Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
File:                     J3bWTqj9AotoiON0VXu5HwXuDsY.mft (raw, json)
Hash identifier:          Zz6KPFoO+358lKhjQkdWh9Qz6GCCerVk+PrG2mjlAts=
Subject key identifier:   DB:0A:24:AC:AD:BE:4A:0B:0E:29:D8:AB:9A:65:DE:F3:45:05:E2:4B
Authority key identifier: 27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6
Certificate issuer:       /CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
Certificate serial:       019FF9B5DC2477B63FB551567F80580DF1E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
Manifest number:          1011
Signing time:             Thu 13 Aug 2026 06:01:12 +0000
Manifest this update:     Thu 13 Aug 2026 06:01:12 +0000
Manifest next update:     Fri 14 Aug 2026 06:01:12 +0000
Files and hashes:         1: J3bWTqj9AotoiON0VXu5HwXuDsY.crl (hash: 80D+qpyPa0m5BaMDno677/3jbpkMRJpU9YR283jkk3A=)
                          2: sdhGA-D8N0DheaeqCdaBETgkfIk.roa (hash: 4XflHV7qg++MD8lYex2YKEHuIVOaLfMa2L7b2xLJq54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:b5:dc:24:77:b6:3f:b5:51:56:7f:80:58:0d:f1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
        Validity
            Not Before: Aug 13 06:01:12 2026 GMT
            Not After : Aug 14 06:01:12 2026 GMT
        Subject: CN=db0a24acadbe4a0b0e29d8ab9a65def34505e24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:5a:e9:42:27:55:fa:51:22:e1:e8:24:bd:
                    41:41:03:26:a5:d7:22:60:03:11:14:03:30:8e:07:
                    77:64:a1:18:d9:d8:bc:4a:98:a2:ab:e1:cc:36:38:
                    14:f7:df:41:97:6c:84:70:37:55:57:1e:f7:3d:6a:
                    d2:0f:0a:37:20:0d:4b:3e:bf:57:93:0b:e1:0b:95:
                    35:8e:20:fb:90:88:74:2d:29:32:96:6f:ab:e9:18:
                    41:9f:0a:ba:33:d0:d4:ca:fb:2b:c1:00:f0:8d:c7:
                    7a:3d:17:cf:8c:23:a5:ae:7b:23:98:8d:cf:17:15:
                    4e:d7:26:e1:68:08:c4:b5:1c:95:48:f5:b6:20:67:
                    4d:59:a7:aa:cb:48:f0:8e:b2:26:69:64:a0:90:37:
                    e2:d3:72:ba:a1:48:4a:68:aa:13:21:d0:80:72:09:
                    1e:fa:53:c0:87:03:47:51:2b:2e:d8:07:82:c0:20:
                    16:fe:ae:77:49:3f:f3:9f:43:ce:f7:01:0b:8f:9e:
                    c0:74:ff:8b:b0:06:56:9b:7d:cc:f6:06:15:c2:6d:
                    7f:68:ed:c4:71:3f:62:f5:05:41:a4:37:b2:8e:e4:
                    9e:b5:cd:a6:98:af:b1:fd:d3:24:25:3f:e8:c0:1c:
                    55:58:66:ae:96:ee:d8:f4:81:37:a1:24:7f:e8:c4:
                    92:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0A:24:AC:AD:BE:4A:0B:0E:29:D8:AB:9A:65:DE:F3:45:05:E2:4B
            X509v3 Authority Key Identifier:
                keyid:27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:75:f1:03:ad:98:e8:31:71:dc:ac:db:99:da:27:7f:ac:00:
         a3:2d:3f:84:28:15:eb:87:0b:a4:b3:cc:6f:46:59:07:b5:fd:
         81:45:1a:81:39:c7:df:c4:7c:82:cb:70:d3:4f:2c:62:9d:d5:
         27:84:0b:91:6b:53:91:75:22:07:6c:49:ef:fb:ac:dd:ae:54:
         09:01:26:f4:40:86:5e:bb:51:3e:c8:5f:65:ad:a2:72:fd:47:
         52:53:6a:5b:f8:2b:ab:35:26:7c:7f:99:e3:1f:c3:10:d0:46:
         ba:3d:20:5d:5b:9a:fe:ae:a5:fd:93:66:64:b7:57:5d:5f:3f:
         c9:20:d8:3e:81:04:d8:4f:76:61:87:b6:70:f3:0c:f6:62:85:
         8f:4d:e1:3e:e8:e6:6b:5b:24:2e:27:87:5a:3e:d4:ca:84:a1:
         10:15:c7:63:cc:43:d8:4a:90:f8:67:76:46:2c:25:dc:7f:fb:
         18:f9:f3:e8:93:e6:dd:84:42:d4:a0:6f:0a:fc:2b:ab:46:d7:
         2b:61:21:a1:79:ec:21:7b:d1:1a:e7:79:1e:26:4e:da:5c:9a:
         76:a1:e8:af:61:04:5a:41:05:0d:76:20:43:d8:1e:4a:e3:08:
         1e:15:ec:b8:72:30:68:88:88:2d:6d:f1:a1:97:5a:68:bd:9c:
         35:93:21:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:46:11 2026 by rpki-client