Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
File:                     JrFSTsAdz0BfRBcYKe1nopkqpC0.mft (raw, json)
Hash identifier:          O4K1zlY9iET6YpwyWnrw80MarOhhlsj24kb+N8BRsho=
Subject key identifier:   29:0C:10:09:E4:23:AC:05:E9:C0:EA:0A:87:F0:70:9D:D6:21:9D:F9
Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
Certificate issuer:       /CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Certificate serial:       019EC1B75173E357598E5EF5793946859BD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
Manifest number:          068A
Signing time:             Sat 13 Jun 2026 16:01:17 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:17 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:17 +0000
Files and hashes:         1: JrFSTsAdz0BfRBcYKe1nopkqpC0.crl (hash: BE3x4VAtvdZwxdgD4y+xkgE3d6CtQgmG2HpNujh/zsQ=)
                          2: _Y_601F6eAt7O-baCpdg3BQDJXc.roa (hash: vyG9YG54wVQIAnIU/YKZPIrIY0HUdh61Oh6KNWA0bnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:51:73:e3:57:59:8e:5e:f5:79:39:46:85:9b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d
        Validity
            Not Before: Jun 13 16:01:17 2026 GMT
            Not After : Jun 14 16:01:17 2026 GMT
        Subject: CN=290c1009e423ac05e9c0ea0a87f0709dd6219df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:a6:04:33:80:f3:11:0c:3e:af:80:1c:93:
                    f9:ea:a6:52:4c:e9:04:bb:80:37:3c:28:e7:95:7d:
                    08:21:1b:6b:ed:eb:fd:27:af:cd:1e:c3:b0:a7:4b:
                    7b:fb:12:e4:24:7b:0d:9a:65:35:7b:7f:cf:44:b1:
                    06:05:fa:c4:29:df:32:50:be:a6:5f:f0:43:8c:41:
                    df:16:74:78:cb:91:36:1e:01:cf:af:0a:d5:d8:dd:
                    4d:cf:dc:f3:1f:96:37:6c:b3:f8:fe:47:71:67:0b:
                    f8:a1:fb:02:69:a4:93:52:e2:02:c8:1f:9d:07:22:
                    a3:ed:35:83:07:2b:e4:bf:37:3a:30:62:53:ff:5d:
                    11:ed:87:96:15:4f:fd:89:56:85:e1:4c:bf:2b:82:
                    2f:da:56:0e:2b:c4:3d:0d:f4:77:2f:8e:6c:d6:a8:
                    b0:e6:b8:46:31:86:53:eb:f6:52:88:18:a1:b4:44:
                    2d:a6:fb:db:9d:eb:f7:f8:05:13:0a:ce:40:23:e4:
                    93:de:4b:47:1d:05:11:67:58:30:9a:b9:f0:23:3b:
                    54:3d:76:34:11:ea:b7:cc:fe:91:ae:bd:ca:ff:be:
                    5a:8a:ad:02:b9:6f:2c:82:61:68:9f:9b:ad:a6:7f:
                    7b:4a:73:b2:86:92:57:5e:27:3e:74:03:74:1f:6d:
                    96:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0C:10:09:E4:23:AC:05:E9:C0:EA:0A:87:F0:70:9D:D6:21:9D:F9
            X509v3 Authority Key Identifier:
                keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ee:d6:9f:74:81:d7:ac:85:9b:5b:fb:a8:84:cf:fa:87:60:
         25:e1:97:7e:09:2b:f6:6a:bb:2a:a7:49:fa:58:18:50:0d:12:
         f6:2e:c8:4b:e3:c8:f9:ef:1e:e7:e7:be:6e:75:f4:dd:41:14:
         cf:4e:02:47:6d:2c:e4:53:ff:58:a0:e4:08:21:61:0d:b6:33:
         c8:24:b2:0e:75:db:d3:31:3b:27:ff:22:fb:4c:d7:c9:11:35:
         3b:d4:5b:3b:2f:49:4d:6e:54:16:f8:6f:2b:d9:d0:3e:b9:d3:
         13:53:35:8c:b0:1d:00:7b:30:0d:99:f7:af:0e:be:e2:20:47:
         fe:4e:96:d5:91:90:5e:9c:d0:04:8a:12:86:5d:a1:b8:db:73:
         6b:cc:5a:79:99:d2:9c:da:28:e3:ce:f0:a2:57:e1:70:56:bf:
         80:2e:d3:11:33:0b:8b:72:c0:33:f9:cf:13:05:90:7d:58:4e:
         bf:36:fe:7b:08:3d:b5:35:5b:11:30:e3:43:24:80:ad:30:c9:
         b2:88:0b:ea:f0:34:25:8f:a8:18:02:ac:c5:a7:25:23:f1:08:
         15:9d:18:cd:2d:8e:31:e0:6c:c1:30:fa:ab:b0:07:50:4f:5c:
         97:25:5a:77:60:5b:eb:31:9e:18:e9:57:ab:cb:fa:14:97:b4:
         bd:7a:c5:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bt1Fz41dZjl71eTlGhZvYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YjE1MjRlYzAxZGNmNDA1ZjQ0MTcxODI5ZWQ2N2EyOTky
YWE0MmQwHhcNMjYwNjEzMTYwMTE3WhcNMjYwNjE0MTYwMTE3WjAzMTEwLwYDVQQD
EygyOTBjMTAwOWU0MjNhYzA1ZTljMGVhMGE4N2YwNzA5ZGQ2MjE5ZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHumBDOA8xEMPq+AHJP56qZSTOkE
u4A3PCjnlX0IIRtr7ev9J6/NHsOwp0t7+xLkJHsNmmU1e3/PRLEGBfrEKd8yUL6m
X/BDjEHfFnR4y5E2HgHPrwrV2N1Nz9zzH5Y3bLP4/kdxZwv4ofsCaaSTUuICyB+d
ByKj7TWDByvkvzc6MGJT/10R7YeWFU/9iVaF4Uy/K4Iv2lYOK8Q9DfR3L45s1qiw
5rhGMYZT6/ZSiBihtEQtpvvbnev3+AUTCs5AI+ST3ktHHQURZ1gwmrnwIztUPXY0
Eeq3zP6Rrr3K/75aiq0CuW8sgmFon5utpn97SnOyhpJXXic+dAN0H22WNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkMEAnkI6wF6cDqCofwcJ3WIZ35MB8GA1UdIwQY
MBaAFCaxUk7AHc9AX0QXGCntZ6KZKqQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnJGU1RzQWR6MEJmUkJjWUtlMW5vcGtxcEMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNTY1NjMtZTYxYy00YjhhLThkNmUt
NzY2YzgyNzU4MDY1LzEvSnJGU1RzQWR6MEJmUkJjWUtlMW5vcGtxcEMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wNTY1NjMtZTYxYy00YjhhLThkNmUtNzY2YzgyNzU4MDY1
LzEvSnJGU1RzQWR6MEJmUkJjWUtlMW5vcGtxcEMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAae7Wn3SB
16yFm1v7qITP+odgJeGXfgkr9mq7KqdJ+lgYUA0S9i7IS+PI+e8e5+e+bnX03UEU
z04CR20s5FP/WKDkCCFhDbYzyCSyDnXb0zE7J/8i+0zXyRE1O9RbOy9JTW5UFvhv
K9nQPrnTE1M1jLAdAHswDZn3rw6+4iBH/k6W1ZGQXpzQBIoShl2huNtza8xaeZnS
nNoo487wolfhcFa/gC7TETMLi3LAM/nPEwWQfVhOvzb+ewg9tTVbETDjQySArTDJ
sogL6vA0JY+oGAKsxaclI/EIFZ0YzS2OMeBswTD6q7AHUE9clyVad2Bb6zGeGOlX
q8v6FJe0vXrF1w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:24:22 2026 by rpki-client