Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
File:                     J_whhWzY4Denu4xjkqYZghOotPY.mft (raw, json)
Hash identifier:          d3vsUncjMZyfRqFvwlws3BesWJ0z8gKA+P/E2qZixc4=
Subject key identifier:   D5:59:E9:35:A3:D1:8A:7A:E6:91:C6:3B:F3:76:C1:1E:71:6E:4F:A6
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Certificate issuer:       /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial:       019EB87C8B138D8DFC4DA281BD1EE6AA2886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
Manifest number:          1037
Signing time:             Thu 11 Jun 2026 21:00:30 +0000
Manifest this update:     Thu 11 Jun 2026 21:00:30 +0000
Manifest next update:     Fri 12 Jun 2026 21:00:30 +0000
Files and hashes:         1: J_whhWzY4Denu4xjkqYZghOotPY.crl (hash: J1Ox0AwSxM2UeP44GXpcUIgUjym4fdEC7I+iSUnxk7o=)
                          2: Zl9UixuUH0GLR4R_JPyHH_dGJ1Y.roa (hash: bKOmByPp72MyiwK2dxQMPNiiDG6ujdM2vWNSfqTcD8I=)
                          3: evUKjjQ-64urf3ID9QQeEJmSrho.roa (hash: jHjvWcJHTbQkaqv1cxn7W2VQ1dY8D8A2yCIoe6SeCXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7c:8b:13:8d:8d:fc:4d:a2:81:bd:1e:e6:aa:28:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
        Validity
            Not Before: Jun 11 21:00:30 2026 GMT
            Not After : Jun 12 21:00:30 2026 GMT
        Subject: CN=d559e935a3d18a7ae691c63bf376c11e716e4fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:b4:2f:08:37:db:ea:a2:98:61:1a:3c:3b:
                    58:ab:e1:7f:d6:fe:98:56:a8:d7:2d:c6:9e:72:e7:
                    ce:d3:c8:69:e9:0c:1b:06:dc:8b:07:14:37:5f:7e:
                    e5:ce:25:09:1e:9e:73:d9:e6:3e:d3:25:8e:d7:6f:
                    23:ce:59:f6:1c:aa:37:6b:ab:8b:5f:dd:c6:06:f1:
                    00:ab:fd:0b:d8:21:6d:5a:f2:14:f9:45:29:be:9b:
                    6f:41:7a:8e:62:3b:0a:bc:f9:e1:4b:e4:f6:5d:7f:
                    73:32:80:68:f5:7c:a5:93:70:f0:a1:1e:e3:e5:66:
                    37:a1:2b:d1:69:f9:20:ce:58:45:02:81:fe:22:ad:
                    b3:11:a8:1f:fc:7d:1f:17:e2:13:08:39:36:aa:bd:
                    78:ba:07:97:cf:ec:70:4e:78:10:d8:5e:26:1a:54:
                    23:71:d5:c0:08:ba:02:3f:48:af:3e:68:3e:41:98:
                    9e:3d:ea:e4:e4:5b:a2:53:68:0c:a7:5b:8a:85:2f:
                    12:2f:c9:f3:03:8d:00:d5:79:8d:8d:aa:0f:0d:85:
                    1e:e4:6f:c3:a4:a2:95:47:ca:20:79:e4:44:0e:fc:
                    ab:97:65:2d:5c:8e:19:9c:46:cc:f2:82:76:e0:a2:
                    31:6d:a4:0f:c5:17:a1:69:b9:6a:a9:b3:3a:ab:67:
                    3f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:59:E9:35:A3:D1:8A:7A:E6:91:C6:3B:F3:76:C1:1E:71:6E:4F:A6
            X509v3 Authority Key Identifier:
                keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:e7:d1:de:91:7f:10:c8:24:37:1a:22:1c:99:70:70:94:9c:
         95:2d:58:af:94:83:b6:dd:4a:f1:6d:19:ae:bc:4a:98:ea:db:
         88:ac:3e:21:9b:9b:b9:65:38:85:cd:b5:18:df:41:a1:de:8b:
         d4:8a:6b:a0:b6:25:b6:31:ba:5e:bb:95:9f:2a:f4:57:c0:31:
         ee:d0:7d:aa:91:25:b0:af:72:a1:fe:b6:23:67:14:1f:8d:c6:
         de:91:78:53:e4:1d:33:37:fa:1b:f6:fd:4e:b6:cb:bd:1e:cd:
         46:82:cc:ad:36:09:8c:3f:48:08:cd:36:5c:c4:6b:51:6e:04:
         21:56:e3:79:26:b0:01:80:d3:a3:72:57:f6:82:ac:8b:e5:77:
         35:35:07:87:79:65:59:6d:4e:3d:c1:25:d9:03:3a:dc:ac:25:
         c6:16:04:87:61:4d:e0:b4:74:d3:7d:e3:b8:b1:5c:66:f0:79:
         99:8f:ce:a5:ef:f7:3a:8e:22:c9:b5:30:c6:6e:96:fa:b0:95:
         e7:de:1a:9a:07:eb:26:41:80:85:ee:bb:40:96:6b:4a:c3:0e:
         47:93:ff:59:33:57:2e:10:72:9b:ce:fd:0f:e0:57:9a:fc:a0:
         39:5d:4e:5c:fd:d2:26:0c:f8:dd:9a:95:a2:72:75:d5:5c:cd:
         32:6b:93:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:54:08 2026 by rpki-client