Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
File:                     _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json)
Hash identifier:          k+YQPgaJgZQLOdQsx5YtAk5+0JZfeaBmrVT6eXcYiUY=
Subject key identifier:   CE:00:C3:DB:2A:16:71:5C:6F:0A:51:63:C3:CD:07:9C:D6:7A:25:9A
Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
Certificate issuer:       /CN=fe340911274377a89ca1f9c15f180da986d744b7
Certificate serial:       019F1152D9F12DCF361EF62ADAD888FB62A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
Manifest number:          0617
Signing time:             Mon 29 Jun 2026 03:01:10 +0000
Manifest this update:     Mon 29 Jun 2026 03:01:10 +0000
Manifest next update:     Tue 30 Jun 2026 03:01:10 +0000
Files and hashes:         1: 9SBS7gJbmM_H_U69hDRLz5tqENk.roa (hash: CohDToPDWHyGMje9oQIew781Ud8ugON8LORc7w4Ntug=)
                          2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: EEX5aqaMI/wf87iyd8Upe8bOmm6oWT+hklc/eDaauBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:52:d9:f1:2d:cf:36:1e:f6:2a:da:d8:88:fb:62:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7
        Validity
            Not Before: Jun 29 03:01:10 2026 GMT
            Not After : Jun 30 03:01:10 2026 GMT
        Subject: CN=ce00c3db2a16715c6f0a5163c3cd079cd67a259a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ab:c9:1c:59:0c:0b:37:92:2e:32:a0:d4:b5:
                    d9:12:c0:28:6e:6f:54:c3:bf:20:1e:bf:83:ec:1f:
                    fe:fd:81:84:ae:59:b2:7e:29:b2:c4:3c:d7:e9:22:
                    8a:eb:e3:9d:fd:3c:c4:e7:9e:e7:85:41:fb:a4:d3:
                    56:03:c1:89:cd:13:c5:af:dd:e0:64:4b:25:23:dc:
                    24:25:04:3d:98:45:f6:15:f8:a8:a1:75:e1:4f:a5:
                    be:0a:f2:5a:35:5b:2f:25:a2:29:d3:76:e7:9d:a5:
                    1a:ec:8e:a8:c4:fa:b7:59:fc:c6:b9:e6:2a:63:e8:
                    83:95:7e:ab:1f:f6:78:e5:49:de:0d:13:d0:c7:11:
                    99:ea:12:87:c5:b1:6f:e2:36:f8:f8:68:78:72:43:
                    77:35:74:c5:61:ac:e5:fe:91:c8:81:45:8a:62:1b:
                    13:15:fc:d6:fb:fd:b2:72:d6:91:34:f8:64:a8:1c:
                    1e:a2:4c:9f:33:66:8e:db:25:7e:c5:cd:cd:96:0f:
                    a7:dc:ed:42:a7:dd:03:14:d6:cc:ee:03:db:be:1e:
                    07:9d:62:39:9a:f3:93:bd:65:67:9f:6c:be:b7:e3:
                    43:2c:0b:a2:28:74:a7:42:f9:90:70:17:7a:d3:0b:
                    cc:b6:f7:b1:ed:f8:82:bd:13:a8:62:de:df:9b:38:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:00:C3:DB:2A:16:71:5C:6F:0A:51:63:C3:CD:07:9C:D6:7A:25:9A
            X509v3 Authority Key Identifier:
                keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e1:be:4b:2c:33:18:5d:bc:1a:13:24:32:ac:8e:b5:4a:e3:
         f8:6e:53:c9:b6:ee:ea:83:7c:70:85:e4:3d:ca:3b:81:70:bd:
         c5:b4:09:27:4b:fe:0d:dd:d5:c3:f2:c5:3d:eb:51:57:19:3f:
         88:ba:b5:0a:b9:0b:d1:c7:a8:56:83:f6:d8:61:a2:09:50:36:
         9e:a3:6d:d7:3e:3d:ad:a8:f0:00:71:13:1e:2f:38:cc:c0:86:
         7f:71:40:06:e1:21:2b:b7:71:0d:a9:22:d0:a9:86:df:3d:c0:
         ba:7a:6d:5a:fc:4b:75:c4:47:f3:0f:a3:2d:37:f3:9e:5c:60:
         c4:f8:ef:89:27:89:63:c8:fd:6d:6d:e4:c3:c8:0d:10:2f:4a:
         fc:25:0a:fa:1e:f0:19:8f:8f:c9:42:10:08:d7:46:a4:f8:42:
         15:aa:cb:86:f0:ac:37:94:e6:7d:c7:e6:46:c0:2b:17:d6:01:
         dc:92:30:6b:6a:a6:40:17:af:49:07:14:46:36:6f:dc:78:32:
         73:97:fd:96:6d:10:5d:8d:48:90:1b:05:93:28:fe:90:fb:bb:
         0a:35:55:79:2a:6f:07:17:21:62:cf:6a:e5:b8:83:a8:5c:74:
         ed:f8:3a:18:f7:88:c6:71:a4:35:c3:48:fd:2d:73:d6:97:92:
         c2:27:3a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:23 2026 by rpki-client