Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
File:                     JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json)
Hash identifier:          EnonL2FdlAXqlL47kpAwFI/XFwZmZs4FquHxX6ybuJU=
Subject key identifier:   7E:E3:85:96:FE:53:24:48:73:5B:FB:8A:76:D2:A0:88:5B:5D:DC:F6
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Certificate issuer:       /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial:       019EE39EF2C6FABCF6346768774A5C2CEBDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
Manifest number:          0928
Signing time:             Sat 20 Jun 2026 06:01:45 +0000
Manifest this update:     Sat 20 Jun 2026 06:01:45 +0000
Manifest next update:     Sun 21 Jun 2026 06:01:45 +0000
Files and hashes:         1: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: 2M19IpTZXVy1ZJ5PhGrPUtLDrrdJiERcG4IpEsm7dWE=)
                          2: gW_qGfKQeIjCzm5uq8uaZ6bICSo.roa (hash: kRJ+XX/gU6aPLqrNsFhQwdwg4zAQl3rYc3y2VSOo9h8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e3:9e:f2:c6:fa:bc:f6:34:67:68:77:4a:5c:2c:eb:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
        Validity
            Not Before: Jun 20 06:01:45 2026 GMT
            Not After : Jun 21 06:01:45 2026 GMT
        Subject: CN=7ee38596fe532448735bfb8a76d2a0885b5ddcf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c7:34:05:87:00:f7:86:83:56:2e:b3:e7:3f:
                    ee:09:8d:09:94:85:d4:36:59:9f:d2:c6:d2:b9:3f:
                    64:17:31:78:f0:75:56:7c:af:96:3e:1a:18:13:a2:
                    f4:fc:94:c6:4d:8b:0e:2e:f4:73:c6:da:9d:65:38:
                    dc:bf:aa:ff:db:ff:f2:46:f7:fa:f6:c8:d7:8d:bb:
                    cd:ed:71:eb:b9:bb:77:16:18:6f:7a:b9:29:84:cb:
                    a1:48:88:de:93:c5:48:66:f2:b0:2c:f7:9f:11:a0:
                    d7:fc:d0:74:86:6c:dc:43:4f:64:81:7f:50:d7:fa:
                    14:dd:34:83:03:ae:66:d7:92:6d:5c:ed:83:93:27:
                    1e:61:e6:5a:90:56:bc:77:d6:52:3b:30:df:b8:b5:
                    90:63:bf:5f:9a:2e:1e:11:b9:e6:5b:2f:73:e7:35:
                    d4:a3:a4:9f:aa:ae:a1:5c:72:4f:ea:a6:e1:e4:7e:
                    8b:43:67:8c:c8:36:1b:cb:dc:44:9a:65:08:52:63:
                    75:df:7f:d5:07:d3:9b:e7:93:b4:9f:cb:08:43:77:
                    06:a2:04:25:7b:57:66:62:70:53:ca:66:1c:63:da:
                    06:97:75:15:17:22:75:82:ad:8e:9b:fd:45:c1:97:
                    cf:97:ae:26:e3:40:30:68:94:c6:41:9f:99:28:35:
                    0a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E3:85:96:FE:53:24:48:73:5B:FB:8A:76:D2:A0:88:5B:5D:DC:F6
            X509v3 Authority Key Identifier:
                keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:a7:2e:05:b1:65:9d:f6:6c:24:2f:30:33:07:18:3b:c2:c6:
         6e:e6:57:b6:32:53:bf:f7:8a:30:02:a6:07:ae:3b:dd:8c:6c:
         32:c3:de:33:1f:4d:da:7e:96:a3:60:c8:0d:bb:24:91:f9:c7:
         9e:3f:29:55:a6:ea:6d:23:f7:96:3d:6e:d4:ea:aa:dc:ea:f3:
         42:0a:4c:dc:27:cf:8a:de:df:87:73:3e:03:32:ed:98:59:95:
         d6:a5:e5:d8:43:30:7d:04:02:6c:e7:26:78:68:5d:57:79:8d:
         05:51:4e:a5:78:b8:58:6d:78:d5:e3:78:15:59:b8:48:21:12:
         e2:77:11:f2:72:a1:38:d8:a7:66:6a:f0:ca:d9:62:17:ec:3f:
         f8:ee:32:0e:6d:09:0d:3f:a0:92:c9:35:77:5b:52:a2:38:2e:
         a7:fd:0d:c3:fe:ee:cf:42:0d:fc:66:7b:db:dc:0e:7b:e7:3e:
         6c:5f:83:50:6d:9d:a8:1c:df:ac:f0:6e:34:a6:59:28:49:95:
         fd:2c:8e:25:21:79:f3:9b:0d:0e:f6:cb:34:ca:7b:a7:22:4b:
         df:07:23:7e:21:14:f0:1c:0b:f6:86:77:7b:df:25:b1:10:ae:
         bf:5a:3b:f1:08:79:a1:0d:c7:3e:db:89:71:dc:ab:66:eb:65:
         0a:d9:22:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 13:37:03 2026 by rpki-client