:f9:9b:fb:60:2e:c0:d9:fc:cd:9c:ab:6d:
         e3:47:19:fc:6a:af:72:ad:6f:80:b9:c9:4b:9b:a0:c4:c4:bf:
         ae:f0:2b:d3:51:a3:c1:cd:51:98:4a:cd:30:72:16:ad:9a:69:
         0b:e9:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:39:58 2026 by rpki-client