Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
File:                     JpfuW-qVtvypLXyABbJTHQ1RBGg.mft (raw, json)
Hash identifier:          ZB2pMvGmuSI524sPQAWfAWhG60/siFeeRv0iNw+v6mE=
Subject key identifier:   9B:D7:CC:B7:8E:A3:D4:59:BF:18:60:16:95:7A:72:55:26:EA:D4:ED
Authority key identifier: 26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
Certificate issuer:       /CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Certificate serial:       019EB87D179957B418F4DF6EBED6A0334787
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
Manifest number:          169C
Signing time:             Thu 11 Jun 2026 21:01:06 +0000
Manifest this update:     Thu 11 Jun 2026 21:01:06 +0000
Manifest next update:     Fri 12 Jun 2026 21:01:06 +0000
Files and hashes:         1: JpfuW-qVtvypLXyABbJTHQ1RBGg.crl (hash: BJ4C98c4wQo1FlGi0JnRa/qm3KGhYHl7vtsbc5M6Ttg=)
                          2: rc_J4XOHhixLylCcfyExPkYQnWs.roa (hash: kaE6EoD8hyc9JZvUwXOFpWk4FxFp7L/CsoCCjqyPHoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7d:17:99:57:b4:18:f4:df:6e:be:d6:a0:33:47:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
        Validity
            Not Before: Jun 11 21:01:06 2026 GMT
            Not After : Jun 12 21:01:06 2026 GMT
        Subject: CN=9bd7ccb78ea3d459bf186016957a725526ead4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:69:08:cc:fc:ae:8d:2d:4d:61:ff:6c:f8:
                    66:68:8b:73:fa:e1:c7:b3:02:69:5c:2e:09:c3:b3:
                    ba:0c:cc:35:50:30:0f:3f:f9:55:fb:5b:5e:03:c3:
                    bf:6e:05:c0:ed:6c:23:c1:17:58:f7:78:cd:b6:8b:
                    87:6a:7b:a5:b3:2e:5c:f3:66:f1:24:2b:72:99:9a:
                    d8:72:a0:b5:d8:0e:fb:96:e3:0e:b8:8f:47:9a:0c:
                    88:60:61:67:f1:ca:51:7b:57:3e:8c:ef:6c:67:88:
                    35:bf:09:d0:38:5a:ec:35:d0:8b:07:25:80:a5:d3:
                    ff:83:51:3e:db:be:a7:f2:f6:90:3c:47:06:86:ed:
                    9b:5e:3c:1f:e8:58:33:0a:b8:93:08:0b:ba:9d:28:
                    5e:3e:6d:df:3d:a5:8b:3b:c4:eb:43:44:81:23:aa:
                    58:b7:38:53:83:0f:09:ff:7c:9e:85:2d:e3:44:8f:
                    d7:b3:b3:96:62:14:07:68:0d:03:c2:2b:31:42:2e:
                    65:92:06:4f:e3:59:07:25:cb:53:b1:8f:8d:1a:be:
                    cc:6c:41:c6:16:b6:99:9d:e2:4b:2d:30:55:bf:7b:
                    9f:8a:a6:43:b0:6d:a6:20:6a:28:e1:c4:ad:11:6f:
                    9b:ff:e1:ab:67:99:6f:c4:e5:a3:ad:1e:0d:21:d6:
                    97:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D7:CC:B7:8E:A3:D4:59:BF:18:60:16:95:7A:72:55:26:EA:D4:ED
            X509v3 Authority Key Identifier:
                keyid:26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:63:fd:ec:8a:cd:0d:ed:63:4e:e9:a7:f6:fb:d9:33:61:b7:
         77:3e:61:a8:2b:69:06:ad:11:df:bf:da:c8:24:0e:51:fc:45:
         ca:02:23:3c:8b:b0:7f:5c:35:b0:d0:2d:70:6b:13:af:12:0b:
         d6:0d:03:ce:85:99:3f:03:eb:2e:fa:cc:19:5d:d7:e3:fe:ad:
         60:02:9a:27:3b:41:83:dd:b6:16:50:5b:ce:20:6c:e5:64:75:
         59:e4:ac:83:59:d2:f8:f0:a9:42:1d:f1:c3:77:40:9b:e7:6e:
         a3:3f:6d:86:c2:04:ab:4e:3d:25:9b:96:d3:29:2c:97:70:bd:
         85:71:da:d7:d9:87:a2:b2:d2:1a:6c:96:b8:45:ce:b2:86:b7:
         6a:bb:85:5f:83:b7:0e:ea:25:bd:b5:a1:3b:72:69:16:8b:75:
         61:e6:5b:24:ee:af:63:a4:95:a5:e4:d8:86:26:2d:cd:d5:14:
         de:c7:2b:df:b1:5f:b3:95:83:74:7c:c2:d0:14:c7:86:6d:43:
         9a:df:3c:c2:c6:1b:4c:a2:e0:67:51:6e:6a:83:6c:ca:b5:4e:
         e5:97:32:b0:34:f3:30:96:63:1a:19:cc:ce:48:8d:9f:e1:96:
         b2:48:33:4f:58:ad:84:ae:f7:33:89:8b:e7:94:23:11:18:3d:
         b8:b3:05:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:10:56 2026 by rpki-client