Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
File:                     JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json)
Hash identifier:          2S0Z+OnfeZhDwyOM3one7lyQgRUEEKAjKp+LSDVGQHw=
Subject key identifier:   09:52:C1:83:79:2C:B9:34:A5:66:08:0E:EA:62:1E:B5:C2:64:B8:C9
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Certificate issuer:       /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial:       019F0AAC9A7B9C4809D44015EE96CD534384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
Manifest number:          0A5F
Signing time:             Sat 27 Jun 2026 20:01:51 +0000
Manifest this update:     Sat 27 Jun 2026 20:01:51 +0000
Manifest next update:     Sun 28 Jun 2026 20:01:51 +0000
Files and hashes:         1: A5wtuBfY6dxUh5eS44FlMqwcmog.roa (hash: tZbTVJ0vSZUIP4JV/ZEsCDLjrfqC4a0hum2qjGz/VQE=)
                          2: C6kXQbmf9ed-Rd3RlEcWQXFNlRk.roa (hash: DW0PJcH29KhjZVwZo0qWO+ll1hc593uNe8QjdzH0uYc=)
                          3: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: pc2zCpCVbF0c3W2FqALE+8jcbGcTfHF2eHqQRR5FZjo=)
                          4: Prtm22vbQehmnlO5aEmPr0BFZa4.roa (hash: 2TJTM+cDnTV/eFEpw6CMVHfCzUzdPWSSepuSHNmY9Qo=)
                          5: ROVyIAsBNfwBer4Npp8bVnXZW2U.roa (hash: Z2rohR1T9JeCw9lXsHTXnEJbzYMGmnxfv3f6fLAZwjY=)
                          6: SN7iUL1ZTDZriT9WldHFs3bgME4.roa (hash: KkH9Un51EAXewil4Qmtkkj2B60LR6wL89EVPG96bBUw=)
                          7: vYV80pMOfJdsEu4niWAcrkBUgNc.roa (hash: gHF1ZhItzUzKri2+egaA2O0GGW8DIyzH1CkBWVld6xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0a:ac:9a:7b:9c:48:09:d4:40:15:ee:96:cd:53:43:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
        Validity
            Not Before: Jun 27 20:01:51 2026 GMT
            Not After : Jun 28 20:01:51 2026 GMT
        Subject: CN=0952c183792cb934a566080eea621eb5c264b8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d5:82:67:c6:2f:d4:93:fb:b7:31:e7:83:97:
                    78:6f:3f:87:6e:d0:4e:f8:a5:03:f5:dc:cf:ae:8d:
                    d9:88:db:15:c0:4f:08:88:8b:67:9a:9a:43:f3:f1:
                    cb:3a:31:fb:19:6d:bc:c5:7b:55:fe:d2:79:53:e8:
                    c8:1e:9c:c1:58:30:43:96:c0:2b:4c:16:a4:ed:4a:
                    ca:7f:5b:e3:cf:c6:b8:b6:91:58:6c:1d:ca:c1:de:
                    bf:a1:12:ac:cc:72:cb:f0:b1:72:8a:7f:3c:e6:b3:
                    52:dd:e6:66:8b:fb:25:20:af:31:24:eb:e1:08:66:
                    d5:e4:0d:25:d2:31:26:55:4c:d8:11:75:54:04:42:
                    f9:7b:45:f8:37:22:32:6c:c6:de:76:aa:b0:14:f0:
                    14:38:e5:9f:ec:81:42:6b:81:74:eb:58:8c:14:29:
                    b1:07:57:3b:30:9e:94:4d:c8:ba:37:35:d3:69:18:
                    e1:c0:8c:c4:7e:06:df:3a:18:34:74:c0:12:9c:3b:
                    9e:f4:cf:6c:9d:2f:70:fe:b6:47:3e:1a:d0:b1:a2:
                    00:4f:0c:c2:2b:b8:a3:50:0f:1f:cb:3a:a8:3c:c7:
                    a3:77:fc:cd:b6:fa:9a:94:65:d1:9c:41:af:68:e1:
                    59:00:2e:45:49:5d:6a:74:82:61:0a:aa:24:d7:38:
                    ed:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:52:C1:83:79:2C:B9:34:A5:66:08:0E:EA:62:1E:B5:C2:64:B8:C9
            X509v3 Authority Key Identifier:
                keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e2:df:bb:96:65:06:90:87:9b:af:05:25:93:f8:76:e0:ef:
         6d:27:cd:f3:ce:38:01:16:04:08:d0:58:10:ef:e0:cd:fe:64:
         2e:78:b6:23:11:b3:91:b6:46:8f:72:8b:85:3c:11:40:81:c0:
         03:ba:55:b5:26:96:c2:01:bd:2c:37:d7:28:b9:df:f6:19:6b:
         bf:6c:92:7f:a7:86:45:84:13:2b:41:20:e2:ea:cb:ca:ec:d7:
         8a:3a:5e:e9:39:60:10:70:60:22:13:c6:96:3f:3c:da:e7:b0:
         4a:29:c1:32:01:23:e8:11:96:60:10:43:5a:f9:8d:fe:23:4f:
         fd:53:8f:7b:2f:51:34:ad:d3:14:95:6c:8b:06:13:a6:63:10:
         58:cc:4e:55:a5:e6:2f:21:05:17:9e:ee:6e:3e:7c:4c:fc:28:
         06:8b:4d:67:4e:6c:c5:b9:14:6d:31:e9:cf:3c:c0:b0:ed:75:
         80:ce:b5:6a:e0:82:7e:9b:04:48:d1:8a:a2:79:87:74:8d:b9:
         eb:27:e4:44:70:82:36:d9:81:08:13:47:46:48:33:28:96:9e:
         64:b5:69:cf:fa:4e:49:c1:f0:a3:9f:8d:a6:a6:cb:9b:98:48:
         13:a4:21:63:34:11:51:f9:e9:26:d3:6e:c9:35:73:1b:1c:ea:
         bc:c7:30:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 23:12:45 2026 by rpki-client