Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
File:                     j7x_Fwe20LIrzYGA9Puxtj78mfk.mft (raw, json)
Hash identifier:          xKVF254CWGnCSxJZ2tZHPmx3b9iS6A1ZAC4+JzclNBo=
Subject key identifier:   67:6D:53:DE:4B:FB:51:2A:EB:64:1C:32:DD:C2:7A:01:76:D1:FC:E2
Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
Certificate issuer:       /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Certificate serial:       019E3260A3998EECEF69E03273BEA71F3FD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 20:00:54 +0000
Manifest this update:     Sat 16 May 2026 20:00:54 +0000
Manifest next update:     Sun 17 May 2026 20:00:54 +0000
Files and hashes:         1: 7OTQnzrbHyXo119EfPUpBJCKYHw.roa (hash: 2rynQETuFSP28J9DNP84gVl8Pw/3bThUsvE7hH2G5gw=)
                          2: MsTpS_9Ef3SDy2PLq6WfNUkYizQ.roa (hash: Ea2AJU7gEy/xVP6HsAboTHLHs8TQfaChyqKqx20NTwM=)
                          3: j7x_Fwe20LIrzYGA9Puxtj78mfk.crl (hash: 6w2NjoRV72BZtmeHyPMdDWmtTYvXYLiAHrjufL/XK8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:60:a3:99:8e:ec:ef:69:e0:32:73:be:a7:1f:3f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
        Validity
            Not Before: May 16 20:00:54 2026 GMT
            Not After : May 17 20:00:54 2026 GMT
        Subject: CN=676d53de4bfb512aeb641c32ddc27a0176d1fce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e1:11:f9:8d:cd:68:b3:72:6f:aa:42:51:24:
                    0c:15:1f:66:e0:f1:20:30:79:d9:30:59:34:be:ba:
                    91:2b:ea:c8:34:b5:6f:09:70:e7:a6:c0:9f:c5:dd:
                    78:ef:6e:83:c7:f9:8c:fb:0d:8d:77:c9:28:d8:2a:
                    64:b5:68:c4:2e:02:b0:8b:ad:a9:41:0f:e4:b1:29:
                    ea:59:04:a5:67:02:ec:a1:14:26:2f:07:4a:7e:5c:
                    73:4f:d0:50:1f:86:e5:e1:8d:3f:42:a4:09:fe:52:
                    1c:9e:c8:69:1d:f5:3f:ec:dd:9d:63:64:31:5b:f5:
                    e7:22:9d:c0:bc:25:d4:84:f2:73:8b:e7:75:1a:8f:
                    64:b5:8b:25:0c:fc:c0:35:a6:82:09:8f:53:84:75:
                    d4:66:49:ea:ea:63:ae:e0:f9:fb:7a:fe:69:6e:8b:
                    21:50:62:92:12:26:6c:68:67:68:35:78:cc:40:04:
                    ff:b0:ce:6a:d0:dd:f6:09:d8:bd:4d:38:32:01:df:
                    e3:24:aa:b3:43:ce:cf:ea:03:4b:a9:2a:5c:0c:c0:
                    c3:79:64:e1:91:df:15:a0:4e:60:06:ec:06:0c:12:
                    7f:e0:ea:a9:d0:f1:99:94:71:3d:de:db:5e:33:fd:
                    1a:6c:5f:1f:e0:91:b5:f5:03:35:8b:76:2f:c3:7c:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6D:53:DE:4B:FB:51:2A:EB:64:1C:32:DD:C2:7A:01:76:D1:FC:E2
            X509v3 Authority Key Identifier:
                keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f8:ea:84:e0:c6:4c:df:1a:aa:a4:36:92:b5:9d:b6:3c:4b:
         26:33:3a:1d:d7:f2:f9:27:e4:9f:ac:14:02:5a:a4:ca:f2:d9:
         eb:9e:c1:ef:4b:6e:84:35:9d:67:94:c1:8b:39:81:ab:46:e2:
         e7:56:73:15:3b:e5:bf:1e:07:64:f6:6f:ca:9e:32:56:09:91:
         96:f8:6d:7c:b5:c4:b5:16:3e:1b:4b:cb:16:b3:05:63:a8:18:
         39:fa:0f:75:05:1a:87:72:ce:a5:e3:4a:f1:80:2f:a9:28:e4:
         91:bc:04:fc:f0:53:53:04:5b:41:4c:a3:cf:ae:4e:4a:4f:38:
         fe:0f:53:61:96:a1:ac:d2:ed:b2:4e:ca:17:d0:82:bd:cd:ef:
         58:7c:6c:1d:71:ec:a9:bb:ab:d0:96:72:cc:a4:15:bf:ec:6a:
         34:ce:0d:c3:2b:9f:a8:e2:3f:e4:1b:81:a0:bd:48:dd:44:cf:
         c6:c5:d3:d3:42:2a:05:62:0b:5a:f6:ac:6c:bb:be:8c:ed:04:
         4d:f3:3d:fa:43:15:af:54:d4:d3:df:49:8d:6b:ef:f2:6c:4d:
         5c:25:d5:a6:93:cb:38:87:ed:0e:b5:ea:c1:56:4f:ad:69:76:
         86:1b:37:aa:c7:53:4e:f4:3e:88:1a:5d:29:99:e6:e1:7a:c2:
         bc:bf:64:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:05 2026 by rpki-client