Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
File:                     Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json)
Hash identifier:          ZCEL0w8OkFAg5CZ2PDebupRnRdTNBRNsCq79xaDn6zQ=
Subject key identifier:   BF:03:1D:3E:C1:B4:8D:CA:FE:6A:2E:00:BD:19:C4:FC:75:F7:03:C4
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Certificate issuer:       /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial:       019F18D64524CA085E4B6C4088FE15ACB82B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 14:02:03 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:03 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:03 +0000
Files and hashes:         1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: EYBQuBIPFF/HZHVCze20i+srzmvBaZ2P74QJr+yiOFs=)
                          2: e-pIqroMx8ktOvBXKbMUSY489PA.roa (hash: zD2XKbyMKOBSm6Gik/HGW9BbJtz+ToLcLdq/4K8Rj18=)
                          3: tg82jIBHH5LcgWYYM7zJbYrlVt0.roa (hash: n6rCSA1xOIDb4YmG15TQjoYexybekFDUsJodZaNLnM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:45:24:ca:08:5e:4b:6c:40:88:fe:15:ac:b8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
        Validity
            Not Before: Jun 30 14:02:03 2026 GMT
            Not After : Jul  1 14:02:03 2026 GMT
        Subject: CN=bf031d3ec1b48dcafe6a2e00bd19c4fc75f703c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0b:c7:03:4b:72:6e:89:b4:8a:f5:9b:2c:eb:
                    d8:25:23:d6:41:72:a4:f9:b3:be:3d:60:06:57:80:
                    d4:d4:b6:90:79:32:f8:e8:fa:0c:22:22:e5:fc:ad:
                    63:14:aa:10:02:b5:c2:a1:9b:dc:5a:b6:a3:eb:f1:
                    94:3e:41:5e:5d:be:38:64:7f:1d:c2:73:e1:15:4c:
                    04:e5:1e:66:f2:b9:11:d0:55:ba:7d:d2:b7:98:ee:
                    8d:fb:3b:bc:01:dd:26:4a:3e:09:9d:8b:27:38:03:
                    73:c2:89:85:69:79:93:6c:ee:59:cb:45:df:0b:98:
                    09:85:41:7e:62:a7:7d:5c:fc:95:a1:ed:50:27:05:
                    3d:9c:24:85:7a:5c:69:8e:24:65:0a:11:f9:90:99:
                    a7:e3:0c:bc:e9:92:5b:51:4b:28:2d:9d:13:1c:43:
                    9a:37:5b:36:72:93:e3:f0:df:4e:b9:79:d8:5a:7a:
                    fa:d7:95:ad:72:c1:a8:b5:bb:47:41:50:41:7c:50:
                    7f:a9:db:29:86:28:15:02:aa:e3:0e:bd:c9:b5:b6:
                    38:8c:b4:c3:d1:54:ad:b8:28:32:98:8c:8c:15:00:
                    a1:fa:37:fe:53:f3:0c:dd:45:07:38:6e:75:4e:f0:
                    fc:a2:70:cd:5e:89:6e:6c:e4:8b:a9:d9:12:fb:4a:
                    0a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:03:1D:3E:C1:B4:8D:CA:FE:6A:2E:00:BD:19:C4:FC:75:F7:03:C4
            X509v3 Authority Key Identifier:
                keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:72:2e:c0:94:c3:11:b2:d7:9e:07:96:1f:80:b7:81:e5:d9:
         78:9a:9d:55:e8:5a:4c:68:12:26:80:8c:93:98:a5:18:1c:8a:
         27:9c:28:ba:19:b0:96:b4:30:d4:65:76:b2:c3:b8:c0:25:f5:
         12:7b:64:aa:a0:3e:87:12:42:c1:13:e9:13:74:ef:04:78:1d:
         d7:41:9e:e3:59:14:5f:b1:e8:a3:e7:c8:e2:35:0f:7d:45:24:
         8d:19:50:34:2c:a8:22:63:1a:0a:5a:78:db:8f:bf:d4:dd:74:
         41:b8:7d:7d:82:dd:bb:42:62:0b:00:6c:cc:d2:b9:0d:e8:57:
         87:58:c3:b4:c4:02:5b:7e:bd:82:f4:c4:0f:74:25:79:cd:9d:
         59:30:d7:a7:93:fb:3f:b6:b3:b2:d1:49:0d:bb:6c:44:aa:46:
         9a:3a:6e:26:a6:4c:d1:56:e2:c2:09:0f:f1:91:f6:f2:d5:c8:
         1c:86:83:0f:f0:b5:e7:8c:38:34:2a:e1:6c:8f:d5:c7:2a:ac:
         98:2d:ca:e4:1f:47:19:56:ff:49:93:ec:f9:5a:85:ed:94:b1:
         9e:64:5d:95:bc:ba:e9:03:70:2e:38:2f:83:a8:ef:be:39:60:
         ec:75:48:4c:e5:5f:17:c0:f5:69:6a:9d:9e:a5:6f:66:85:8f:
         ba:56:b8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:21 2026 by rpki-client