Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft
File:                     JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft (raw, json)
Hash identifier:          WDWyanAz4kgblPDBjJquzOQ1s6a7jNUoz65OzmsNoLI=
Subject key identifier:   6E:BF:F7:34:E7:0C:A9:62:D1:B7:72:25:3B:31:B8:B5:27:AC:17:6E
Authority key identifier: 25:46:7F:2D:5B:B2:35:5A:F7:5F:B4:7F:11:60:6D:81:58:9F:76:38
Certificate issuer:       /CN=25467f2d5bb2355af75fb47f11606d81589f7638
Certificate serial:       019EBE4780AD52F4AC3EC8721A5DEA740090
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUZ_LVuyNVr3X7R_EWBtgVifdjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft
Manifest number:          E3
Signing time:             Sat 13 Jun 2026 00:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:17 +0000
Files and hashes:         1: A-DXg-M5jvEoV7mt-5nVIAB_Z0g.roa (hash: SrntviZ4+NLJCPuFucg/3YO9L4f5luqtxUvspbJaNHI=)
                          2: JUZ_LVuyNVr3X7R_EWBtgVifdjg.crl (hash: gnPt603FKmRJX609imwe/88y88eE9FzXZCRhuVTVCpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JUZ_LVuyNVr3X7R_EWBtgVifdjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:80:ad:52:f4:ac:3e:c8:72:1a:5d:ea:74:00:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25467f2d5bb2355af75fb47f11606d81589f7638
        Validity
            Not Before: Jun 13 00:00:17 2026 GMT
            Not After : Jun 14 00:00:17 2026 GMT
        Subject: CN=6ebff734e70ca962d1b772253b31b8b527ac176e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:33:ee:80:66:c5:05:72:ca:96:ef:5e:9d:77:
                    18:12:75:4e:ba:f1:7d:55:34:9e:88:3f:2e:17:7f:
                    98:a3:4d:43:61:f4:eb:80:cc:45:54:b9:44:eb:63:
                    96:fa:7b:5e:35:83:e7:c6:9d:d3:4d:5e:00:70:eb:
                    ca:8a:1b:9d:4b:71:76:ca:8c:62:3c:3b:24:01:67:
                    15:fa:61:d1:51:1f:f0:24:39:e3:de:f8:7b:44:56:
                    81:bb:32:b6:c4:15:7f:ed:9b:0b:ad:3c:55:d2:0b:
                    ea:bc:c5:eb:3d:92:f7:04:86:94:2a:52:07:31:11:
                    31:2f:e0:1d:95:6b:d5:a3:40:52:54:7a:2e:51:82:
                    de:01:c8:ec:83:74:20:f9:80:47:c6:15:cd:a6:9a:
                    79:29:a9:96:86:95:95:00:47:43:3c:5f:82:a0:94:
                    30:d5:ff:19:6e:f1:c3:a7:9d:30:8c:e0:17:73:8d:
                    97:83:47:19:fa:67:d4:ed:2d:f9:13:66:71:48:a7:
                    2d:f6:15:7c:02:2c:ec:30:52:b8:6e:b7:9e:d1:04:
                    3d:00:26:50:90:cf:b9:df:9d:40:04:e5:81:58:e4:
                    8d:2f:22:35:41:ba:70:87:1d:60:4f:b7:4a:2f:f8:
                    ab:fa:c4:52:62:ad:0d:be:fa:4a:2c:c6:2f:a0:c3:
                    be:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BF:F7:34:E7:0C:A9:62:D1:B7:72:25:3B:31:B8:B5:27:AC:17:6E
            X509v3 Authority Key Identifier:
                keyid:25:46:7F:2D:5B:B2:35:5A:F7:5F:B4:7F:11:60:6D:81:58:9F:76:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUZ_LVuyNVr3X7R_EWBtgVifdjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e4:df:3a:82:c9:f6:f9:5e:01:c9:34:b9:df:89:0f:84:e1:
         fb:8d:02:05:7e:77:ae:c6:13:86:3e:0e:a8:8c:9d:59:7e:84:
         ef:4a:f9:00:19:57:6f:ea:92:17:8c:9b:64:27:5b:37:db:82:
         19:a3:a7:be:3a:21:5a:84:16:0e:39:c5:98:88:6a:10:36:d5:
         c0:85:66:b4:19:6d:19:6a:72:78:f9:b6:cf:64:53:6a:e7:f5:
         69:59:b9:d0:af:ea:ef:1d:40:7f:01:cd:96:a1:7d:54:a5:0b:
         c8:98:e3:c4:2c:b2:73:94:f3:03:5e:27:6a:75:d1:19:4f:81:
         cd:8b:78:6f:93:0d:98:6d:01:d9:46:93:ea:06:be:6f:e7:f7:
         1f:39:01:9b:e9:1c:c6:4d:e5:f5:aa:46:67:cc:af:93:5b:d9:
         f9:56:5c:43:63:be:58:45:28:f8:80:86:ea:a2:1c:36:82:12:
         92:e3:ff:2e:a7:7e:f9:8a:07:8b:58:65:b0:a6:99:ce:24:7a:
         14:2b:cb:82:60:f3:06:a3:a9:ea:7c:9e:d8:0a:ff:83:96:f4:
         73:3b:70:66:fb:36:4e:46:0f:1f:8f:31:9c:27:2c:9f:9c:46:
         49:fa:17:1c:fc:f5:d8:98:b3:6a:1e:30:ed:4c:9f:01:38:be:
         ac:f3:3c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:13:55 2026 by rpki-client