Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
File:                     JwafGIPczJOnhpxB7D6XL_X9SwE.mft (raw, json)
Hash identifier:          PVF6o3EPRa7Zei5bomwKe3yTT52PgrsSfmSBbt69KC0=
Subject key identifier:   57:18:47:50:D8:5C:67:AA:C4:84:05:9C:D7:4F:67:98:ED:85:CC:60
Authority key identifier: 27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
Certificate issuer:       /CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Certificate serial:       019EB73393E6E6A69CB8C47030A67BF62559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
Manifest number:          03DE
Signing time:             Thu 11 Jun 2026 15:01:10 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:10 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:10 +0000
Files and hashes:         1: JwafGIPczJOnhpxB7D6XL_X9SwE.crl (hash: 2MOmhxQXlUKQQL6AIl6fsiNSG2JNxsdnG2QAdI7VcaY=)
                          2: c-F07oW418TCkLIDuM4bPsepLlw.roa (hash: HiwmaaNLgIsPLCrsmNEOGqUJ63k1RwsqFon6JmR4rWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 15:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:93:e6:e6:a6:9c:b8:c4:70:30:a6:7b:f6:25:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
        Validity
            Not Before: Jun 11 15:01:10 2026 GMT
            Not After : Jun 12 15:01:10 2026 GMT
        Subject: CN=57184750d85c67aac484059cd74f6798ed85cc60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:4a:a3:be:5b:d4:30:66:85:86:f4:91:b8:
                    b0:b3:55:9b:a9:bc:da:1b:da:aa:3e:ad:ba:12:ae:
                    7b:32:f0:4d:28:d4:d1:c6:a8:5e:94:01:b1:07:6c:
                    d6:ec:3c:5a:17:3e:9c:a5:1c:0c:ee:1f:11:bb:eb:
                    dc:38:06:3b:fe:35:82:dd:94:13:67:fd:56:71:8b:
                    9e:73:ce:30:bd:38:68:8a:a2:85:03:93:74:ef:c1:
                    a6:ad:d8:25:6f:77:e3:5d:df:83:45:bc:83:cc:9b:
                    31:49:9b:b2:fc:d1:6e:83:ed:46:40:ab:07:12:c2:
                    e3:74:8f:06:2e:05:5e:ed:68:49:ea:e0:5c:88:f1:
                    80:50:f3:a2:00:a0:f0:d7:da:2e:71:40:e0:88:8d:
                    3d:13:c4:99:29:72:87:61:e8:90:b4:fd:f8:ea:e8:
                    32:a9:87:e8:fd:ab:9e:5f:f6:f2:28:04:04:10:9d:
                    ab:3c:a4:a7:79:c4:32:77:65:85:1a:28:05:d6:0a:
                    5e:21:67:3d:96:38:2a:79:4a:3d:9a:d5:c2:1b:e8:
                    8c:bc:19:fd:37:ef:01:a9:28:42:92:c2:7b:1f:7e:
                    39:94:97:78:e6:05:b7:2f:ab:7d:04:d4:ca:fd:e3:
                    67:7a:73:70:b7:fd:e2:20:95:4b:2c:31:1c:e7:35:
                    3f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:18:47:50:D8:5C:67:AA:C4:84:05:9C:D7:4F:67:98:ED:85:CC:60
            X509v3 Authority Key Identifier:
                keyid:27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d6:35:4d:9a:80:7c:11:ec:fc:13:7a:32:f3:02:f6:39:ad:
         5b:83:8f:8f:c8:2b:36:59:e9:76:ed:04:2d:21:cf:84:1e:05:
         a6:0f:2f:ee:7d:ca:1d:89:70:37:1c:76:d8:ec:68:62:27:5a:
         72:f7:13:16:90:44:fd:9b:93:f9:22:16:6d:df:41:31:da:17:
         d2:ec:7e:52:83:8b:e4:8a:60:3a:3e:5a:dd:5f:e5:f5:a4:80:
         5b:a3:b0:01:98:2f:28:42:79:12:db:cf:c3:42:a7:4a:a3:3d:
         44:66:ed:cd:2b:72:ef:1a:2e:64:63:b8:33:51:54:b5:cb:c5:
         b6:58:ac:5d:a3:e7:8e:0f:e8:df:d5:e5:db:df:56:13:a4:27:
         57:74:de:91:8f:29:a4:79:98:8e:a6:04:fe:ea:3f:fe:0a:06:
         1e:bf:4a:3d:48:1b:13:58:ee:d3:5b:f5:e1:f8:1c:28:bd:a9:
         36:d7:fe:5d:d0:6b:ee:2d:fe:00:48:b4:d1:c3:37:c6:7d:db:
         6a:d9:22:e5:af:a3:89:d4:63:63:2d:30:b4:ed:c7:05:8a:22:
         ce:5b:a5:18:5a:42:e9:8e:65:9e:a2:e3:03:50:e7:7f:8d:f5:
         a0:56:19:6c:00:bc:62:cd:d0:32:7f:3d:98:ab:e2:d6:09:57:
         b1:f1:ad:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:33 2026 by rpki-client