Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
File:                     J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json)
Hash identifier:          0gLexFHkWEoO03nH7nFHXJeBL6cXo0bYkB/AZ/Y70Gs=
Subject key identifier:   BA:4C:FF:1D:ED:B0:3F:A6:2A:83:D0:12:3B:74:06:B9:3D:8E:50:2F
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Certificate issuer:       /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial:       019F1A8D191981FF76EFBD253BBA7581D304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
Manifest number:          0E65
Signing time:             Tue 30 Jun 2026 22:01:22 +0000
Manifest this update:     Tue 30 Jun 2026 22:01:22 +0000
Manifest next update:     Wed 01 Jul 2026 22:01:22 +0000
Files and hashes:         1: 4N3tODFK8nz9NNMiv7CviryuDAs.roa (hash: X3aNYoDshM8q/qhUCoVbmt8vv1qoQt4+Ks1Zknci3aA=)
                          2: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: 9ECiEqHuuNGiJvm+UkeGomn3k6BUYcez4lbjG2LxxGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:8d:19:19:81:ff:76:ef:bd:25:3b:ba:75:81:d3:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
        Validity
            Not Before: Jun 30 22:01:22 2026 GMT
            Not After : Jul  1 22:01:22 2026 GMT
        Subject: CN=ba4cff1dedb03fa62a83d0123b7406b93d8e502f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:68:fb:57:a1:0d:16:30:65:16:5a:29:6c:e9:
                    a9:4f:65:69:b8:c6:b2:ea:2b:19:8a:a6:46:7f:52:
                    08:52:66:e9:5b:6d:53:05:7b:b7:cc:11:d1:a7:8c:
                    d5:fc:54:70:86:44:41:32:37:bb:4f:46:29:f1:43:
                    cd:88:ab:97:c9:04:87:7f:f8:fe:4a:4f:21:33:ac:
                    b8:31:31:9e:99:1d:fb:35:52:80:4c:b8:5a:94:28:
                    23:33:18:80:ac:f5:81:07:89:b6:45:c6:65:b9:6a:
                    5f:61:24:36:7a:d5:33:81:6f:75:12:63:6e:64:0d:
                    0f:34:44:2a:b7:e4:8e:35:a7:1a:8e:a8:08:bf:ca:
                    c0:58:d5:c1:b2:54:37:a6:05:0b:b8:55:d5:8c:e1:
                    91:90:e1:20:ac:35:8c:a1:dd:5e:e7:ce:a1:d9:64:
                    a8:6d:ee:3a:70:f6:7e:2b:66:5e:b0:12:90:20:10:
                    c9:7e:5c:7a:15:30:f6:52:7e:73:db:c8:ed:b9:8b:
                    4a:14:5e:01:00:62:45:48:a7:3a:13:5e:50:f4:31:
                    4a:09:25:ca:91:37:37:98:a7:9f:d2:82:1e:ec:65:
                    c1:ff:68:4d:b2:75:f5:a9:7a:55:b5:40:36:ff:e5:
                    91:6d:9b:07:8e:2b:e1:c6:18:f5:07:75:f9:bf:8a:
                    d5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4C:FF:1D:ED:B0:3F:A6:2A:83:D0:12:3B:74:06:B9:3D:8E:50:2F
            X509v3 Authority Key Identifier:
                keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e2:78:49:90:d1:4b:7c:3b:e2:9d:1d:4f:82:a7:76:e5:0a:
         fc:9a:2e:d9:79:64:8b:33:3e:3c:e0:41:77:15:62:e3:fc:18:
         d8:21:fd:98:a0:cb:a1:33:e6:b3:03:2d:45:7e:a9:c8:11:d8:
         9d:2c:12:37:e3:c9:ff:82:42:ed:a6:56:0b:cd:bd:a5:dd:46:
         e6:0c:63:ac:7f:37:99:05:5a:07:36:44:f5:0b:f1:2d:20:3c:
         bd:bb:f6:3a:8e:0f:8e:34:60:c5:43:81:f3:29:17:18:b5:30:
         56:5a:7d:40:93:1f:e6:0b:98:cf:57:a4:c4:45:5c:d5:49:ff:
         29:48:fd:b5:f8:08:35:33:8f:64:be:15:9e:cb:8c:0f:ae:a7:
         83:44:3b:bb:30:66:7f:b1:d6:6c:29:76:33:41:20:e8:eb:ec:
         df:53:a7:0f:0c:0c:d8:52:ca:b9:d2:96:4c:16:79:66:0c:6f:
         0e:4b:98:0d:d0:48:16:7b:6a:2b:ec:b8:18:11:93:4e:76:9a:
         ec:93:14:74:11:6b:ee:f5:f3:b2:11:ba:84:5c:4f:59:a1:0b:
         e7:2f:ad:cb:05:a9:b3:45:73:29:cd:25:7a:a9:90:aa:26:ef:
         e4:22:08:2c:09:6c:2b:c1:54:fe:b3:5f:57:72:1e:80:83:aa:
         50:c9:36:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:39:18 2026 by rpki-client