Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
File:                     jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft (raw, json)
Hash identifier:          cp3roy0z3/Xuf+w4cyw9aO3rL3+ylGWjpJ/Pi7iwIV4=
Subject key identifier:   B9:D8:32:2B:86:D1:07:42:7A:02:1C:FE:F0:23:D0:AC:2F:CE:05:DF
Authority key identifier: 8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
Certificate issuer:       /CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Certificate serial:       019F1979FFC4BBF30980816FB5F7FE57D553
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
Manifest number:          07CB
Signing time:             Tue 30 Jun 2026 17:00:53 +0000
Manifest this update:     Tue 30 Jun 2026 17:00:53 +0000
Manifest next update:     Wed 01 Jul 2026 17:00:53 +0000
Files and hashes:         1: JwAMG7H5zqvWutaY0tL6qWOVQ84.roa (hash: WHBkccdZypDjFyRaZ97jWOQpOH4yG3/HgeMqK5knvm8=)
                          2: jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl (hash: bv4kZ7qxI/DcbavO3+pY5kg3V4qtnorceKiLsQraIrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:79:ff:c4:bb:f3:09:80:81:6f:b5:f7:fe:57:d5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
        Validity
            Not Before: Jun 30 17:00:53 2026 GMT
            Not After : Jul  1 17:00:53 2026 GMT
        Subject: CN=b9d8322b86d107427a021cfef023d0ac2fce05df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8e:e3:57:8a:be:eb:cb:75:76:2d:34:14:a8:
                    69:ca:24:4c:3d:3d:81:33:62:9e:07:8d:da:d3:66:
                    39:11:e9:45:6a:0c:e6:1d:00:81:5b:9c:32:42:19:
                    b2:88:1e:ae:7f:c5:0f:86:69:eb:0c:44:8a:6e:c9:
                    5b:75:2e:f3:a6:b6:d2:aa:48:03:4a:ca:dc:84:e6:
                    ad:17:e9:f4:3c:31:03:9e:c8:90:37:41:51:d9:7d:
                    4b:ce:f8:f2:93:9a:fc:60:83:81:f1:da:23:b9:58:
                    10:62:cb:10:31:46:82:31:3d:ce:a9:cf:81:af:e7:
                    7f:07:41:13:3b:9c:98:cc:cf:d6:d2:23:50:07:f7:
                    be:17:1f:23:13:ab:72:24:25:02:ea:54:5b:12:b8:
                    01:c2:e7:f1:53:cd:9b:52:1d:9a:af:f9:b6:15:76:
                    b7:45:e6:9d:0a:cd:10:25:58:c6:67:38:25:a2:f1:
                    64:6e:d0:82:7a:5e:a0:47:aa:29:54:6f:06:df:3e:
                    c1:ef:13:16:8e:d4:8c:bb:c4:48:63:c6:36:f0:e8:
                    83:a7:bd:71:3b:37:c1:c1:9d:04:67:1a:c0:db:db:
                    a3:61:62:dc:fd:fc:94:bc:6e:43:24:10:0c:09:f6:
                    35:c5:0b:a2:bb:14:38:71:33:83:09:68:14:6d:7c:
                    6e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D8:32:2B:86:D1:07:42:7A:02:1C:FE:F0:23:D0:AC:2F:CE:05:DF
            X509v3 Authority Key Identifier:
                keyid:8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4b:52:07:1a:0e:09:f4:3a:cb:68:21:33:65:ea:68:d3:92:
         03:a9:af:4c:94:ec:c1:a5:a7:67:cf:3e:07:9e:0f:e2:e6:c8:
         fb:71:ea:57:be:59:aa:58:81:9f:23:ed:b5:96:3c:7e:f2:74:
         c5:be:f5:56:b9:41:b3:36:02:60:10:e2:03:2d:c8:dc:26:f6:
         0a:5d:cf:b0:b3:e7:12:f1:a7:d4:2a:38:15:01:fe:e2:95:8e:
         30:a7:d2:f2:7b:12:6b:9c:a2:56:2a:09:04:00:e1:e9:1e:1b:
         8b:00:8c:54:04:82:e5:ac:99:f2:cb:8d:ed:df:db:d7:1f:56:
         ea:86:c6:fc:1a:6d:3a:2c:a5:66:be:f4:e4:6b:d0:8e:82:05:
         53:08:6f:ed:93:60:ec:2c:f6:23:ed:ed:dd:a5:a3:03:eb:6b:
         b4:c5:f2:fc:87:65:50:db:1b:d2:3a:85:ce:64:68:7e:4d:0d:
         87:4b:02:f0:cb:2e:d6:02:51:38:7c:02:e5:8b:25:65:6d:c7:
         4c:3b:30:00:43:f5:cd:1c:be:14:90:d0:e5:96:be:9a:4a:30:
         96:a0:67:d3:d4:4e:c2:46:22:b8:74:47:94:11:9f:6d:04:56:
         93:36:63:b5:f8:9c:f8:92:38:e7:b9:bc:fe:9e:8a:4a:a0:2a:
         a1:a1:42:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 00:56:15 2026 by rpki-client