Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.mft
File:                     JjRrQucioj8zB71y9XN2LAJPI4U.mft (raw, json)
Hash identifier:          8bGKgQ1LQSUNtdsCc5BfuPJPkN+IAfZVQiW84HWKpvw=
Subject key identifier:   A5:A8:B9:EE:2C:AE:41:EA:0C:42:DE:E7:E8:E5:6E:AF:93:3B:6C:F0
Authority key identifier: 26:34:6B:42:E7:22:A2:3F:33:07:BD:72:F5:73:76:2C:02:4F:23:85
Certificate issuer:       /CN=26346b42e722a23f3307bd72f573762c024f2385
Certificate serial:       019EB57BAB4E55584303DF22043D5B5A3902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JjRrQucioj8zB71y9XN2LAJPI4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.mft
Manifest number:          5F
Signing time:             Thu 11 Jun 2026 07:00:41 +0000
Manifest this update:     Thu 11 Jun 2026 07:00:41 +0000
Manifest next update:     Fri 12 Jun 2026 07:00:41 +0000
Files and hashes:         1: JjRrQucioj8zB71y9XN2LAJPI4U.crl (hash: cUK33M6vVJSWwbJXu9vCzQdfN5T/oBCg8oIDyTCxD1Q=)
                          2: q8RepG1EYgx-WqxItUPX_OH0OX0.roa (hash: b4kZ60ZayB+5ne7ycneOFCjARrzoZ1efrTrEpXK66A8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JjRrQucioj8zB71y9XN2LAJPI4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 07:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:7b:ab:4e:55:58:43:03:df:22:04:3d:5b:5a:39:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26346b42e722a23f3307bd72f573762c024f2385
        Validity
            Not Before: Jun 11 07:00:41 2026 GMT
            Not After : Jun 12 07:00:41 2026 GMT
        Subject: CN=a5a8b9ee2cae41ea0c42dee7e8e56eaf933b6cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e0:92:96:82:02:1f:4e:16:43:a7:dc:61:ce:
                    7f:1b:1a:9c:ff:5c:43:92:a9:2e:d4:bf:37:9c:70:
                    d0:13:0a:3c:a3:bb:48:80:84:29:7c:11:46:d7:a9:
                    9f:62:a5:21:56:67:83:93:c4:8a:e6:7f:8c:ca:99:
                    ab:77:aa:c0:4a:36:55:35:a2:ed:ef:bf:df:17:aa:
                    82:a5:04:00:ef:8f:f5:cc:e8:09:2b:5f:70:29:58:
                    72:27:f0:09:05:2c:8d:72:00:b2:a4:8c:5f:76:58:
                    0c:5a:be:d8:d9:48:e5:91:ea:e5:f7:d4:44:36:d5:
                    21:05:81:26:3d:c4:aa:c5:f8:e4:03:7d:fc:c1:f1:
                    d0:c8:42:04:d3:5a:83:b2:22:e8:00:dd:7d:ca:86:
                    b2:fb:a4:9f:58:83:ec:e1:40:f8:85:4b:45:e1:f4:
                    c9:10:30:8b:d5:c4:4d:60:c4:b7:f9:fc:09:b9:1a:
                    00:7d:9d:8f:b6:12:0d:c8:7e:b9:49:3c:bb:a6:f9:
                    3d:74:6a:f9:fd:c1:cc:1b:81:1a:fe:4d:e9:f4:40:
                    3e:26:b7:f1:af:f1:a3:04:69:99:fc:93:84:3d:c6:
                    25:ab:e2:a0:16:ce:27:6d:e4:f1:c0:14:65:6f:ba:
                    f0:70:1d:19:c3:bb:84:27:31:3c:aa:61:2d:0c:1d:
                    9f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A8:B9:EE:2C:AE:41:EA:0C:42:DE:E7:E8:E5:6E:AF:93:3B:6C:F0
            X509v3 Authority Key Identifier:
                keyid:26:34:6B:42:E7:22:A2:3F:33:07:BD:72:F5:73:76:2C:02:4F:23:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjRrQucioj8zB71y9XN2LAJPI4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:da:6e:ed:3b:16:ca:f3:1e:d5:cc:64:d6:c4:39:5a:38:52:
         b4:b0:9c:2a:b5:49:be:48:a2:d6:2a:73:20:38:b8:cf:3a:93:
         8b:dc:87:11:b0:60:c4:91:26:8a:06:1a:30:80:46:95:b3:f7:
         c2:01:70:c0:35:9f:45:ad:ee:92:b2:40:d6:19:c3:97:4f:58:
         68:ad:11:ae:73:2f:28:11:ae:1f:df:95:3b:bb:b8:7b:82:e0:
         b4:b5:07:c7:33:4e:5a:60:79:b0:e7:34:0f:4b:55:78:33:d7:
         e0:03:8f:ec:4c:95:a9:ce:b9:e6:55:5b:23:eb:d7:13:5b:e7:
         98:8b:07:9e:9a:aa:c4:27:2a:86:a8:4d:16:38:e0:60:6c:a6:
         be:c6:f3:3f:15:a8:df:df:98:16:ff:1e:6c:85:b0:3b:8a:b1:
         59:4d:55:c6:b0:0f:d0:fb:bd:a3:9d:5a:1b:47:6b:c5:1f:64:
         aa:d9:3f:41:d1:5c:69:1f:02:3f:a8:29:df:d2:d9:db:9a:fd:
         b6:68:2b:bc:84:74:da:37:4f:73:a0:6c:13:73:07:6a:ac:cd:
         27:37:ca:d4:f8:3f:68:b6:a8:b6:6e:78:02:e9:20:2c:5b:e2:
         85:8e:11:9a:7d:42:ea:3f:73:30:12:d6:54:ab:8a:2e:bf:83:
         f1:cf:73:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:27:05 2026 by rpki-client