Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
File:                     JwKaNvwMyi4KjQRfAi38gxpRcwg.mft (raw, json)
Hash identifier:          8MRvoSnms7EtltSHcBBgsZT9lNH/i1ZkWF9U/YtnDhE=
Subject key identifier:   D1:9D:66:8B:92:D8:5D:9B:C4:27:A7:25:94:B6:12:86:4A:11:26:A3
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Certificate issuer:       /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial:       019EC0A42477B92E0893DBCDF43BF79DEE51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
Manifest number:          18A2
Signing time:             Sat 13 Jun 2026 11:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:43 +0000
Files and hashes:         1: JwKaNvwMyi4KjQRfAi38gxpRcwg.crl (hash: iViTOzp/O+Yhs10GO5TUUE8DNEi1t3z0clrM3uRRmR8=)
                          2: XzeIaRbu0fSJVgranQAMBnDnOYk.roa (hash: dqxt73O8AnvVTC/pUjNqknVJAUikBp+bFUF6OzADUcg=)
                          3: aZei7dPraMpoyMe9a8A85iz9U9k.roa (hash: KtkMVG0TF4vgfuc7Eg25bY2/F+3g8sFzTM72NzjE2qo=)
                          4: nYOMmq9r2jYKxOZ_vMZVsG2YoIY.roa (hash: 73YqhTgSFV2KW1q+D3iw3fdx9BOAWsHiW6Qx96ipVDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:24:77:b9:2e:08:93:db:cd:f4:3b:f7:9d:ee:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
        Validity
            Not Before: Jun 13 11:00:43 2026 GMT
            Not After : Jun 14 11:00:43 2026 GMT
        Subject: CN=d19d668b92d85d9bc427a72594b612864a1126a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:ca:2e:25:06:60:0d:f5:38:c3:ac:7d:ce:
                    1c:28:28:2b:68:4b:c6:41:8c:35:19:3c:62:db:bc:
                    d5:b1:82:32:35:ff:d4:f0:72:8f:cd:8c:e1:82:4f:
                    f3:b6:da:c9:9b:99:c2:56:3e:90:d1:88:95:69:61:
                    d2:23:59:5f:1e:7f:34:8b:09:7e:ef:9e:2e:c9:86:
                    db:7f:04:3c:25:b3:62:57:eb:46:c7:51:2d:c9:c7:
                    63:62:b9:e6:38:5f:5b:bb:1c:d0:00:5b:64:ce:a7:
                    d5:e7:36:40:fe:25:91:9c:4d:c3:84:8c:56:f9:82:
                    84:7e:65:b2:54:20:d4:99:f3:b0:71:d9:6e:56:b9:
                    35:a3:93:4e:bd:2c:4b:c3:b8:56:1c:38:ca:14:58:
                    43:79:1e:a3:1f:03:df:ac:5c:99:74:c9:bb:3f:b8:
                    2f:35:5c:1e:b8:ad:fc:27:ac:95:19:92:6e:f1:82:
                    db:20:24:a1:cd:3f:15:d3:91:63:62:47:67:03:a6:
                    f5:2c:71:78:c2:72:65:44:06:12:b6:cc:d0:ca:d6:
                    85:6d:d7:47:c7:de:52:d4:19:77:06:a0:1b:74:31:
                    55:f1:51:fe:0a:b1:42:94:19:40:52:f2:cd:55:36:
                    4b:95:4a:1e:35:75:65:e2:66:8a:5e:28:c1:f4:e3:
                    6c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9D:66:8B:92:D8:5D:9B:C4:27:A7:25:94:B6:12:86:4A:11:26:A3
            X509v3 Authority Key Identifier:
                keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ce:d7:76:c3:d6:f6:43:64:25:29:27:13:51:76:29:b3:58:
         36:8f:b8:45:f8:7c:ab:88:fc:06:d6:2e:06:c0:0a:0b:45:e3:
         87:e3:79:49:dd:d9:12:41:64:ee:9f:0e:7d:2e:85:6c:41:04:
         87:e1:2d:79:71:ba:87:e8:e4:ec:fb:9e:a7:db:8c:de:3b:da:
         5e:28:3e:ed:7d:fb:c5:75:4f:a6:56:a1:e4:b6:e6:12:fe:36:
         fa:8d:f9:33:e6:f1:1f:80:82:c9:bf:45:e2:67:26:f1:12:46:
         a9:fd:3f:76:18:1b:80:64:82:1f:a8:58:86:28:7b:fa:98:72:
         65:cb:0a:27:fc:f8:71:7f:32:d4:de:0a:6d:2b:e7:f7:21:95:
         1b:d7:ed:52:d4:32:b5:9e:6e:25:7c:12:ca:df:bc:7a:ad:84:
         6e:12:88:17:6c:c2:86:de:dc:bc:ae:d1:56:2d:62:99:01:4a:
         de:3a:e7:9d:0f:34:e8:73:4b:dd:1b:57:27:85:1d:a9:e8:14:
         85:04:7f:97:ec:5f:03:b8:8b:7c:bb:3b:1b:ba:71:f5:4f:4b:
         6c:c4:cf:f5:88:18:2b:54:18:7b:80:0a:fe:dc:fe:6c:05:d4:
         f8:1d:cf:ee:06:54:71:6d:a7:a9:56:1b:cd:55:be:7b:2f:69:
         dd:08:b7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:01:39 2026 by rpki-client