Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
File:                     JwafGIPczJOnhpxB7D6XL_X9SwE.mft (raw, json)
Hash identifier:          1It+fzFmPXT0TRSSm5DqNP0F8D2bA/FCsMAPrVm/2NM=
Subject key identifier:   70:0F:D2:5F:0E:B4:84:CB:BF:00:E5:9F:9F:17:4E:6E:3F:A7:9C:14
Authority key identifier: 27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
Certificate issuer:       /CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Certificate serial:       019FA0DF9D85A015C558F30CBB5A7023E4A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
Manifest number:          0457
Signing time:             Mon 27 Jul 2026 00:00:37 +0000
Manifest this update:     Mon 27 Jul 2026 00:00:37 +0000
Manifest next update:     Tue 28 Jul 2026 00:00:37 +0000
Files and hashes:         1: JwafGIPczJOnhpxB7D6XL_X9SwE.crl (hash: 5CdZbkMJtNdunCQ8jDDIcaISt8o6PgHGJNysy5sRfPY=)
                          2: c-F07oW418TCkLIDuM4bPsepLlw.roa (hash: HiwmaaNLgIsPLCrsmNEOGqUJ63k1RwsqFon6JmR4rWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:df:9d:85:a0:15:c5:58:f3:0c:bb:5a:70:23:e4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
        Validity
            Not Before: Jul 27 00:00:37 2026 GMT
            Not After : Jul 28 00:00:37 2026 GMT
        Subject: CN=700fd25f0eb484cbbf00e59f9f174e6e3fa79c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f8:d2:67:29:bb:c7:12:42:45:3b:74:74:5f:
                    3e:20:87:5c:16:25:d5:9b:c5:fe:a0:89:ad:d2:56:
                    80:59:1c:fa:7a:ca:80:12:19:3d:20:0c:f0:20:e1:
                    45:a0:59:45:49:15:e7:bd:98:d2:8a:6c:7f:06:14:
                    16:3e:96:33:ac:49:41:64:12:0e:f1:c1:05:08:28:
                    ef:3b:40:8e:5a:9f:90:aa:76:9a:83:31:ed:a6:05:
                    f7:85:4d:a6:04:3b:e0:87:fc:39:29:89:35:a9:8e:
                    8c:1b:01:9e:d7:63:a0:35:41:93:de:3c:ea:9f:e1:
                    f4:74:59:dc:9a:07:80:fd:eb:93:1f:37:e9:e6:19:
                    36:f8:0f:ff:e8:19:06:06:29:6b:b3:67:9a:98:83:
                    d3:61:09:1a:6e:7a:fe:f6:e8:f1:57:51:60:57:85:
                    1a:3b:d3:13:2d:dd:f2:0c:50:c6:74:22:81:d9:19:
                    ec:e3:28:e9:2a:81:d7:c2:10:0f:95:2e:04:0d:10:
                    f5:02:c9:c6:1f:da:9c:b2:72:e0:5c:00:b0:38:68:
                    e9:ed:40:91:bd:d3:28:73:23:d6:73:0c:5a:07:81:
                    73:a6:ce:87:82:c6:5c:8d:37:28:83:4d:32:c1:0f:
                    f7:60:f0:d5:de:8d:c0:de:74:f5:55:ad:2a:ff:1f:
                    5f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0F:D2:5F:0E:B4:84:CB:BF:00:E5:9F:9F:17:4E:6E:3F:A7:9C:14
            X509v3 Authority Key Identifier:
                keyid:27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:84:71:a1:bf:bc:f2:32:2e:83:03:2b:1a:32:2c:95:21:1f:
         8e:91:93:d6:84:f6:88:7e:53:ae:f6:39:59:65:85:de:3d:e2:
         0e:e0:ba:3b:d0:86:a1:c3:31:8e:ea:70:c3:84:03:ac:d3:81:
         f7:7b:e0:82:cf:ac:19:56:28:b9:75:0e:b7:a9:6c:f6:70:f5:
         ff:c6:af:97:45:6a:a2:c2:8e:61:48:13:19:22:10:d0:70:ab:
         2d:68:70:12:5c:d7:b9:78:5e:ce:e7:15:f2:47:30:f7:95:66:
         8e:c9:40:3b:9c:40:5d:f9:a5:8d:82:78:8b:1b:b3:d7:56:6c:
         65:9b:5c:74:b8:28:e4:54:62:19:19:97:e1:13:f7:2f:01:27:
         03:f0:36:a8:ae:59:15:6c:a1:bf:c6:a0:93:cf:dc:91:b2:c9:
         e1:0b:04:5f:59:83:33:96:a6:3d:70:09:96:69:2d:bc:b0:90:
         3d:b0:b9:99:9a:3e:58:d0:d6:3a:e5:94:a6:01:3b:eb:fb:ca:
         f6:ce:57:76:65:60:dc:38:3f:77:39:70:d7:73:c9:12:14:3c:
         b7:7d:a9:3f:f8:cf:09:04:b6:55:ce:06:a3:fa:21:ec:c0:af:
         c2:e0:ef:c3:37:a1:6a:e0:b5:5b:25:ea:51:0c:25:7a:c3:55:
         ae:a3:ff:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:30:09 2026 by rpki-client