Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
File:                     J7irrCClmMyksS9ddV2OiTIfTsk.mft (raw, json)
Hash identifier:          iNjCFhxFklhbfLHA493lavTJOijZltwsO9TRZZa6GA8=
Subject key identifier:   43:5B:AF:35:6F:E4:4E:CD:60:46:8A:34:58:5E:70:5D:EC:FB:4E:E2
Authority key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
Certificate issuer:       /CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Certificate serial:       019EC1491CE8188EBAEF447F4739B034A091
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
Manifest number:          12D0
Signing time:             Sat 13 Jun 2026 14:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:54 +0000
Files and hashes:         1: EXA4SpEwX1vQWpFirH7mk4IJU8M.roa (hash: Lyc+y0k9pCkViy1JNMhW8hiC3bm7cXEkAowTAltTXTA=)
                          2: J7irrCClmMyksS9ddV2OiTIfTsk.crl (hash: cJ06vCzuVonXvPpq6CfDdWI+wtoDEE0wjJVrPE9gryo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:1c:e8:18:8e:ba:ef:44:7f:47:39:b0:34:a0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
        Validity
            Not Before: Jun 13 14:00:54 2026 GMT
            Not After : Jun 14 14:00:54 2026 GMT
        Subject: CN=435baf356fe44ecd60468a34585e705decfb4ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0f:ce:62:59:67:b4:84:57:c4:9c:ce:af:d0:
                    c2:78:c5:a4:0a:e0:7a:6f:71:79:ad:7e:96:0a:d5:
                    be:10:b6:a1:b9:b3:fe:b4:83:bf:6d:1f:38:76:28:
                    8c:a8:3c:18:95:ea:9a:10:f2:1f:92:ef:d4:9b:c5:
                    77:e3:58:c1:bf:2d:cc:ef:14:65:8f:c4:05:a8:d8:
                    ae:5e:ac:a9:69:93:c2:79:23:04:9f:04:6e:e8:35:
                    fc:4f:03:1c:96:01:48:4a:fc:f6:2e:cb:62:82:9a:
                    ec:59:40:d7:c8:fc:eb:4c:5d:a9:07:d3:0f:5d:b6:
                    5f:2c:9e:1b:15:44:46:9e:ff:d8:b1:0c:2f:b0:a2:
                    65:0e:ca:3f:b3:82:4b:d9:6c:d4:91:9e:a3:20:2d:
                    4a:93:46:db:b4:47:20:f0:53:dc:7e:4f:35:8b:53:
                    a6:6d:3e:e3:14:88:67:1c:ce:55:07:fb:3d:05:4e:
                    84:94:48:6b:7b:fb:f4:a4:c5:ec:87:87:67:74:54:
                    57:d1:f7:6f:cc:a8:ae:f0:34:61:09:2e:a8:0d:22:
                    4a:5c:17:26:ea:ab:b0:52:74:c2:6f:c3:80:ee:46:
                    66:f7:86:6d:bd:8d:20:82:87:06:04:60:8f:4c:4a:
                    1a:64:a9:d9:f1:0f:76:7c:0b:36:33:7a:d0:5f:49:
                    bd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5B:AF:35:6F:E4:4E:CD:60:46:8A:34:58:5E:70:5D:EC:FB:4E:E2
            X509v3 Authority Key Identifier:
                keyid:27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:43:22:8f:9b:2b:86:20:e5:a0:53:f4:9c:89:71:36:90:b9:
         d3:78:64:af:da:44:6f:34:75:46:d6:67:87:41:5b:66:4b:cf:
         77:3f:9a:aa:a8:d4:07:9e:17:b9:9e:ff:24:e4:11:e9:67:9e:
         a0:62:d5:b9:aa:28:fa:42:c7:af:71:d9:2a:d7:31:d5:89:0c:
         14:45:8f:58:12:b7:c3:b1:fe:2a:52:11:70:47:e6:32:49:45:
         5e:39:ef:ae:55:ab:b9:a5:b8:54:50:63:90:86:91:06:b8:c5:
         89:28:52:ef:7b:9e:34:0b:11:09:3f:00:61:e0:d1:7e:32:ff:
         fc:8e:73:13:d1:8b:47:32:63:58:4f:0f:bd:b0:c6:1d:74:5a:
         07:14:b3:bd:46:92:cc:9d:59:5f:05:f1:85:0c:3e:cf:04:a1:
         fe:98:7c:6b:a9:73:5a:52:02:6e:80:47:af:a2:39:35:ae:bc:
         ad:65:3a:6f:90:55:05:b2:83:2d:8a:5a:58:b6:51:ed:96:4b:
         4c:28:50:f7:fb:e0:07:a6:00:d6:64:cd:93:26:0c:da:37:89:
         85:8f:04:00:6a:31:c5:ba:a0:a7:87:d0:45:30:23:90:b0:e5:
         d0:bd:d2:90:b2:0c:41:9f:44:44:d5:21:a2:da:22:86:3b:c6:
         e0:56:45:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSRzoGI6670R/RzmwNKCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YjhhYmFjMjBhNTk4Y2NhNGIxMmY1ZDc1NWQ4ZTg5MzIx
ZjRlYzkwHhcNMjYwNjEzMTQwMDU0WhcNMjYwNjE0MTQwMDU0WjAzMTEwLwYDVQQD
Eyg0MzViYWYzNTZmZTQ0ZWNkNjA0NjhhMzQ1ODVlNzA1ZGVjZmI0ZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw/OYllntIRXxJzOr9DCeMWkCuB6
b3F5rX6WCtW+ELahubP+tIO/bR84diiMqDwYleqaEPIfku/Um8V341jBvy3M7xRl
j8QFqNiuXqypaZPCeSMEnwRu6DX8TwMclgFISvz2LstigprsWUDXyPzrTF2pB9MP
XbZfLJ4bFURGnv/YsQwvsKJlDso/s4JL2WzUkZ6jIC1Kk0bbtEcg8FPcfk81i1Om
bT7jFIhnHM5VB/s9BU6ElEhre/v0pMXsh4dndFRX0fdvzKiu8DRhCS6oDSJKXBcm
6quwUnTCb8OA7kZm94ZtvY0ggocGBGCPTEoaZKnZ8Q92fAs2M3rQX0m9AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENbrzVv5E7NYEaKNFhecF3s+07iMB8GA1UdIwQY
MBaAFCe4q6wgpZjMpLEvXXVdjokyH07JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi83MjllMWMtMWNjMC00MjdlLThmMDAt
NGI2ZmM3YzA2YWU1LzEvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi83MjllMWMtMWNjMC00MjdlLThmMDAtNGI2ZmM3YzA2YWU1
LzEvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0Mij5sr
hiDloFP0nIlxNpC503hkr9pEbzR1RtZnh0FbZkvPdz+aqqjUB54XuZ7/JOQR6Wee
oGLVuaoo+kLHr3HZKtcx1YkMFEWPWBK3w7H+KlIRcEfmMklFXjnvrlWruaW4VFBj
kIaRBrjFiShS73ueNAsRCT8AYeDRfjL//I5zE9GLRzJjWE8PvbDGHXRaBxSzvUaS
zJ1ZXwXxhQw+zwSh/ph8a6lzWlICboBHr6I5Na68rWU6b5BVBbKDLYpaWLZR7ZZL
TChQ9/vgB6YA1mTNkyYM2jeJhY8EAGoxxbqgp4fQRTAjkLDl0L3SkLIMQZ9ERNUh
otoihjvG4FZF4Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:25:53 2026 by rpki-client