Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
File:                     J4YXdA7NlbcE2pel-eU8AxFEQms.mft (raw, json)
Hash identifier:          p5KCgfNQi8DBsvocp/NtM8z/Mjjltv8T+YCYXVUt+ZU=
Subject key identifier:   59:43:EF:FA:A9:43:D3:E4:58:75:4F:FB:35:E8:C0:4B:29:BC:45:E1
Authority key identifier: 27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
Certificate issuer:       /CN=278617740ecd95b704da97a5f9e53c031144426b
Certificate serial:       019F18D692F6EB113A725736175B67D7FFCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
Manifest number:          1531
Signing time:             Tue 30 Jun 2026 14:02:23 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:23 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:23 +0000
Files and hashes:         1: J4YXdA7NlbcE2pel-eU8AxFEQms.crl (hash: kFfVP1T+4VFn8SfGJE7S2+DebHRwmsRq/evZYG70LVY=)
                          2: hv5F2fKm7cZ-fqlTGhS4HLwa_Mo.roa (hash: 3e8QQ5wpWIE1xn2kF+A/CiSMbxQICMGVp/zM+nv9PN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:92:f6:eb:11:3a:72:57:36:17:5b:67:d7:ff:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278617740ecd95b704da97a5f9e53c031144426b
        Validity
            Not Before: Jun 30 14:02:23 2026 GMT
            Not After : Jul  1 14:02:23 2026 GMT
        Subject: CN=5943effaa943d3e458754ffb35e8c04b29bc45e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:00:17:7a:64:59:c2:55:34:12:03:1e:42:f4:
                    62:82:7b:70:72:32:74:f7:31:66:c8:0f:1a:94:bc:
                    81:6c:9b:fb:90:04:04:8e:c7:61:c9:75:f3:d6:c0:
                    0e:e9:6e:e4:5c:a1:a8:3e:da:a5:01:b1:4f:f0:75:
                    3f:e4:4d:1e:4e:bf:d6:a1:4c:64:58:56:2d:62:9b:
                    c1:60:9a:ab:ae:ba:06:f5:9c:01:95:3f:e7:15:73:
                    6b:39:3d:ae:1b:6d:7e:57:67:14:1b:a6:0e:0c:ac:
                    79:a3:de:51:5e:7a:9f:10:6e:09:81:da:64:f6:11:
                    dc:01:14:18:96:e2:e9:f7:36:ce:46:bb:9f:60:43:
                    6e:e8:12:58:33:48:f4:ce:8b:75:a5:d5:36:f4:2f:
                    78:d3:61:bc:af:1f:8e:6a:cc:5a:cd:2c:54:94:35:
                    a0:bf:40:30:1e:fd:88:e3:da:74:15:a5:ef:d1:96:
                    82:85:f1:aa:7d:a1:8b:49:57:3e:9e:c8:fc:0a:96:
                    9f:ed:26:14:7c:e3:16:64:58:1c:0b:ec:ec:ec:d9:
                    80:22:22:56:11:9e:20:cf:d6:f6:1e:41:d1:7c:4d:
                    be:e8:b5:79:0a:68:d6:53:13:fa:91:db:bb:2f:3d:
                    00:b9:b0:71:ab:65:c9:7d:58:ed:3c:14:43:dc:ec:
                    41:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:43:EF:FA:A9:43:D3:E4:58:75:4F:FB:35:E8:C0:4B:29:BC:45:E1
            X509v3 Authority Key Identifier:
