Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
File:                     1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft (raw, json)
Hash identifier:          NAK92pYpPaZ5FMxR/Ax5+5vWaDa6vwz/sX9uoWuR+p0=
Subject key identifier:   9C:72:D9:E8:82:A0:CD:62:40:CD:84:48:9A:21:D6:95:04:80:8D:C9
Authority key identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
Certificate issuer:       /CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Certificate serial:       019F17F96FB1C75CF8015570D8CCC19ECC2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
Manifest number:          071B
Signing time:             Tue 30 Jun 2026 10:00:50 +0000
Manifest this update:     Tue 30 Jun 2026 10:00:50 +0000
Manifest next update:     Wed 01 Jul 2026 10:00:50 +0000
Files and hashes:         1: 0zJNP_Zrhzmc5S2W0e83m-7IfBI.roa (hash: pWQnInZ9CqxHtxn5Tca4LgLQUf2//UKZQVaoYXa+1S4=)
                          2: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl (hash: uP8oJtmbE2dn66wGgyvN4eAvdA9HWIRgjyNd6T8oxHA=)
                          3: exZJZ1LXS_XWUoEEXClUotzMvKs.roa (hash: 3zCaN398dTtCF4YEIkTfNp550PcdnP/Kt5xJ2IMRAQY=)
                          4: xf5PZxrbr-dkbQ2U7iTmmHrt4OY.roa (hash: iuA6Ubj9SVImqFnRUoknVGt5/lBTwc0pgWqE61xubQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:6f:b1:c7:5c:f8:01:55:70:d8:cc:c1:9e:cc:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
        Validity
            Not Before: Jun 30 10:00:50 2026 GMT
            Not After : Jul  1 10:00:50 2026 GMT
        Subject: CN=9c72d9e882a0cd6240cd84489a21d69504808dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:76:e8:3c:a3:47:03:18:a7:02:17:bf:53:b1:
                    01:ae:14:42:0e:dc:4b:e2:ba:56:e9:55:0d:b3:d9:
                    13:db:42:9d:57:37:df:0b:32:be:22:25:c0:65:56:
                    fa:f3:a1:a2:f2:e3:65:b8:e6:e9:e3:b0:04:68:92:
                    ec:df:1f:5b:3e:d1:bf:a8:26:cd:6a:88:bb:04:24:
                    88:9d:30:77:4e:9f:54:08:8d:9a:ce:4b:2c:1b:35:
                    94:66:a6:94:c4:76:a4:eb:10:30:c9:6c:24:d2:2a:
                    02:a9:f2:2d:90:0c:72:0f:0f:2f:ff:63:40:17:5a:
                    f2:3e:63:90:ef:14:c3:0c:aa:4c:1c:c4:e6:70:75:
                    d0:cc:8e:ec:65:14:de:45:2e:ba:6b:f9:93:64:08:
                    13:ae:1e:3f:8f:b7:80:3d:17:b7:87:3b:5a:27:57:
                    3e:eb:1e:31:60:c6:15:81:7e:11:39:84:b6:cb:0f:
                    3d:d4:50:aa:5f:29:c2:01:20:f1:98:a8:19:19:2f:
                    5a:b6:82:5f:0e:d7:34:e5:4d:e5:b8:b0:48:86:e8:
                    38:71:97:64:2c:84:9c:21:4f:5c:54:53:66:ca:02:
                    57:af:57:77:89:aa:dd:9d:67:92:f3:58:66:8d:a2:
                    ce:91:fa:06:8d:05:65:ba:94:a1:d2:0f:34:60:a1:
                    f4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:72:D9:E8:82:A0:CD:62:40:CD:84:48:9A:21:D6:95:04:80:8D:C9
            X509v3 Authority Key Identifier:
                keyid:FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:90:d7:11:f5:6c:ee:40:98:38:a1:e9:18:1e:a3:d4:61:b4:
         65:e0:36:82:36:64:02:e3:e5:89:fd:22:b7:96:a3:73:36:57:
         f7:77:a9:c2:36:52:58:5c:4c:cf:c7:95:e7:76:d9:aa:4c:00:
         86:29:09:44:04:79:ff:19:82:c5:77:22:06:4d:4f:b6:c7:d4:
         17:87:54:a0:15:95:42:72:4d:26:9e:bc:86:39:47:21:a6:07:
         ad:16:e9:ce:6c:42:b7:f6:bf:40:aa:ac:67:82:08:be:0a:fd:
         ac:f1:2d:e2:ba:c1:47:58:3d:c3:ab:0e:d3:01:5e:1b:33:dd:
         e2:f2:40:c2:2d:f5:f5:02:9e:27:a0:45:b3:d4:e8:33:76:37:
         95:1e:e3:1a:15:af:3f:55:77:73:39:54:f8:ab:34:cd:e9:89:
         23:7c:6a:47:33:b5:df:ab:3b:bb:71:0a:c1:7d:68:c3:2b:33:
         e9:30:20:fd:13:3b:8b:c5:6e:17:ae:c2:08:f4:f1:3b:5e:ae:
         db:e4:24:47:d4:f8:28:5b:2e:2a:73:41:8e:5f:d7:c4:2b:a3:
         eb:d8:eb:fd:1e:9b:37:86:e9:94:b1:c5:37:24:12:26:f7:dc:
         35:c2:3a:3f:d1:18:6b:c6:f7:57:47:e7:86:12:93:23:7e:b8:
         c5:3e:16:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:46 2026 by rpki-client