Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/5f79b1-4d13-4732-bd27-63882877ef16/1/JuiVZaFGyllM_TtJFCd3oZyzat4.mft
File:                     JuiVZaFGyllM_TtJFCd3oZyzat4.mft (raw, json)
Hash identifier:          QLj+Yj/7Dm46o2MPWiGfqMG8jZ1lGBhClw7SGAYLx5Q=
Subject key identifier:   6E:F4:04:FE:E0:3F:5A:C4:DE:3E:23:93:01:C8:A0:F8:46:3C:9C:C2
Authority key identifier: 26:E8:95:65:A1:46:CA:59:4C:FD:3B:49:14:27:77:A1:9C:B3:6A:DE
Certificate issuer:       /CN=26e89565a146ca594cfd3b49142777a19cb36ade
Certificate serial:       01A06D9508A2025BABA7782008A0BA1FFEB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JuiVZaFGyllM_TtJFCd3oZyzat4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5f79b1-4d13-4732-bd27-63882877ef16/1/JuiVZaFGyllM_TtJFCd3oZyzat4.mft
Manifest number:          DE
Signing time:             Fri 04 Sep 2026 18:01:18 +0000
Manifest this update:     Fri 04 Sep 2026 18:01:18 +0000
Manifest next update:     Sat 05 Sep 2026 18:01:18 +0000
Files and hashes:         1: JuiVZaFGyllM_TtJFCd3oZyzat4.crl (hash: d+qlgdHktvrrQChz62C9bA8oa6mcHHM/mLl/C3MjbOM=)
                          2: q4Cca3sE-zKf6HtcGsocUrAQM0o.roa (hash: W22Z+Cwog2SpVewzgsjNaqi66bmEVe85hPmA9Jeo6Lg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/5f79b1-4d13-4732-bd27-63882877ef16/1/JuiVZaFGyllM_TtJFCd3oZyzat4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/5f79b1-4d13-4732-bd27-63882877ef16/1/JuiVZaFGyllM_TtJFCd3oZyzat4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JuiVZaFGyllM_TtJFCd3oZyzat4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:95:08:a2:02:5b:ab:a7:78:20:08:a0:ba:1f:fe:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26e89565a146ca594cfd3b49142777a19cb36ade
        Validity
            Not Before: Sep  4 18:01:18 2026 GMT
            Not After : Sep  5 18:01:18 2026 GMT
        Subject: CN=6ef404fee03f5ac4de3e239301c8a0f8463c9cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d5:a9:f3:a4:8d:c3:f1:dd:0c:a1:09:df:24:
                    5a:7c:bf:dc:bf:dc:fe:30:a1:3f:7c:57:2c:2c:fe:
                    ac:48:c0:80:65:61:32:92:74:4e:a2:0c:70:e5:29:
                    43:3d:c2:f2:ed:c6:e3:e0:50:61:7b:74:38:74:66:
                    b0:9c:70:15:0b:fc:81:9a:2e:21:35:15:f4:44:4b:
                    55:92:64:d4:34:58:d2:05:e7:de:58:1e:ee:c8:21:
                    53:cb:e2:88:e2:48:cb:24:72:b4:4e:fc:fe:eb:a3:
                    a0:7c:d2:73:83:be:ae:1b:f6:d2:bd:3e:35:f7:50:
                    df:4d:12:2b:bf:34:1b:61:23:1c:ee:eb:00:66:de:
                    e8:a7:65:b5:35:78:ca:48:1e:3c:6d:cf:72:64:8e:
                    b7:44:69:e4:f7:b0:77:e7:6a:98:dc:be:52:9c:a5:
                    d9:29:9d:07:fb:32:72:c7:ab:0d:b7:54:a9:74:25:
                    c5:e8:1e:5e:8f:65:3c:06:89:03:ff:5a:ad:67:a2:
                    2f:1a:95:b3:be:85:8c:f0:4d:44:35:f9:83:71:6e:
                    ac:3a:89:94:d6:e6:5f:7b:d2:db:53:f9:5b:8a:55:
                    c5:e3:43:58:77:06:4d:9f:1f:35:90:7b:da:be:2f:
                    fa:f7:c9:57:33:e8:e5:c6:e3:37:b9:d6:11:b4:15:
                    bd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F4:04:FE:E0:3F:5A:C4:DE:3E:23:93:01:C8:A0:F8:46:3C:9C:C2
            X509v3 Authority Key Identifier:
                keyid:26:E8:95:65:A1:46:CA:59:4C:FD:3B:49:14:27:77:A1:9C:B3:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JuiVZaFGyllM_TtJFCd3oZyzat4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f79b1-4d13-4732-bd27-63882877ef16/1/JuiVZaFGyllM_TtJFCd3oZyzat4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f79b1-4d13-4732-bd27-63882877ef16/1/JuiVZaFGyllM_TtJFCd3oZyzat4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a3:5c:80:f5:d0:76:7a:4b:dc:ee:aa:e8:52:0f:52:b2:63:
         f2:b4:44:92:8b:92:6c:a9:f1:60:94:e8:25:49:6f:b3:c9:db:
         f7:f3:ce:d5:2e:19:d3:9f:02:41:6c:13:c3:09:77:c1:42:4b:
         38:a9:7c:ba:64:09:c9:f9:3d:69:db:44:b2:90:9e:a8:3b:8c:
         88:b4:2b:da:6c:39:67:3d:e5:44:58:86:cf:6a:28:a0:93:f0:
         11:b3:96:04:0c:f4:1d:79:60:da:4b:60:34:45:f3:af:61:a1:
         8d:c4:91:46:0f:2b:6c:3c:97:c4:b2:26:19:7b:d4:0a:53:cd:
         e5:6a:c9:9a:98:48:7f:f1:e5:60:2c:dd:b3:90:89:c6:5f:02:
         67:8a:87:c3:86:a6:60:30:34:b5:09:79:6f:dc:f6:1e:4c:f6:
         09:ee:8a:7d:3f:95:6b:6e:99:a6:ab:f5:36:14:10:60:e3:d2:
         a9:4d:55:1c:ab:de:cd:03:30:06:21:48:df:43:d0:14:7f:ac:
         49:9c:50:4b:de:20:30:a4:a9:3d:be:37:f3:9b:9e:aa:1b:22:
         01:cf:ff:a8:77:b9:2c:dc:23:dd:5a:66:fe:a2:30:a6:f7:f0:
         7c:54:71:04:93:df:43:5c:86:2f:c9:e5:28:36:03:28:c0:31:
         8d:ef:44:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:37:19 2026 by rpki-client