Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
File:                     JygMxTRRbRwdnqAk6q-9Af3GjJc.mft (raw, json)
Hash identifier:          g9VCCAdJyzgO7aoJwSfXI42SYwsHdU22wnlp4Oxbfk0=
Subject key identifier:   C7:BA:0C:59:07:1A:49:EC:60:32:4D:50:09:91:40:A8:3F:EC:7C:FE
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Certificate issuer:       /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial:       019EB845ACA6477EEABD9CE352D137EE4B3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
Manifest number:          1959
Signing time:             Thu 11 Jun 2026 20:00:34 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:34 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:34 +0000
Files and hashes:         1: JygMxTRRbRwdnqAk6q-9Af3GjJc.crl (hash: 0RSpdJdHbNWDIHvZ7+PefzlSp5eSHQx6Mers1RL3Ekk=)
                          2: Zq2cQmDy7q3A5_xdFvl7YbbhwIc.roa (hash: PgMe36er/jf5wuEzDom6ucc6sQi96pKMuPFdurESUyQ=)
                          3: k8z_313Hx8hvd4ufZZCaGYZBw0Y.roa (hash: k20SFgFV65J9lEt18uaFg+XOBiT1Sd/tRFmAU9F/loo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:ac:a6:47:7e:ea:bd:9c:e3:52:d1:37:ee:4b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
        Validity
            Not Before: Jun 11 20:00:34 2026 GMT
            Not After : Jun 12 20:00:34 2026 GMT
        Subject: CN=c7ba0c59071a49ec60324d50099140a83fec7cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4f:bf:65:86:8e:24:2b:b1:24:64:42:10:eb:
                    2d:78:7f:23:59:43:cd:e9:7f:a3:0d:4a:0a:85:65:
                    d1:44:68:65:a6:86:e5:b7:59:24:ef:1c:09:ca:a9:
                    c0:42:4f:73:dc:70:67:b8:0a:c7:bd:cc:c9:66:10:
                    8b:5e:3b:a3:be:c9:38:3f:7a:73:b7:20:3e:49:c2:
                    70:ab:b6:85:70:c9:80:57:1c:90:1c:14:0d:b8:1a:
                    7e:6e:07:ff:e5:17:61:20:d5:90:7a:81:3f:82:5c:
                    5b:c6:e9:cc:3c:3b:f7:e8:89:9e:2c:bd:ec:76:ab:
                    b4:f7:ea:75:ea:6e:a1:21:8e:b9:71:4f:12:98:d5:
                    de:19:f7:a5:11:8d:a3:cb:60:6b:09:f6:f7:57:27:
                    e8:f1:07:aa:d7:c0:85:ce:f8:ad:b2:e6:4b:7d:dd:
                    8f:20:a5:a6:b5:16:85:93:c4:27:a7:64:19:65:f3:
                    f7:fe:7e:91:3f:78:34:8f:14:69:63:6d:6c:65:58:
                    16:89:b2:2d:11:23:9c:e4:1b:70:c3:9b:64:6e:3e:
                    08:c0:2a:00:f1:6e:9b:fa:70:88:11:b3:9f:fb:c8:
                    38:20:87:17:78:7c:04:6c:44:32:ef:8a:6d:a5:95:
                    c8:2f:02:95:bb:cc:1b:f2:36:96:30:7a:80:41:73:
