Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File:                     jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier:          77ZvzRUY9fiuyj8pWeX+Tecbwx6MVvgfepOytue0dIE=
Subject key identifier:   5F:FD:03:2F:57:13:50:D8:BB:1C:A5:5A:50:2A:A3:12:EB:8C:C8:85
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer:       /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial:       019F1A8D40BC86FE1FFBB06E71080274B115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number:          11FD
Signing time:             Tue 30 Jun 2026 22:01:32 +0000
Manifest this update:     Tue 30 Jun 2026 22:01:32 +0000
Manifest next update:     Wed 01 Jul 2026 22:01:32 +0000
Files and hashes:         1: hJ4yBwRAkPSn0hZDZUYf9X3bnuA.roa (hash: SieYkKpzIy6oq5VVbN7rTFUvyMh99g+Bi6wzQEIEdkQ=)
                          2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: 1515Kwl5m2LHaM87+BxplfHnhzzyBC0KXrIU6dZjrHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:8d:40:bc:86:fe:1f:fb:b0:6e:71:08:02:74:b1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
        Validity
            Not Before: Jun 30 22:01:32 2026 GMT
            Not After : Jul  1 22:01:32 2026 GMT
        Subject: CN=5ffd032f571350d8bb1ca55a502aa312eb8cc885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e0:22:8f:b3:42:af:92:65:ce:e4:35:84:22:
                    ab:e8:34:7d:de:ff:28:d8:97:45:49:11:aa:a4:93:
                    0a:9b:73:33:a7:1b:63:aa:97:1d:19:73:2f:dd:cc:
                    b7:ab:fe:10:2f:95:ce:c8:92:e6:51:4b:e5:db:2c:
                    9e:1e:e1:37:a1:5c:0f:c8:b7:57:d5:f8:74:af:1b:
                    8b:8e:b6:49:96:6f:de:ef:b8:3f:1e:4e:86:9c:a6:
                    63:f1:84:89:d4:a0:ec:bb:3a:3b:6b:6d:00:b9:88:
                    b5:42:33:d4:bc:5a:42:62:43:f2:6b:9d:00:be:fd:
                    2b:5d:2a:38:c2:c5:6f:60:06:b7:6d:24:f0:fa:a5:
                    8b:3b:83:9a:33:16:c1:7f:55:5d:86:3d:cd:6c:99:
                    9e:c9:50:06:1a:41:62:63:8f:77:28:5c:90:eb:e2:
                    1e:07:86:55:68:ea:fe:bd:41:2e:9d:9a:9e:68:d1:
                    59:fb:7e:70:b4:c0:b7:26:ff:97:9c:7e:a6:d1:bf:
                    3e:b9:01:64:c8:e3:26:53:5d:25:fe:59:b7:a0:25:
                    ea:6c:70:6f:cb:ee:1b:11:9f:01:d9:0f:ec:90:3b:
                    23:38:e0:87:27:cd:ac:eb:1e:17:3a:8e:aa:03:47:
                    0d:53:36:81:36:8f:e7:00:08:6e:37:88:14:3b:ca:
                    00:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FD:03:2F:57:13:50:D8:BB:1C:A5:5A:50:2A:A3:12:EB:8C:C8:85
            X509v3 Authority Key Identifier:
                keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f8:61:89:f5:39:9f:5f:75:8a:81:21:ff:e0:bc:6e:7f:4b:
         96:7d:64:42:35:4d:3f:45:36:ca:ac:67:cb:bc:18:59:32:dc:
         4f:0b:f9:59:98:c7:80:8d:1e:b0:80:a0:d0:1e:54:f0:0f:f5:
         4d:c3:ac:d1:76:bd:92:29:4f:d5:9a:26:bf:d2:0a:b4:72:61:
         c5:87:8a:04:33:90:e0:4e:2a:83:52:db:a8:3f:e7:b3:2b:22:
         cf:bb:1a:de:f5:83:b1:ed:14:be:1f:3a:58:97:dd:4b:f7:e0:
         ce:9e:2a:61:cb:3b:21:87:ed:37:3e:7c:97:21:cc:7d:7a:2e:
         ec:24:59:15:45:66:09:88:48:2b:1f:e4:b1:a5:d3:1a:31:72:
         94:1b:3c:31:06:d5:39:c8:d1:60:76:9e:3b:b7:ba:af:96:6a:
         e8:7a:f1:67:3f:78:73:4c:0c:95:89:60:7c:ef:8f:73:e2:cb:
         b0:68:0c:0c:bf:8f:88:0d:f1:96:6b:06:4a:73:80:c3:f9:c5:
         74:f0:a5:bf:ca:f3:18:86:2d:1d:6c:63:76:6b:72:14:7a:3a:
         ed:01:cf:35:9b:f0:1d:c1:bc:ff:47:4a:08:64:ed:fb:c8:d6:
         84:a9:67:60:a3:61:d9:ac:fe:d0:df:52:00:a5:29:f0:17:37:
         d0:50:1c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 00:36:20 2026 by rpki-client