Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File:                     J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier:          cerQXICpoERThSOJAKf9CehC1AtCImHuHo5tZUR0Wg8=
Subject key identifier:   A2:15:61:73:B3:AE:04:25:1C:53:73:51:27:D4:59:BD:E0:B2:77:63
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer:       /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial:       019EB9216D0B81C16C5B64F98557A7C271C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number:          1958
Signing time:             Fri 12 Jun 2026 00:00:35 +0000
Manifest this update:     Fri 12 Jun 2026 00:00:35 +0000
Manifest next update:     Sat 13 Jun 2026 00:00:35 +0000
Files and hashes:         1: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: j2KZTnffq6MNst6Lwt8XcJSkrahQQIV/UND9Njn33bo=)
                          2: fH7jpTfOw73ogmMvWrEFRq2Avio.roa (hash: PFBzuOPj54GvMEMM5OOIFBp/nYApNQPXPXoK+zClv8U=)
                          3: uDCd91-kIRTx4Oler7V-1bWJeEE.roa (hash: MPw5XG6tMFKBuwGKWin9/7K5TyzvM+BrLD5tHi46a6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:6d:0b:81:c1:6c:5b:64:f9:85:57:a7:c2:71:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
        Validity
            Not Before: Jun 12 00:00:35 2026 GMT
            Not After : Jun 13 00:00:35 2026 GMT
        Subject: CN=a2156173b3ae04251c53735127d459bde0b27763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f6:9e:65:07:52:8c:43:23:a0:11:79:c0:b7:
                    f4:8a:66:33:39:00:f7:04:7d:09:47:ee:de:ce:55:
                    fe:8b:4d:19:a1:73:70:41:6f:59:97:4a:48:e5:e4:
                    10:59:4c:2f:d3:2c:98:b0:68:48:00:07:2c:e5:56:
                    a0:5b:da:5c:48:cd:76:42:e2:8c:ac:cc:e7:47:f2:
                    5b:09:cb:7a:57:97:6c:a2:76:57:77:e4:07:d8:f4:
                    fd:34:dc:09:bb:66:87:48:68:c5:27:cf:df:be:99:
                    f0:fc:42:c9:11:dd:0b:30:bc:9b:27:fd:57:be:57:
                    5c:97:3f:27:bd:01:bf:23:8f:86:ce:19:b8:01:05:
                    76:9e:cf:7c:bd:ec:8f:ba:5c:d2:1e:fa:22:c1:40:
                    61:38:15:f8:39:05:15:42:5c:18:6f:ff:08:e1:e1:
                    7a:13:d1:e0:39:ec:3a:4c:e6:68:f0:00:6a:e4:0d:
                    25:52:6c:d2:33:40:8a:ad:d7:69:81:45:e0:e3:95:
                    22:da:d6:49:ff:27:bb:9c:b4:ae:da:be:d8:cf:74:
                    e2:cb:45:61:fd:97:3f:07:45:9d:17:54:3d:db:fa:
                    9e:9a:f5:2a:62:6b:ee:90:7a:65:f3:de:ce:da:da:
                    0b:d2:61:73:5f:20:e6:07:f3:99:e4:ca:91:5c:2c:
                    94:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:15:61:73:B3:AE:04:25:1C:53:73:51:27:D4:59:BD:E0:B2:77:63
            X509v3 Authority Key Identifier:
                keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:46:b6:b9:54:cb:4d:82:e6:97:09:98:b6:2e:af:0c:67:c7:
         1a:41:a1:a3:99:a5:a7:92:62:aa:a0:3e:2c:e0:95:75:bc:31:
         5a:7e:88:b6:6a:49:d6:0c:14:53:a7:73:9d:0f:89:b0:28:51:
         2e:ff:94:b3:96:cb:f8:6f:2a:f5:70:24:7a:32:8b:9b:05:36:
         cc:d8:c0:22:a8:81:62:50:7f:1c:24:23:69:49:c3:ca:49:e5:
         e3:8e:51:dc:28:90:47:a8:a9:6a:8c:43:af:6b:c6:b4:99:6b:
         e3:f8:96:80:d9:1d:9c:16:19:97:59:af:7b:fe:3f:73:b8:a0:
         53:e5:ee:ed:a7:8b:44:9e:0e:d3:56:05:16:d9:59:a2:9b:e7:
         04:7b:dc:5c:24:18:d2:8b:3b:3e:24:e7:96:41:bb:98:97:a6:
         68:57:df:ac:36:55:00:07:74:f2:07:54:a5:b7:0d:a9:8a:80:
         b4:a3:4d:b6:1a:1f:f5:a3:ec:a3:33:3b:3f:d1:ef:62:fc:0a:
         7e:21:ee:e8:51:ef:81:e4:c8:2a:48:c5:7f:6c:05:01:5b:24:
         08:a0:a1:c2:53:d9:5d:28:29:f4:b8:00:fd:8b:00:00:cc:1d:
         f2:f8:2c:af:9d:17:2b:49:c7:2e:df:76:58:2d:0d:df:75:83:
         c8:23:60:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:36:40 2026 by rpki-client