Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
File:                     JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json)
Hash identifier:          uleQ1GxpOTU9jReE63QMOLl30pgma9l5BkqKQOOC54M=
Subject key identifier:   66:D4:FD:E2:2C:69:72:69:A4:03:67:24:A1:27:D4:7B:E8:0F:F7:A0
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Certificate issuer:       /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial:       019EE7E97568D2A4A8618E7FB42B3989B04C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
Manifest number:          174B
Signing time:             Sun 21 Jun 2026 02:01:37 +0000
Manifest this update:     Sun 21 Jun 2026 02:01:37 +0000
Manifest next update:     Mon 22 Jun 2026 02:01:37 +0000
Files and hashes:         1: 5tyTgc_srf_03kELs6a4U2s2DWk.roa (hash: wbWsBOeJNFN6rAIBpjdQWOFJx9S5x9ucHlt9PYYje98=)
                          2: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: QEvdpleuwurJnvoM7fZu90t57xHpz9E3IKuJE3GS1DI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 21:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e7:e9:75:68:d2:a4:a8:61:8e:7f:b4:2b:39:89:b0:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
        Validity
            Not Before: Jun 21 02:01:37 2026 GMT
            Not After : Jun 22 02:01:37 2026 GMT
        Subject: CN=66d4fde22c697269a4036724a127d47be80ff7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e9:04:9d:10:2a:69:f7:3c:6f:8d:16:d3:32:
                    3e:63:fc:9c:1d:35:60:40:db:9d:fc:6e:ff:1d:c5:
                    0d:5b:61:82:5c:36:73:55:57:0c:ea:b8:34:18:3e:
                    db:a6:b7:b2:4f:97:5d:48:8b:2d:10:ee:8f:02:27:
                    72:d8:92:c1:63:76:d2:aa:71:9b:48:a4:ad:50:7c:
                    83:e7:4b:aa:70:79:12:14:84:0d:fe:52:4a:42:d2:
                    1c:b9:78:f2:eb:b2:5e:c4:e8:47:fe:18:19:24:cd:
                    54:a5:7e:57:49:37:83:55:eb:9b:53:9b:85:eb:86:
                    e4:28:90:47:5e:a2:45:a0:d7:f5:23:ca:f7:b6:ec:
                    43:be:30:f1:8c:44:cc:98:25:6c:b2:d7:de:99:59:
                    78:cd:90:53:8d:73:15:db:d8:98:85:24:ae:56:dd:
                    ea:78:2d:4b:54:5a:06:51:23:85:f5:e6:e8:21:d4:
                    bf:a7:2f:49:1b:99:c7:2b:b0:ea:60:08:97:0c:e9:
                    aa:ab:b8:ff:7f:c4:57:ee:9c:30:fe:3d:86:2a:79:
                    69:17:5a:1a:d6:c1:83:50:6a:1c:a4:30:76:29:38:
                    cc:d4:1f:9f:82:4d:95:51:c1:07:4f:03:55:06:95:
                    68:ff:4f:82:b1:ee:8d:99:f0:a3:4c:7f:6b:b0:1c:
                    f6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D4:FD:E2:2C:69:72:69:A4:03:67:24:A1:27:D4:7B:E8:0F:F7:A0
            X509v3 Authority Key Identifier:
                keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:fb:3e:42:98:20:59:67:d7:b5:56:58:ed:3e:b6:73:74:d4:
         d8:d6:f6:7c:07:32:75:c5:de:27:a3:66:4f:ff:ac:24:f4:cf:
         aa:c0:07:bf:08:f9:95:7e:11:a6:fd:a6:ac:f7:04:b9:a8:8d:
         85:78:e6:9b:3b:4f:e3:89:51:ba:3f:f3:c5:a5:41:c0:13:f8:
         63:c3:cf:2f:1e:03:a5:cd:a8:96:ba:90:f5:22:83:6d:fa:36:
         65:a4:57:0a:e5:15:80:dd:9e:b7:81:4d:6e:3f:ed:9f:f3:cb:
         d6:20:4f:45:84:a1:22:fc:4c:d2:3a:d0:35:ac:ab:13:96:05:
         88:70:c7:c0:de:45:cf:2a:06:cc:39:e0:db:5b:76:a8:7e:e2:
         38:d8:f6:f3:55:0f:fe:43:e2:1b:3b:90:a9:9a:c9:19:91:98:
         68:07:22:be:b2:85:28:b9:84:d2:8f:09:48:4d:29:61:88:46:
         04:94:ec:58:b4:eb:4a:68:5c:b0:ef:3c:ce:f6:05:2a:a7:14:
         e7:06:b6:ba:57:e8:ee:d8:95:4c:d1:c4:e3:5b:d4:75:b4:9a:
         8e:d9:bd:eb:c5:ce:74:2a:4a:b1:3b:eb:5a:37:d8:e0:cf:5a:
         c4:12:d3:28:3f:c0:8e:34:b6:74:aa:77:90:33:12:6d:c8:c8:
         0b:3c:a3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:17:54 2026 by rpki-client