Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File:                     JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier:          q8TJTi+hAHUJbCYuVt0IMhzXR6SfONOgHX5d5MtMGSc=
Subject key identifier:   F0:A7:0A:1C:93:BF:22:F2:75:CC:90:6E:C5:8F:9C:E2:BF:8B:B3:E2
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer:       /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial:       019F111C7934A5E02284758813A585A7A676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number:          17F6
Signing time:             Mon 29 Jun 2026 02:01:46 +0000
Manifest this update:     Mon 29 Jun 2026 02:01:46 +0000
Manifest next update:     Tue 30 Jun 2026 02:01:46 +0000
Files and hashes:         1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: 0YqnEGFgP4f948uDtWGuiAHLBygv/9oOCim/qpLUoT0=)
                          2: QT5YaQtwh10kjLMseFaZ5StOfCw.asa (hash: mXFjq/NajihGSXsqBXu5vBTGi2iI8iMdEQGHWiYPM84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:1c:79:34:a5:e0:22:84:75:88:13:a5:85:a7:a6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
        Validity
            Not Before: Jun 29 02:01:46 2026 GMT
            Not After : Jun 30 02:01:46 2026 GMT
        Subject: CN=f0a70a1c93bf22f275cc906ec58f9ce2bf8bb3e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c5:6b:9c:22:99:ee:5c:19:63:2c:03:72:0d:
                    d4:d9:70:f3:f7:d2:01:99:e9:d2:35:58:6a:4d:2a:
                    9f:d9:17:9a:70:db:c6:48:39:13:80:3b:de:df:f1:
                    45:e1:50:41:44:a9:1f:41:7a:49:1f:a0:65:d9:55:
                    19:2c:16:76:4c:a8:8b:f0:06:aa:90:13:9e:82:fe:
                    2b:e9:71:cd:bd:d9:e7:d6:87:96:9f:1d:71:44:f8:
                    a1:1b:08:96:b8:ec:c2:bb:f4:6c:c1:11:31:a9:47:
                    69:1f:21:86:9c:68:f9:56:fd:a6:ec:d6:33:62:4e:
                    54:2d:7d:c0:98:53:05:9e:77:e9:51:73:07:f7:bd:
                    c1:81:5d:46:5f:1f:e0:62:ba:10:69:2d:f4:65:b0:
                    fb:e7:3c:cb:af:ad:11:54:8f:e0:ea:db:e4:f5:66:
                    91:24:2f:98:2d:9a:a9:4b:5e:db:2d:cc:fa:19:fd:
                    cb:3c:73:11:32:62:b7:0b:63:0b:5e:ab:d5:5d:06:
                    b7:b9:f4:82:4c:a6:d4:e3:0e:2b:d8:b2:1b:fe:1e:
                    0a:19:63:6d:bf:e2:25:41:5e:53:c4:3f:bc:78:87:
                    5a:73:47:c5:a6:cb:63:06:be:04:98:55:55:97:ed:
                    92:16:9c:0e:0c:ca:84:63:6d:61:06:fe:a4:ad:4d:
                    d0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A7:0A:1C:93:BF:22:F2:75:CC:90:6E:C5:8F:9C:E2:BF:8B:B3:E2
            X509v3 Authority Key Identifier:
                keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:8e:4f:3c:88:28:b4:9d:ee:f0:a4:8a:cd:10:45:50:2b:ff:
         73:ab:d8:6d:9b:5b:88:d5:89:73:ea:83:51:56:bc:bc:4e:a2:
         39:df:b2:e7:1a:73:b2:66:98:44:6f:0d:43:e1:44:5e:11:b0:
         39:ab:1e:4f:51:73:bc:72:46:89:d4:f9:89:30:e0:3c:2a:e1:
         8c:f8:16:bb:96:e0:94:26:7d:96:9c:84:6e:bf:d6:86:45:53:
         62:55:33:99:13:2d:60:20:3d:8c:c9:36:0f:b0:d2:b0:8e:03:
         88:c5:82:c2:a0:1f:35:9b:98:ef:4f:30:ce:c7:ff:a1:c6:15:
         d5:d3:e4:09:6e:16:65:a1:ac:97:8c:47:71:f9:84:40:5b:3b:
         1f:80:9e:6a:04:1b:43:1f:35:7d:42:c8:72:9d:71:76:3b:59:
         c3:89:db:41:bb:24:e0:6c:c3:13:2c:10:40:b0:12:64:a1:30:
         dd:35:14:57:ab:01:a8:14:a3:07:bf:45:37:a3:da:3c:41:62:
         ac:1d:f8:de:1f:19:02:68:28:2d:f2:d0:ae:c6:f1:32:8a:6b:
         fc:d8:c4:3f:b5:3b:b3:e4:8a:d1:03:11:3e:29:80:04:22:cd:
         5b:97:27:a4:46:b1:ec:e7:99:98:b8:a4:0b:a5:75:a5:1d:83:
         85:d2:b7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:39 2026 by rpki-client