Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File:                     J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier:          +xiS93VsdcD7wN4MIXpwfkemJPOuC2pa0U8Sw9VLoFI=
Subject key identifier:   E1:1D:D4:8F:6E:DC:62:AC:59:12:8D:9D:4B:D7:EE:B7:8F:6F:39:FF
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer:       /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial:       019E9B1783E35DD7F6BD427E5CB922544CAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number:          0F67
Signing time:             Sat 06 Jun 2026 04:01:09 +0000
Manifest this update:     Sat 06 Jun 2026 04:01:09 +0000
Manifest next update:     Sun 07 Jun 2026 04:01:09 +0000
Files and hashes:         1: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: K7JXWNkluCSHeEvv8SJlMgjX/Q/c+UpDpVdh1ZaW3T0=)
                          2: OXWr1FYLi9PgXMi4UP0vp3p1d3o.roa (hash: miQSIT7p7E2EU0jg2TvL7PxHL5mubsweNJtdEmmfr8s=)
                          3: vemKapMmkStR7tolVhfdLCFIHqo.roa (hash: dA21yuRu1C5aB1w0/kkdpqei9cBkSg/W6yABWc5Hwig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:17:83:e3:5d:d7:f6:bd:42:7e:5c:b9:22:54:4c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
        Validity
            Not Before: Jun  6 04:01:09 2026 GMT
            Not After : Jun  7 04:01:09 2026 GMT
        Subject: CN=e11dd48f6edc62ac59128d9d4bd7eeb78f6f39ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6e:6a:cd:7e:6e:0a:c4:ef:6e:d8:58:2b:fb:
                    32:1f:84:c1:62:2b:2c:34:57:13:ca:78:0e:45:cb:
                    ef:de:df:01:eb:54:f1:6d:6d:7f:cd:6c:76:6a:0d:
                    f6:b5:c2:95:ef:35:e5:50:36:9f:2a:23:86:1a:c3:
                    e3:08:85:3c:b8:8b:3d:4d:91:5f:6e:3d:11:68:f5:
                    80:7e:96:fc:3c:cf:f8:ee:e5:a9:8f:28:36:37:94:
                    d6:4c:db:2e:e2:fd:86:f4:2f:b7:d1:e1:1a:ee:73:
                    f0:9a:43:e5:b6:1d:dd:26:f4:69:de:92:86:04:bc:
                    46:82:56:04:87:3e:db:57:fd:98:8e:d4:a4:6c:eb:
                    15:8c:88:6a:bc:ce:8e:55:1b:c4:9f:cb:41:f1:9e:
                    77:32:bd:0a:6f:a8:33:6a:46:90:21:ea:7e:24:de:
                    38:7b:70:9b:3f:d1:62:cb:f6:61:6c:ff:85:72:e5:
                    da:11:12:f8:cd:21:35:40:77:4c:48:98:4f:76:91:
                    77:03:5e:02:43:e4:e5:ae:47:d7:f8:de:13:26:e0:
                    f7:9d:78:01:43:6a:c6:90:98:0e:07:21:84:dd:11:
                    1b:55:a2:f9:f1:0a:c4:c9:7c:93:cd:85:ba:1b:04:
                    15:6e:47:f1:40:ee:68:39:f9:16:f2:cf:c8:d3:01:
                    c5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1D:D4:8F:6E:DC:62:AC:59:12:8D:9D:4B:D7:EE:B7:8F:6F:39:FF
            X509v3 Authority Key Identifier:
                keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:53:37:d6:0f:c8:99:17:1f:83:03:cf:05:0c:25:9f:b5:4c:
         9f:bb:9c:0d:06:3b:73:95:19:c5:4e:93:1b:1c:a9:d0:d2:29:
         1b:5a:58:23:4c:f3:e3:35:a4:ef:65:29:7b:b5:d8:09:44:0b:
         62:11:86:dd:18:a9:95:f9:c1:43:29:50:18:04:db:f8:99:0b:
         03:e2:d2:ea:82:67:c8:be:6e:35:59:e6:0e:1c:0f:b4:d1:78:
         61:68:5f:ea:37:e9:d7:a8:d6:f4:c8:1e:7b:30:00:57:9c:82:
         d1:a8:61:62:c9:cf:ed:6d:55:c5:12:dd:e6:28:1d:c6:2f:3e:
         a8:b5:2a:26:15:03:e4:15:0e:ff:27:a8:44:4c:2a:40:ef:4b:
         b9:2f:2b:7e:f1:86:21:e9:d2:d7:38:79:17:7d:12:cf:b3:e2:
         5a:a8:d2:30:b0:af:47:ab:bd:a3:00:82:ca:01:16:3c:99:e1:
         0b:c3:fd:b0:16:a1:73:c6:38:06:4f:df:fd:b8:fa:e4:62:15:
         43:5c:9b:3c:fe:92:c3:6e:51:4a:db:db:68:2a:48:30:84:91:
         26:d3:5c:d8:46:12:71:b6:a4:a4:5e:0d:b2:eb:43:8c:09:b8:
         b9:d5:96:ac:db:b6:3d:f2:aa:95:d2:a0:ed:77:81:06:a6:6f:
         d3:00:16:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:25:14 2026 by rpki-client