                    20:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BA:0C:59:07:1A:49:EC:60:32:4D:50:09:91:40:A8:3F:EC:7C:FE
            X509v3 Authority Key Identifier:
                keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5f:c6:c4:4b:2f:bd:98:a3:11:12:99:10:d8:cf:60:7c:87:
         eb:6f:a3:60:f5:a0:70:52:37:f5:03:f5:40:4a:16:75:28:06:
         a4:70:d7:8c:7d:0e:06:b1:f4:79:8b:d8:56:5f:4e:16:9a:6e:
         6c:a9:25:3a:0c:cd:6f:76:18:75:b9:53:e9:6a:88:e9:bf:03:
         33:a0:0e:80:b5:48:e0:4a:aa:e3:0c:fd:39:dd:93:18:b8:5a:
         dd:ed:e7:1f:4b:9a:36:25:05:c6:0e:76:83:61:e8:41:80:27:
         17:5e:3e:6a:d5:1b:44:63:4b:59:23:37:04:b0:13:7d:7c:a4:
         b0:45:fa:4e:0d:7f:dd:35:bf:5c:2c:90:ab:90:2a:65:10:3a:
         ce:f5:fa:c8:95:c0:60:fd:c2:dd:2c:f7:75:6f:25:fe:72:7b:
         1b:83:bb:7a:c9:d9:47:fa:ee:35:d4:82:48:1a:40:37:c6:16:
         7e:62:b6:5c:e8:75:ae:c4:d5:38:6f:48:b9:46:1c:a2:d9:23:
         a9:04:61:9d:4e:0c:cd:01:a6:69:3d:76:c3:49:d7:7b:44:6a:
         2a:8c:f0:3e:61:96:d2:08:fe:70:9e:15:20:08:46:b7:1b:77:
         9d:c0:c6:58:03:bb:87:cd:e7:5b:37:dd:40:09:2d:ff:c9:d5:
         08:97:2a:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64RaymR37qvZzjUtE37ks/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MjgwY2M1MzQ1MTZkMWMxZDllYTAyNGVhYWZiZDAxZmRj
NjhjOTcwHhcNMjYwNjExMjAwMDM0WhcNMjYwNjEyMjAwMDM0WjAzMTEwLwYDVQQD
EyhjN2JhMGM1OTA3MWE0OWVjNjAzMjRkNTAwOTkxNDBhODNmZWM3Y2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU+/ZYaOJCuxJGRCEOsteH8jWUPN
6X+jDUoKhWXRRGhlpoblt1kk7xwJyqnAQk9z3HBnuArHvczJZhCLXjujvsk4P3pz
tyA+ScJwq7aFcMmAVxyQHBQNuBp+bgf/5RdhINWQeoE/glxbxunMPDv36ImeLL3s
dqu09+p16m6hIY65cU8SmNXeGfelEY2jy2BrCfb3Vyfo8Qeq18CFzvitsuZLfd2P
IKWmtRaFk8Qnp2QZZfP3/n6RP3g0jxRpY21sZVgWibItESOc5Btww5tkbj4IwCoA
8W6b+nCIEbOf+8g4IIcXeHwEbEQy74ptpZXILwKVu8wb8jaWMHqAQXMgbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMe6DFkHGknsYDJNUAmRQKg/7Hz+MB8GA1UdIwQY
MBaAFCcoDMU0UW0cHZ6gJOqvvQH9xoyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wY2M2YjUtNTQ3Ny00OTBhLWEyOTUt
MTViNzliMDI5NDNlLzEvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wY2M2YjUtNTQ3Ny00OTBhLWEyOTUtMTViNzliMDI5NDNl
LzEvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACF/GxEsv
vZijERKZENjPYHyH62+jYPWgcFI39QP1QEoWdSgGpHDXjH0OBrH0eYvYVl9OFppu
bKklOgzNb3YYdblT6WqI6b8DM6AOgLVI4Eqq4wz9Od2TGLha3e3nH0uaNiUFxg52
g2HoQYAnF14+atUbRGNLWSM3BLATfXyksEX6Tg1/3TW/XCyQq5AqZRA6zvX6yJXA
YP3C3Sz3dW8l/nJ7G4O7esnZR/ruNdSCSBpAN8YWfmK2XOh1rsTVOG9IuUYcotkj
qQRhnU4MzQGmaT12w0nXe0RqKozwPmGW0gj+cJ4VIAhGtxt3ncDGWAO7h83nWzfd
QAkt/8nVCJcqqg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:18:04 2026 by rpki-client