Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
File:                     JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json)
Hash identifier:          jAl6x1tHICUX0zodZT182T1uv0UENtcMV74Jv8jmtyU=
Subject key identifier:   E9:C3:DA:B4:4F:39:CB:3F:57:A6:B9:4A:B9:33:21:62:00:92:79:22
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Certificate issuer:       /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial:       019F1A56677F47BC8C063B4A8275B2BF1F49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
Manifest number:          16DE
Signing time:             Tue 30 Jun 2026 21:01:37 +0000
Manifest this update:     Tue 30 Jun 2026 21:01:37 +0000
Manifest next update:     Wed 01 Jul 2026 21:01:37 +0000
Files and hashes:         1: 1-J4PSDEl9d0llDjfWsIWQxWc6_I.roa (hash: ypQcjGIhT4f6yMw/Eo/q0CXm3np4TkiH1MrKx8KGA8U=)
                          2: FXvxd8iSb5UOqnUQemVQoiPFHr0.roa (hash: xAaj8WYWxsUYDp5IjPLpIHhUT6JTzTLFtyE0B9OOTCo=)
                          3: Hhk99kTP4LCptCcuzr46HrrOd-M.roa (hash: KKoc5a/NPGDFa/jCr9dayn05xHXif4MHgG7H+qe8WPY=)
                          4: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: VBDYOh4OBjb3204TMDYh04XpeY9gTK8rLWg0j+M1ZNs=)
                          5: OCOSxMuOE7etqm6ym3cnIhKe0pw.roa (hash: PN3RvFQgu5pZxlCTS4LWpAyJgk2AnIZ4RZiwMhHQpjM=)
                          6: QAlAc_HBKVW9DIWsgBjzQBqlU_E.roa (hash: 01SGs9bF17s9PyhMPPV7iXjRmYd6onnnyv/wBFXQkVo=)
                          7: aFDzVrUv1Lh1tFcqGx2iUSN6t2Q.roa (hash: R1nEMHyCK4EFeYy8SvPh7cZUDUUFnN2AYX39p24Ukns=)
                          8: cH5zbNz1Wh4pKh9CZsUewwJjPYc.roa (hash: o7xAeOganmOKEfHkamPKsHaW6ANhyRw4vYPfGEPHmXY=)
                          9: ekIg_EozOl2eKAl7YxwTNudO2Ck.roa (hash: H4suzunJCL6M7y1bzbaVMfsdpvdTVp5XzrKgoj5v1bk=)
                          10: kJQG6geGOu2RAJRA_7GzYnIhBYQ.roa (hash: XUqqP9TjiZCkPcmNHG3SdvuU3ttO6pgsFTxEU7wHJZE=)
                          11: mw4aax5neyyO7biCg_R2Z4yrLVY.roa (hash: kswP+nDZIDDBYumEaipi/RTPJYiM8dVDU96MMsZcT28=)
                          12: nmDQzXrowDtDsmaT7IpPejjRWG0.roa (hash: GXfSa12Z+HzkUJgQU3oz+bpDRacv3sjfzvlZHnK3Bnk=)
                          13: rlGWAgfAA94vdNw8Yce_2JC5ZQ0.roa (hash: mDS85C7fKFjtrZ9jEwtQ1X6vTpwU05nL4sqzCM649dA=)
                          14: x0Q_UA5bt6672Dm9-Yp-CrnW3nQ.roa (hash: ITlCsYh8cqhggq4VF3aslLQZ6vv7ci4qGlAuU+En704=)
                          15: ySuM-WxG5dbfi2CFirvx8xCRfuA.roa (hash: 1e/p6LGwMmHWJEevpgoA3E6bMz9Y+YCCH+tqNadZtdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:56:67:7f:47:bc:8c:06:3b:4a:82:75:b2:bf:1f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
        Validity
            Not Before: Jun 30 21:01:37 2026 GMT
            Not After : Jul  1 21:01:37 2026 GMT
        Subject: CN=e9c3dab44f39cb3f57a6b94ab933216200927922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:78:0a:80:c9:3b:1b:02:30:f7:b1:1d:29:
                    01:69:59:fa:f6:05:0a:77:3d:01:e2:5f:d6:8c:d3:
                    ff:b9:8e:55:f0:c6:e6:dc:75:d9:62:eb:e5:32:9b:
                    d5:56:62:1a:43:d6:62:d2:c4:49:36:96:a7:43:0d:
                    c7:d8:dd:bc:c6:d4:5f:11:9d:9f:45:a9:5b:11:fc:
                    b9:fd:73:91:6f:a5:af:67:4a:fa:3a:84:1a:0e:85:
                    c9:4e:60:cc:21:10:15:35:ee:d4:e8:46:7c:da:9c:
                    5d:70:ef:4e:c2:a4:ac:51:51:70:f2:ca:6a:cb:77:
                    b8:ae:9f:09:0d:ba:d1:ea:67:5b:c6:63:4b:5d:7b:
                    24:1f:5b:47:00:c8:d9:18:5e:14:61:6e:29:f2:eb:
                    0f:19:f6:37:d3:be:65:54:a1:86:02:e3:09:44:92:
                    ce:14:5f:86:d1:1c:01:b3:33:55:9a:16:48:55:d7:
                    1a:c5:01:df:9f:d6:c4:bf:42:44:2b:1d:21:bb:7a:
                    9b:ab:06:dc:c2:8d:7b:48:65:2f:ea:e5:4f:0b:99:
                    2a:ca:11:84:96:56:26:f4:e2:53:4e:8f:ac:29:c3:
                    49:7d:0c:40:9b:68:0f:6b:7b:48:c1:51:71:9f:d0:
                    43:fa:17:55:32:5a:97:23:0e:b3:92:dd:c1:24:55:
                    88:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C3:DA:B4:4F:39:CB:3F:57:A6:B9:4A:B9:33:21:62:00:92:79:22
            X509v3 Authority Key Identifier:
                keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:be:8b:8a:77:f3:e9:42:74:2a:9b:64:b2:4e:c6:fc:39:e0:
         48:c6:e1:14:e5:31:df:2b:e0:1a:e2:57:42:e4:49:55:d1:49:
         d8:1c:75:c0:68:3c:4e:af:9f:c3:8b:ce:73:c8:37:dc:ac:75:
         c7:74:09:27:c4:32:2d:fd:6c:01:30:73:72:df:9d:cc:fd:da:
         fb:f7:30:2e:0a:e2:4d:5f:13:de:92:da:ec:aa:de:1b:e4:b9:
         0c:dd:91:79:90:3c:c1:91:f3:77:dd:55:f7:58:2c:d3:8d:91:
         d0:c1:ea:66:59:3d:02:d4:16:d6:13:23:51:f7:f6:11:9a:83:
         61:91:b6:98:7c:5e:e9:73:69:4f:72:9b:f7:a3:ad:f0:46:4d:
         6a:9f:3b:37:47:c2:af:ff:6b:ee:10:58:20:fd:e4:7e:48:c9:
         f4:a2:6e:8f:74:9e:fa:4a:78:85:41:9c:a0:57:3c:b6:b8:ad:
         79:73:7c:ad:f0:28:ad:12:de:6c:f9:2f:78:ea:43:49:20:0c:
         8d:96:d8:bc:79:fb:3c:64:f8:15:fd:3a:91:b8:46:aa:3d:52:
         c4:ae:a1:45:db:03:e8:64:b1:0a:b4:e7:7a:6c:25:62:78:c0:
         93:99:a9:58:f1:56:7c:09:10:d0:d9:7e:ff:56:c8:e4:34:1a:
         50:d1:4a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:15:57 2026 by rpki-client