Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
File:                     jCgv8-x8uBt45iinNRdkjWIpyrc.mft (raw, json)
Hash identifier:          DW+eoLBLvJy97CQcHa4xuVZ0nnvGhFlm0lhZQf6lNyg=
Subject key identifier:   EF:1A:BA:CF:B3:FD:D5:16:25:1F:07:6D:8D:43:31:A9:9F:98:22:66
Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
Certificate issuer:       /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Certificate serial:       019EE856B132814C890D785A87B9C3AD69C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
Manifest number:          04C7
Signing time:             Sun 21 Jun 2026 04:00:55 +0000
Manifest this update:     Sun 21 Jun 2026 04:00:55 +0000
Manifest next update:     Mon 22 Jun 2026 04:00:55 +0000
Files and hashes:         1: jCgv8-x8uBt45iinNRdkjWIpyrc.crl (hash: 9NNm7z+K3TKIePLApQ2Qcw61W8c3GhwLEcliBQ7aYco=)
                          2: ljWbO3xgpVVnVuPfMgl7G3F39B8.roa (hash: Bdl5BL0jpRyEhLx4reL1/D3qaLttRyXVouVa2c42GeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 21:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e8:56:b1:32:81:4c:89:0d:78:5a:87:b9:c3:ad:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
        Validity
            Not Before: Jun 21 04:00:55 2026 GMT
            Not After : Jun 22 04:00:55 2026 GMT
        Subject: CN=ef1abacfb3fdd516251f076d8d4331a99f982266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5b:ba:f9:6c:9c:b5:34:f8:9d:f7:ac:2a:2f:
                    99:7c:43:1e:e6:2c:76:93:57:dd:5d:66:23:0f:8d:
                    57:5e:fa:06:07:52:46:e8:b1:5c:d9:66:3d:f5:ec:
                    02:a4:73:00:e5:a7:72:45:ca:f1:ee:48:e2:28:8d:
                    ed:29:a4:d9:ce:cd:b0:e4:5c:e5:4d:8d:3e:1c:48:
                    45:23:4c:f6:f0:3f:89:5e:50:18:24:ff:34:a0:24:
                    3d:5a:3c:1b:bb:a1:0a:ca:01:95:e1:a7:cb:af:11:
                    69:5f:4b:8b:8a:e4:e2:e6:a0:a3:9a:c9:2c:65:ac:
                    4b:23:c4:4f:54:cc:2e:a2:95:96:bd:ef:f3:41:c6:
                    f6:06:3c:22:06:da:24:72:7d:a0:e2:24:7c:99:d0:
                    44:e6:e9:44:ff:8e:40:08:cb:13:48:95:45:74:6f:
                    ea:83:ab:70:38:d4:f5:3e:36:45:a7:98:8e:8e:95:
                    67:30:cb:6f:cf:de:39:72:18:13:c2:fa:d4:5c:62:
                    5b:69:fb:fb:2c:a9:91:72:8b:1f:eb:15:00:a2:80:
                    8e:4f:ad:05:19:9d:f9:5b:52:44:07:54:fc:22:b7:
                    6f:d3:dd:f1:2b:f5:cb:68:54:4f:b5:e9:d0:ae:a6:
                    fa:f4:9c:41:41:f3:31:40:9c:fb:26:7f:99:d4:f7:
                    d3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1A:BA:CF:B3:FD:D5:16:25:1F:07:6D:8D:43:31:A9:9F:98:22:66
            X509v3 Authority Key Identifier:
                keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b9:71:5f:1c:92:76:e7:87:1e:ec:62:7b:c8:08:ed:6d:fe:
         c0:1e:37:4c:ea:ef:86:ed:fc:a6:2b:1a:6c:43:16:a1:bf:74:
         87:80:c4:cc:18:c9:5a:d1:f0:c5:68:3b:a8:5d:39:88:3c:f3:
         31:58:54:7b:d6:8d:8e:84:27:f2:a1:e8:0e:55:d9:d5:d4:54:
         b3:f0:19:8a:b1:ef:6e:d7:a1:5e:da:62:15:e0:e1:11:96:04:
         a3:ac:c7:6e:41:b9:6f:3c:94:e0:57:80:f4:3f:b4:e8:0b:8a:
         83:54:b9:f7:b9:b1:e0:3b:f5:58:59:cd:15:41:83:31:2a:a9:
         a1:e5:9d:ee:37:a1:ec:64:3d:58:54:a2:b8:90:11:a7:01:e6:
         d1:ff:97:8d:19:28:c4:33:9e:21:f0:e8:0b:70:b8:62:01:db:
         62:03:ef:6e:dc:3b:48:0d:e2:4a:39:df:94:11:af:07:5e:70:
         06:bc:09:06:eb:1f:71:53:39:34:67:71:67:51:2e:95:92:15:
         fe:d6:0f:17:9f:b1:75:d3:18:f2:fe:9f:29:b6:24:62:63:09:
         90:7a:d5:8f:b5:fb:57:13:d1:cc:bd:4e:92:e4:a3:84:e7:b3:
         52:79:4e:72:2c:ab:49:34:d8:d7:e3:24:5c:91:01:05:9a:53:
         48:94:ff:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 07:14:32 2026 by rpki-client