Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
File:                     jAz2W63ZqIrMwydQC1_ynR_wkZY.mft (raw, json)
Hash identifier:          PEuFxpPoLxbrFDmWOYAkJroLJ0PLllmFwT6gPoVpOLI=
Subject key identifier:   BB:40:31:8E:00:B5:8E:72:70:9E:93:51:CA:DA:FC:4E:BC:8B:8D:B8
Authority key identifier: 8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96
Certificate issuer:       /CN=8c0cf65badd9a88accc327500b5ff29d1ff09196
Certificate serial:       019EC1EE4732EEDBEA2482C2E5353A41FCFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
Manifest number:          040E
Signing time:             Sat 13 Jun 2026 17:01:18 +0000
Manifest this update:     Sat 13 Jun 2026 17:01:18 +0000
Manifest next update:     Sun 14 Jun 2026 17:01:18 +0000
Files and hashes:         1: jAz2W63ZqIrMwydQC1_ynR_wkZY.crl (hash: tUSqVeHQKHkOtrHk0zCFphz7cR/6gdRtp4Phb0D6N7E=)
                          2: q2iMHMpPinukFM5Qhc4ZwsftRx0.roa (hash: +p+ImNbpg+AUu5Y3P8c/ugT7MQsuGHh+4k2E8cJ52tE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ee:47:32:ee:db:ea:24:82:c2:e5:35:3a:41:fc:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c0cf65badd9a88accc327500b5ff29d1ff09196
        Validity
            Not Before: Jun 13 17:01:18 2026 GMT
            Not After : Jun 14 17:01:18 2026 GMT
        Subject: CN=bb40318e00b58e72709e9351cadafc4ebc8b8db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:32:10:83:83:9f:44:c2:59:ff:49:4e:0f:4f:
                    ff:a4:1f:62:db:6c:41:7c:2e:6c:3d:da:b8:50:f2:
                    cb:cf:a5:8f:c7:0f:4b:d5:8c:1b:fc:85:57:b4:75:
                    43:c7:52:29:48:a0:1e:fd:83:a8:b4:df:bf:37:da:
                    76:2c:92:a7:f4:43:52:28:1e:47:6a:8b:c3:d9:96:
                    fe:78:54:80:d9:04:f4:ac:f0:02:ac:3d:a4:af:83:
                    8f:c2:a7:9e:e9:b7:5e:22:3a:d2:04:1e:49:4e:c5:
                    fe:e8:42:82:84:c6:9d:23:be:a6:ac:cf:87:6f:04:
                    93:a9:e0:47:b9:04:8d:28:0a:3f:1d:fa:30:35:e4:
                    a9:b9:5d:ad:8a:e5:7d:57:d7:63:9a:66:66:aa:a0:
                    3b:1b:4c:4c:a9:8f:cb:05:8b:b1:33:f6:9e:7d:95:
                    f5:e4:d6:32:4f:9f:39:30:4f:53:54:e4:23:2f:4f:
                    99:cb:aa:33:ef:24:d7:76:c2:30:94:c9:e0:ef:8c:
                    86:51:02:05:55:44:e2:85:6f:5f:32:26:e0:6c:27:
                    fe:e1:d6:c6:04:81:b3:85:18:fb:e8:3b:14:f1:9e:
                    36:8f:cc:d7:60:25:ca:69:21:b9:a4:a4:88:9f:d1:
                    06:97:e0:d2:5f:de:08:bf:d5:14:6c:37:e7:65:05:
                    5e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:40:31:8E:00:B5:8E:72:70:9E:93:51:CA:DA:FC:4E:BC:8B:8D:B8
            X509v3 Authority Key Identifier:
                keyid:8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:af:06:54:f1:2b:09:dd:33:2b:81:e2:93:34:73:2c:87:b4:
         f5:14:cf:19:79:40:07:6c:77:08:bd:c1:7f:14:9b:c5:72:71:
         50:7f:77:2d:ab:c8:9e:8a:7d:22:e3:7d:4a:5a:1a:50:4c:9c:
         c6:53:3a:e0:2a:75:54:64:9e:d3:e8:ab:37:88:4c:c2:21:d9:
         be:70:a9:ea:8f:79:3b:6c:6b:75:a3:d7:7e:c2:4b:bd:e7:66:
         ce:dd:a9:80:5e:59:34:a8:b9:b8:55:cb:4f:42:ce:ae:1e:e8:
         3b:dd:c3:aa:23:0a:fe:30:11:61:23:22:e2:cd:8e:23:1d:2c:
         15:c6:05:1b:55:77:37:e4:05:e8:e1:10:43:a8:07:24:ed:fc:
         b1:96:11:59:d9:79:fc:0f:5f:7c:50:89:37:b0:86:e4:c6:18:
         ef:13:35:5b:e7:7c:b0:4d:f6:41:5c:71:c6:4e:27:f0:c0:fe:
         f7:6a:6a:08:8c:6b:95:72:1e:a6:9e:4e:1a:55:aa:13:40:86:
         7e:65:e9:a0:37:01:a0:50:ec:71:ff:cf:3b:cf:16:a9:a2:b0:
         ed:9f:e5:82:7c:c8:d9:34:c6:e2:3e:e9:7a:32:24:23:ae:9d:
         ef:05:62:a7:93:d9:ec:ad:75:85:a7:92:b7:fc:c2:7f:90:35:
         83:2d:2a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:09:06 2026 by rpki-client