Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
File:                     JRIoadDqT5h6tR-5eRgA2EBamjw.mft (raw, json)
Hash identifier:          Bg4gng6vKw+Cu6DffB9ysnxrszVX2EWnxZ6DZ4k4EW8=
Subject key identifier:   E1:5D:26:E2:16:D3:F6:77:A9:C5:B2:00:9E:52:80:24:6E:14:C0:60
Authority key identifier: 25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
Certificate issuer:       /CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Certificate serial:       019F115262FEA82C658110ADCC60FD9B5DF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
Manifest number:          0405
Signing time:             Mon 29 Jun 2026 03:00:39 +0000
Manifest this update:     Mon 29 Jun 2026 03:00:39 +0000
Manifest next update:     Tue 30 Jun 2026 03:00:39 +0000
Files and hashes:         1: HCsz3X8BWUwO7DEIBpvU8zpY4hw.asa (hash: PvA9+vVBsvp6nIyiqJmhyWBHz04WMnyIEhKZtgSJ6sw=)
                          2: JRIoadDqT5h6tR-5eRgA2EBamjw.crl (hash: GyF5uYHh3JuELLJE211MDG5Kez4sHEj/A2viTUjUzcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:52:62:fe:a8:2c:65:81:10:ad:cc:60:fd:9b:5d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
        Validity
            Not Before: Jun 29 03:00:39 2026 GMT
            Not After : Jun 30 03:00:39 2026 GMT
        Subject: CN=e15d26e216d3f677a9c5b2009e5280246e14c060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6d:3f:4d:ab:f1:c5:f7:7d:22:8b:88:be:df:
                    8f:d2:87:28:30:c6:a0:3e:23:36:44:b1:a0:bd:40:
                    d8:e4:a9:7b:bf:01:73:3d:85:4c:b2:6f:60:3d:04:
                    6e:a4:8c:5f:22:4a:50:e2:2c:f8:c7:30:33:2d:17:
                    b3:d6:90:b5:23:52:2c:cb:26:f6:86:7d:28:94:44:
                    99:b7:98:0f:4c:e4:87:91:7b:12:43:95:67:90:46:
                    50:05:96:ef:88:16:1b:a5:2a:47:50:9a:9e:c8:5c:
                    a0:a3:6c:a4:7c:6a:04:1b:8d:30:27:8d:5a:91:f9:
                    57:bd:88:e3:20:1f:d8:50:f4:5a:19:c2:b8:17:7e:
                    93:93:b1:7a:10:f0:a3:20:e1:a2:46:9a:9f:c8:bb:
                    b5:06:b9:2c:3f:c5:0a:d7:d4:6e:92:23:37:37:e5:
                    b0:59:97:53:da:d6:a7:60:76:54:38:56:52:df:a9:
                    ec:48:1d:fc:e2:0d:de:0e:38:2a:cc:c4:d5:b3:43:
                    3b:c3:d9:4b:d6:ea:31:50:c5:cc:ab:f4:01:05:91:
                    d8:0f:aa:91:f9:fb:45:2c:bd:02:29:6d:e2:64:e1:
                    62:22:07:a5:a3:19:e6:ad:d3:d5:e8:0f:79:4a:79:
                    3b:3e:25:e2:30:ee:ef:73:39:15:0f:e5:13:60:cb:
                    90:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5D:26:E2:16:D3:F6:77:A9:C5:B2:00:9E:52:80:24:6E:14:C0:60
            X509v3 Authority Key Identifier:
                keyid:25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:48:a7:58:b0:06:d6:12:1c:dc:a7:9b:ad:a7:df:ff:53:6c:
         6b:1f:cd:8c:35:10:2b:50:2e:91:71:8c:ec:63:80:f2:55:da:
         26:fa:e0:43:27:32:5b:88:5c:e6:ef:db:3b:23:24:ad:89:39:
         74:e7:25:28:b4:83:6a:e0:54:80:ef:1e:a5:89:d7:2d:56:35:
         30:2b:5a:30:1e:c5:76:18:89:9d:18:19:c2:36:f6:68:1c:eb:
         d5:bf:52:e7:ab:1c:34:1d:ed:03:dc:38:83:ae:ca:dd:4a:9a:
         f8:1e:a5:c2:5f:23:9c:9c:28:aa:c1:76:59:1b:e6:43:0e:31:
         4a:7c:48:2b:0b:1b:18:74:e8:8a:45:5e:de:3f:83:66:58:76:
         69:fb:08:d9:cc:df:ba:a0:f6:cf:2a:95:32:0d:80:af:aa:cb:
         3d:fb:93:20:f5:b2:35:f0:f4:62:28:2c:4e:bc:e3:b7:95:4f:
         d3:67:88:0a:e9:8b:8d:c6:eb:e8:a6:80:f0:b7:49:9f:04:cf:
         ac:b3:43:79:39:8d:50:a4:70:a3:5c:16:15:1a:31:ac:fa:1d:
         5e:78:19:ef:f1:4f:08:9e:7a:7f:0a:25:fa:a5:3b:93:ef:23:
         b3:79:c3:8a:6d:ac:7f:ca:e7:75:58:34:3e:5b:42:dd:48:1d:
         72:30:56:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:38:31 2026 by rpki-client