Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
File:                     JzWNbTPibSr4Q9WB3PacDREKneg.mft (raw, json)
Hash identifier:          sRyTlYdKqAnkjjit6aUoRJjIj8V/oDT66Kk95AHnk38=
Subject key identifier:   12:2B:E0:2B:BB:F7:A2:2E:84:1F:12:D1:A0:DA:29:89:1C:AE:4C:E0
Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
Certificate issuer:       /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Certificate serial:       019E91382CF10B44E3A0F24EA3ECDC4737D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
Manifest number:          055C
Signing time:             Thu 04 Jun 2026 06:00:38 +0000
Manifest this update:     Thu 04 Jun 2026 06:00:38 +0000
Manifest next update:     Fri 05 Jun 2026 06:00:38 +0000
Files and hashes:         1: JzWNbTPibSr4Q9WB3PacDREKneg.crl (hash: KmMpdk5xjXJtgBOsVEx0HrY7NVYDVPliFMQxaJlZ85A=)
                          2: q9nb03LLGhEQgbaQ_RRS2Oti8mA.roa (hash: +gb3UnVeZl4+1DAMyjUb0CGvwvwAAF1A19rfF/kmb3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:38:2c:f1:0b:44:e3:a0:f2:4e:a3:ec:dc:47:37:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
        Validity
            Not Before: Jun  4 06:00:38 2026 GMT
            Not After : Jun  5 06:00:38 2026 GMT
        Subject: CN=122be02bbbf7a22e841f12d1a0da29891cae4ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:72:a1:bf:72:72:e0:77:07:be:62:67:9d:
                    6c:1f:a3:5b:78:c4:03:19:dc:d9:7e:57:bd:17:6c:
                    7e:cc:8f:fe:7b:17:f9:45:86:13:39:f5:ad:a0:b6:
                    7e:30:7e:a6:ba:58:71:fe:b1:d3:02:fe:f8:fa:eb:
                    36:0b:1b:34:ca:80:f7:7a:04:eb:7b:72:bf:df:a9:
                    7f:e1:60:14:1a:7f:e5:76:c6:ed:1f:b8:8f:a6:13:
                    72:75:ce:c7:83:fc:41:03:a7:26:16:88:29:cc:3e:
                    85:af:12:8f:50:17:20:44:21:82:d7:f8:b0:02:52:
                    7b:59:4f:43:e8:b0:c0:ec:5a:2c:c3:b4:b2:59:f5:
                    53:ad:bd:c6:1f:23:bc:ff:fd:9e:89:b8:50:fe:89:
                    d2:92:2b:6d:57:e4:4f:8d:38:49:7f:87:77:37:52:
                    65:b0:ac:01:e1:d4:68:24:ac:4a:e6:27:d5:9d:68:
                    22:fe:92:04:e5:87:21:2e:bc:21:71:f6:24:db:72:
                    ab:18:13:cf:23:27:73:f7:7d:99:3d:86:c2:a7:ef:
                    4e:ba:64:cf:98:90:11:e4:c2:a1:5e:fc:6e:0b:33:
                    36:3b:bc:90:8a:c9:6c:9b:6e:ec:31:85:96:f8:ea:
                    22:de:e5:3a:4b:2a:da:ef:a7:69:81:eb:57:04:1e:
                    3c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2B:E0:2B:BB:F7:A2:2E:84:1F:12:D1:A0:DA:29:89:1C:AE:4C:E0
            X509v3 Authority Key Identifier:
                keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b2:1d:fa:d4:3c:5b:02:43:e0:1f:08:a2:b8:51:6d:13:11:
         20:0c:8c:eb:39:03:17:9b:7a:1f:f1:eb:d7:06:b8:2a:6b:d7:
         9c:06:1e:5c:b1:10:13:8c:3b:eb:9c:38:88:a1:c1:50:65:03:
         ff:fb:0b:03:1c:b8:a3:63:5e:1a:8c:ea:32:95:da:93:6f:77:
         7b:b8:87:bb:50:44:78:1c:cf:93:49:6f:33:a8:07:08:8f:5d:
         35:cb:1d:bb:2a:10:cd:4c:c4:90:76:9a:0b:91:71:cf:19:7a:
         14:4d:d9:05:1c:e8:6a:78:8d:45:23:68:43:47:a3:a2:70:e3:
         00:a3:df:4c:65:ff:be:a8:74:2f:81:3b:80:3a:e9:f1:39:5c:
         d7:d7:b0:8c:7f:bc:85:11:1b:7b:4c:1b:0e:d0:42:04:1f:cc:
         29:1b:4b:15:16:59:da:e0:ef:b1:8e:0a:9b:11:9d:06:a6:8d:
         16:87:d6:c2:77:d7:0b:b9:fc:04:40:46:ae:72:a1:0e:1d:a0:
         87:25:7c:ba:06:21:dc:a3:00:8d:91:f8:c5:cc:39:e0:98:a9:
         98:b5:a2:16:a6:4c:e7:aa:e6:ad:16:93:45:bc:4c:8e:77:34:
         9d:81:7a:40:91:3b:e0:c6:28:16:36:f5:c2:2b:17:a0:3f:f7:
         b1:b3:15:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6ROCzxC0TjoPJOo+zcRzfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MzU4ZDZkMzNlMjZkMmFmODQzZDU4MWRjZjY5YzBkMTEw
YTlkZTgwHhcNMjYwNjA0MDYwMDM4WhcNMjYwNjA1MDYwMDM4WjAzMTEwLwYDVQQD
EygxMjJiZTAyYmJiZjdhMjJlODQxZjEyZDFhMGRhMjk4OTFjYWU0Y2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/dyob9ycuB3B75iZ51sH6NbeMQD
GdzZfle9F2x+zI/+exf5RYYTOfWtoLZ+MH6mulhx/rHTAv74+us2Cxs0yoD3egTr
e3K/36l/4WAUGn/ldsbtH7iPphNydc7Hg/xBA6cmFogpzD6FrxKPUBcgRCGC1/iw
AlJ7WU9D6LDA7Fosw7SyWfVTrb3GHyO8//2eibhQ/onSkittV+RPjThJf4d3N1Jl
sKwB4dRoJKxK5ifVnWgi/pIE5YchLrwhcfYk23KrGBPPIydz932ZPYbCp+9OumTP
mJAR5MKhXvxuCzM2O7yQislsm27sMYWW+Ooi3uU6Syra76dpgetXBB48ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIr4Cu796IuhB8S0aDaKYkcrkzgMB8GA1UdIwQY
MBaAFCc1jW0z4m0q+EPVgdz2nA0RCp3oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMt
NDI2ZDlmZjIwN2QxLzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMtNDI2ZDlmZjIwN2Qx
LzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbId+tQ8
WwJD4B8IorhRbRMRIAyM6zkDF5t6H/Hr1wa4KmvXnAYeXLEQE4w765w4iKHBUGUD
//sLAxy4o2NeGozqMpXak293e7iHu1BEeBzPk0lvM6gHCI9dNcsduyoQzUzEkHaa
C5Fxzxl6FE3ZBRzoaniNRSNoQ0ejonDjAKPfTGX/vqh0L4E7gDrp8Tlc19ewjH+8
hREbe0wbDtBCBB/MKRtLFRZZ2uDvsY4KmxGdBqaNFofWwnfXC7n8BEBGrnKhDh2g
hyV8ugYh3KMAjZH4xcw54JipmLWiFqZM56rmrRaTRbxMjnc0nYF6QJE74MYoFjb1
wisXoD/3sbMVpw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:29 2026 by rpki-client