Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
File:                     JzWNbTPibSr4Q9WB3PacDREKneg.mft (raw, json)
Hash identifier:          05sT+7nnjmLJWvFtJe2fxh+FOUBTNYY2ryACFksZ8u4=
Subject key identifier:   E8:5D:C5:E5:6B:3E:04:1C:BD:A9:E1:0A:95:72:B3:78:05:B4:65:7D
Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
Certificate issuer:       /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Certificate serial:       019FAB2C00BAAB20145214ADDBEA3D28A324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
Manifest number:          05EE
Signing time:             Wed 29 Jul 2026 00:00:15 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:15 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:15 +0000
Files and hashes:         1: JzWNbTPibSr4Q9WB3PacDREKneg.crl (hash: e2h5+VytYuIVFrppcIVzUX5SLQtwbWaZ1LA0ODFl964=)
                          2: q9nb03LLGhEQgbaQ_RRS2Oti8mA.roa (hash: +gb3UnVeZl4+1DAMyjUb0CGvwvwAAF1A19rfF/kmb3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:00:ba:ab:20:14:52:14:ad:db:ea:3d:28:a3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
        Validity
            Not Before: Jul 29 00:00:15 2026 GMT
            Not After : Jul 30 00:00:15 2026 GMT
        Subject: CN=e85dc5e56b3e041cbda9e10a9572b37805b4657d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:be:57:f5:12:ee:ad:8c:d3:f8:2b:fd:22:09:
                    b9:eb:95:f0:e5:68:b7:99:10:51:bf:0f:de:ec:fe:
                    fa:05:aa:b6:3f:ee:51:43:4f:b2:57:58:ce:a8:46:
                    59:6a:4b:f6:41:7d:d1:cf:11:28:24:dd:03:fd:cb:
                    a2:f0:0e:e3:4c:4a:08:f3:37:48:4b:df:13:ab:61:
                    a3:2a:0e:43:ae:43:14:f6:ed:55:89:98:6e:2a:cd:
                    57:da:07:68:b7:bd:e6:2f:f5:cf:83:a9:4f:04:21:
                    21:b9:f9:54:39:32:af:6a:0d:ee:3e:a5:6e:f6:13:
                    22:22:9c:1d:91:7d:48:49:c0:b9:ee:65:ba:8d:4e:
                    3f:4b:8e:b8:5f:b9:99:f8:cc:77:9d:08:37:77:6b:
                    83:c6:1e:52:5e:21:07:7e:69:18:bb:b8:26:4f:ce:
                    1c:a3:7f:a8:09:d9:b2:f6:66:44:7f:d9:75:e6:b6:
                    11:cf:d5:4e:89:fe:6f:4f:14:bc:89:43:9e:91:1c:
                    91:db:fb:05:37:d2:90:fa:e1:51:7a:3f:da:de:2e:
                    1c:3c:f0:db:97:df:07:21:14:44:21:ea:15:2d:01:
                    90:0d:b3:61:33:bc:32:7c:e9:6b:86:58:8d:85:be:
                    7b:ee:00:23:e5:45:31:e9:0a:9e:2f:26:20:cf:1f:
                    a7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5D:C5:E5:6B:3E:04:1C:BD:A9:E1:0A:95:72:B3:78:05:B4:65:7D
            X509v3 Authority Key Identifier:
                keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:bd:97:f4:b9:f4:fa:cd:a4:7d:3c:66:3c:f5:51:d6:23:f2:
         79:c2:a0:3f:74:cf:a5:5a:98:24:8c:1c:c5:61:c7:ec:29:d1:
         18:8e:4e:8c:4e:08:52:50:02:53:bd:ad:ca:22:2e:17:3e:59:
         f5:3c:95:38:d4:a4:ca:00:ed:e4:82:74:92:4a:52:0a:95:e0:
         f6:67:b4:37:5d:be:36:c2:23:94:12:ad:1b:ed:5a:12:e6:92:
         5f:7f:91:19:b7:8d:c3:fb:ac:3f:a2:f8:8d:60:4e:cd:2f:29:
         84:99:b5:c3:90:8b:55:fc:42:bf:ec:e6:38:df:e6:5f:92:73:
         dc:9f:aa:1d:23:1c:84:58:29:f1:e2:4f:90:6d:28:c2:d0:bb:
         f8:4f:d2:d1:ed:27:d8:e0:6d:af:75:81:cd:af:40:3f:19:89:
         92:9f:5b:47:60:19:8f:a5:30:e1:21:5c:ca:c6:c4:79:55:e7:
         f0:c3:2b:75:21:62:65:db:24:b5:c8:1c:fe:c1:18:3a:29:ab:
         21:00:4c:4e:a7:83:06:40:8f:73:46:ff:44:8b:2d:19:98:39:
         51:de:71:6f:65:bc:22:6b:a7:b5:4d:74:f2:11:0b:d3:59:7a:
         e8:29:aa:fe:99:8d:df:50:06:bc:a4:ea:1b:7c:2e:69:79:c1:
         83:fb:5c:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLAC6qyAUUhSt2+o9KKMkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MzU4ZDZkMzNlMjZkMmFmODQzZDU4MWRjZjY5YzBkMTEw
YTlkZTgwHhcNMjYwNzI5MDAwMDE1WhcNMjYwNzMwMDAwMDE1WjAzMTEwLwYDVQQD
EyhlODVkYzVlNTZiM2UwNDFjYmRhOWUxMGE5NTcyYjM3ODA1YjQ2NTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt75X9RLurYzT+Cv9Igm565Xw5Wi3
mRBRvw/e7P76Baq2P+5RQ0+yV1jOqEZZakv2QX3RzxEoJN0D/cui8A7jTEoI8zdI
S98Tq2GjKg5DrkMU9u1ViZhuKs1X2gdot73mL/XPg6lPBCEhuflUOTKvag3uPqVu
9hMiIpwdkX1IScC57mW6jU4/S464X7mZ+Mx3nQg3d2uDxh5SXiEHfmkYu7gmT84c
o3+oCdmy9mZEf9l15rYRz9VOif5vTxS8iUOekRyR2/sFN9KQ+uFRej/a3i4cPPDb
l98HIRREIeoVLQGQDbNhM7wyfOlrhliNhb577gAj5UUx6QqeLyYgzx+npQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhdxeVrPgQcvanhCpVys3gFtGV9MB8GA1UdIwQY
MBaAFCc1jW0z4m0q+EPVgdz2nA0RCp3oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMt
NDI2ZDlmZjIwN2QxLzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMtNDI2ZDlmZjIwN2Qx
LzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACr2X9Ln0
+s2kfTxmPPVR1iPyecKgP3TPpVqYJIwcxWHH7CnRGI5OjE4IUlACU72tyiIuFz5Z
9TyVONSkygDt5IJ0kkpSCpXg9me0N12+NsIjlBKtG+1aEuaSX3+RGbeNw/usP6L4
jWBOzS8phJm1w5CLVfxCv+zmON/mX5Jz3J+qHSMchFgp8eJPkG0owtC7+E/S0e0n
2OBtr3WBza9APxmJkp9bR2AZj6Uw4SFcysbEeVXn8MMrdSFiZdsktcgc/sEYOimr
IQBMTqeDBkCPc0b/RIstGZg5Ud5xb2W8ImuntU108hEL01l66Cmq/pmN31AGvKTq
G3wuaXnBg/tc6Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:06 2026 by rpki-client