Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
File:                     JfzJXxkPb63_o5NBMcdMs6BojXI.mft (raw, json)
Hash identifier:          JJ9AUDm9MFJxZBvPJLQ/fzPicmBlD24ORZkOuspfWu8=
Subject key identifier:   69:34:7A:85:90:C2:22:91:3D:82:41:FA:1D:C6:FC:24:5A:93:5F:03
Authority key identifier: 25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
Certificate issuer:       /CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Certificate serial:       019FACACB6DA8F78C8D32B1E06F4DF0D721E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
Manifest number:          01B1
Signing time:             Wed 29 Jul 2026 07:00:27 +0000
Manifest this update:     Wed 29 Jul 2026 07:00:27 +0000
Manifest next update:     Thu 30 Jul 2026 07:00:27 +0000
Files and hashes:         1: JfzJXxkPb63_o5NBMcdMs6BojXI.crl (hash: npXUYmAZ2kBNa6gTZ1slIrsPuND+q+7Hk9T4YMu0G5g=)
                          2: g4SpKvZLDrCSSEc4j2eY2sgyR8k.roa (hash: F6VZpsG6B4dQY8+6I93tdHS61Qfv0yiT02WGdhA/ATs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ac:b6:da:8f:78:c8:d3:2b:1e:06:f4:df:0d:72:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
        Validity
            Not Before: Jul 29 07:00:27 2026 GMT
            Not After : Jul 30 07:00:27 2026 GMT
        Subject: CN=69347a8590c222913d8241fa1dc6fc245a935f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f2:35:13:96:40:4d:e4:86:26:d6:a7:59:4e:
                    88:4b:49:a9:a0:d9:c7:74:3d:06:49:38:26:0f:9f:
                    a1:2f:3b:83:ee:20:b5:eb:45:06:26:d8:a3:65:ec:
                    57:0a:c0:25:02:30:c9:3e:86:af:8f:34:c8:0c:8e:
                    b7:fe:42:74:a6:03:7c:4a:c2:de:71:e2:8e:ce:19:
                    43:5a:31:67:72:8e:db:d8:19:f3:1c:2b:0d:80:bd:
                    cf:b5:6c:05:f9:58:a4:44:47:6e:a9:8e:56:28:ce:
                    8c:7d:eb:a6:8d:79:73:07:08:f0:02:64:8e:59:fc:
                    30:ee:a5:0a:22:e9:6c:c6:ca:9a:70:f8:fc:bf:07:
                    16:a6:59:ed:3d:ca:b9:c2:bb:43:8d:0a:b5:c3:51:
                    dd:88:7f:02:dc:a2:a7:22:3e:0a:0f:56:0c:6f:bf:
                    c7:01:49:12:a3:a8:7f:dd:04:af:e7:48:2a:9c:80:
                    d0:b8:2b:f9:90:42:a4:ef:ad:da:65:10:6e:77:85:
                    04:55:b4:96:92:29:a4:3d:1e:94:be:3a:53:88:4f:
                    3a:8d:9e:18:b4:03:ee:54:ac:2a:1d:81:e4:7e:ea:
                    f6:ff:3d:26:bf:9d:ec:50:30:37:24:89:94:8c:5f:
                    dd:af:5f:90:d4:e5:f4:63:fd:24:aa:59:7e:e0:e1:
                    82:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:34:7A:85:90:C2:22:91:3D:82:41:FA:1D:C6:FC:24:5A:93:5F:03
            X509v3 Authority Key Identifier:
                keyid:25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:94:0d:51:67:1b:1d:a6:66:94:f4:69:2f:52:d1:de:72:f8:
         a7:0c:d6:5b:78:38:be:cb:1e:a8:33:f4:83:63:c1:23:1f:dc:
         4c:14:ce:2d:56:49:4f:85:a3:be:1b:1c:f8:fd:1d:01:45:a3:
         41:9f:9a:18:b4:eb:03:65:c0:6f:8a:ad:83:74:59:1a:27:64:
         6a:2b:6e:75:53:8f:4d:f6:14:7c:b2:b9:da:3a:07:a1:69:65:
         ba:af:f3:04:3f:90:d7:53:5a:30:82:87:ff:4a:f0:e4:03:da:
         2f:98:d8:74:e4:b2:ce:59:72:c4:a1:df:74:21:3b:0b:28:5d:
         fa:6c:f3:df:eb:f2:7b:f7:5c:9c:63:a9:f7:3d:04:af:3d:ee:
         53:ee:3c:a1:4e:86:93:34:ce:7e:e6:d3:a1:8e:2f:64:0b:e5:
         b3:06:8f:f6:17:a3:34:ba:46:7a:a2:32:37:5d:bc:b0:f0:86:
         7d:0c:d9:dd:39:3f:92:d3:19:d0:f2:46:7e:8a:22:03:ac:4f:
         23:f6:0f:fd:4e:3c:11:85:d5:c9:fc:03:86:4e:48:df:04:cd:
         67:8b:b8:c4:58:4d:a6:4a:f5:f8:11:6b:bf:1c:26:af:de:42:
         f4:c9:b2:ad:26:df:37:2e:18:3a:f6:21:26:00:bc:97:df:46:
         56:b7:a3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:39:04 2026 by rpki-client