                keyid:27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:65:ac:8c:f1:29:dc:51:b7:71:34:aa:35:18:89:27:ce:54:
         35:d6:ae:20:44:4f:7a:f2:60:ba:34:db:59:ec:85:02:22:10:
         d5:ef:60:27:fc:72:78:cb:a1:c7:8c:39:fb:c8:57:69:05:8d:
         64:5f:e7:e2:df:0f:a8:c1:cb:84:1c:a4:56:17:80:c0:a0:41:
         34:c0:cf:8c:d9:bd:77:f0:95:95:a7:bf:72:d1:d6:20:9a:13:
         dd:b1:76:35:ea:b9:bb:23:72:44:5d:35:73:88:37:be:67:65:
         3a:50:00:fc:7f:48:f1:3b:56:4c:97:02:84:c2:3f:61:3e:db:
         cd:13:c0:19:3a:12:81:61:eb:94:ba:89:77:d3:60:17:50:3e:
         08:c3:0e:36:e5:73:23:af:48:ec:48:a2:f6:83:93:1e:73:f4:
         0d:e9:42:f8:35:b6:9d:2d:d4:c6:eb:76:32:bb:94:0e:a5:73:
         c8:e7:26:ee:c5:b5:d2:bf:39:9d:a8:33:22:2f:e9:86:91:48:
         cb:9b:f4:29:b9:18:be:a6:95:9d:0e:86:60:27:bf:c2:bd:83:
         bf:ca:46:69:eb:e3:2c:4c:ea:d4:79:9e:e6:a0:f3:4b:9b:69:
         a1:b1:76:6a:c5:e2:d9:3b:ff:17:d0:1a:dd:34:33:2c:36:19:
         ae:a9:cb:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Y1pL26xE6clc2F1tn1//OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ODYxNzc0MGVjZDk1YjcwNGRhOTdhNWY5ZTUzYzAzMTE0
NDQyNmIwHhcNMjYwNjMwMTQwMjIzWhcNMjYwNzAxMTQwMjIzWjAzMTEwLwYDVQQD
Eyg1OTQzZWZmYWE5NDNkM2U0NTg3NTRmZmIzNWU4YzA0YjI5YmM0NWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwAXemRZwlU0EgMeQvRigntwcjJ0
9zFmyA8alLyBbJv7kAQEjsdhyXXz1sAO6W7kXKGoPtqlAbFP8HU/5E0eTr/WoUxk
WFYtYpvBYJqrrroG9ZwBlT/nFXNrOT2uG21+V2cUG6YODKx5o95RXnqfEG4Jgdpk
9hHcARQYluLp9zbORrufYENu6BJYM0j0zot1pdU29C9402G8rx+OasxazSxUlDWg
v0AwHv2I49p0FaXv0ZaChfGqfaGLSVc+nsj8Cpaf7SYUfOMWZFgcC+zs7NmAIiJW
EZ4gz9b2HkHRfE2+6LV5CmjWUxP6kdu7Lz0AubBxq2XJfVjtPBRD3OxBCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlD7/qpQ9PkWHVP+zXowEspvEXhMB8GA1UdIwQY
MBaAFCeGF3QOzZW3BNqXpfnlPAMRREJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjRZWGRBN05sYmNFMnBlbC1lVThBeEZFUW1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNzhhYjQtMzQ5MC00MDBiLTkwMTkt
OWVkZDAxZDA3MjNjLzEvSjRZWGRBN05sYmNFMnBlbC1lVThBeEZFUW1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iNzhhYjQtMzQ5MC00MDBiLTkwMTktOWVkZDAxZDA3MjNj
LzEvSjRZWGRBN05sYmNFMnBlbC1lVThBeEZFUW1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmWsjPEp
3FG3cTSqNRiJJ85UNdauIERPevJgujTbWeyFAiIQ1e9gJ/xyeMuhx4w5+8hXaQWN
ZF/n4t8PqMHLhBykVheAwKBBNMDPjNm9d/CVlae/ctHWIJoT3bF2Neq5uyNyRF01
c4g3vmdlOlAA/H9I8TtWTJcChMI/YT7bzRPAGToSgWHrlLqJd9NgF1A+CMMONuVz
I69I7Eii9oOTHnP0DelC+DW2nS3Uxut2MruUDqVzyOcm7sW10r85nagzIi/phpFI
y5v0KbkYvqaVnQ6GYCe/wr2Dv8pGaevjLEzq1Hme5qDzS5tpobF2asXi2Tv/F9Aa
3TQzLDYZrqnLvg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 23:33:35 2026 by rpki-client