Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
File:                     JzWNbTPibSr4Q9WB3PacDREKneg.mft (raw, json)
Hash identifier:          8Z27RtGzpgD8rkR3iGTXui2naa7b5JbsT5fmy0SxL1s=
Subject key identifier:   B5:51:CC:FB:E8:5D:87:96:DE:5A:85:B3:A3:06:BA:46:5E:0C:F2:DF
Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
Certificate issuer:       /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Certificate serial:       019EBF912ED3A3DB9C864C93D31FF396BDD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
Manifest number:          0574
Signing time:             Sat 13 Jun 2026 06:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:23 +0000
Files and hashes:         1: JzWNbTPibSr4Q9WB3PacDREKneg.crl (hash: Ni5kxdEVe/gO+CawWc0g4nOrw4Dms3EPAjh7SHeVE1o=)
                          2: q9nb03LLGhEQgbaQ_RRS2Oti8mA.roa (hash: +gb3UnVeZl4+1DAMyjUb0CGvwvwAAF1A19rfF/kmb3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:2e:d3:a3:db:9c:86:4c:93:d3:1f:f3:96:bd:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
        Validity
            Not Before: Jun 13 06:00:23 2026 GMT
            Not After : Jun 14 06:00:23 2026 GMT
        Subject: CN=b551ccfbe85d8796de5a85b3a306ba465e0cf2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:50:bd:cb:58:ed:5d:84:e1:8f:66:56:0d:
                    82:f1:15:83:a8:bf:56:6f:b5:25:d7:b6:94:28:b9:
                    35:9c:bd:f7:4c:de:58:59:97:07:c0:22:3a:ed:66:
                    66:b1:e5:6a:44:a1:a3:4d:c8:3a:cd:5e:b4:f9:14:
                    d4:43:c9:39:66:6e:2b:3e:c3:66:4c:cc:80:a2:d3:
                    7b:7b:49:5a:91:dd:09:72:b5:cc:da:ca:1a:b5:c5:
                    f3:b4:fa:33:e0:16:ef:22:43:9e:59:0a:0a:b7:1e:
                    ef:7c:ab:e1:f4:53:82:c4:f0:e8:6f:1f:8d:32:0f:
                    5e:69:fa:0d:e2:f0:0c:2b:4c:4a:d0:14:13:79:ed:
                    c5:dd:42:9a:3b:ff:ff:2b:f3:ab:60:d0:18:26:17:
                    b6:26:1b:d6:e9:ff:ac:12:da:f0:53:4d:2a:2b:50:
                    20:bc:b6:3e:6a:af:61:1c:9c:f5:ee:8d:8e:82:18:
                    64:c6:8e:93:1d:9a:4d:70:f7:60:43:f7:b3:55:05:
                    e5:70:f6:f8:a2:30:c0:88:93:d4:fb:fd:e3:8c:4b:
                    a4:ec:9d:62:11:d5:f0:a9:8d:07:d2:6f:a2:d5:bb:
                    b8:ef:24:87:0a:72:9b:e1:6e:9d:77:52:b9:0a:c5:
                    2c:e1:74:4c:7c:b5:29:77:2e:af:09:d0:21:c9:f9:
                    07:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:51:CC:FB:E8:5D:87:96:DE:5A:85:B3:A3:06:BA:46:5E:0C:F2:DF
            X509v3 Authority Key Identifier:
                keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:0f:21:2f:ba:58:78:b6:a2:5d:08:17:07:aa:b7:6b:ba:79:
         6e:cd:5a:18:c7:aa:77:e7:51:a9:d1:41:eb:1c:4b:bf:2f:e3:
         4d:99:80:40:0a:d3:22:8d:cb:4d:ea:67:62:ee:40:16:28:11:
         29:3e:be:1a:45:1c:0a:ed:f3:eb:da:83:e2:ea:d7:99:48:6a:
         db:f7:fd:73:47:6b:d2:13:6e:a8:29:b1:e1:7f:09:37:5d:b7:
         fd:14:e8:b4:53:52:40:1f:f9:69:2d:4e:16:8e:d8:19:d9:1e:
         a6:64:1a:73:b0:33:48:4a:12:0f:87:1d:7d:ff:8d:29:c3:05:
         e6:89:8f:83:17:e3:26:fa:56:9c:d6:53:0b:56:e7:f8:2c:f4:
         ad:30:ab:3b:e2:22:76:67:ce:8e:73:f6:a4:78:7d:01:a4:b5:
         75:66:b0:8b:49:e5:33:66:93:47:14:8c:0b:03:8f:2a:02:a0:
         53:bb:b4:3e:d7:d7:35:1f:c9:df:17:2d:fe:fd:d6:10:69:ee:
         54:0b:4c:70:ec:7a:f8:e2:0a:0d:b1:bc:91:ff:31:de:a3:21:
         a9:fd:08:d7:ec:be:ce:94:21:1f:ee:86:e6:86:71:4f:40:39:
         34:d1:2b:08:02:b8:d5:fd:f8:94:e9:32:44:1f:e3:ab:92:c4:
         0f:91:05:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:20:32 2026 by rpki-client