Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
File:                     JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft (raw, json)
Hash identifier:          7IxuinTuW0e//s7hK7YMQ5xU/n3wULMRFg3QhBmuL/g=
Subject key identifier:   6F:C7:36:0B:08:5B:F3:D1:D3:8E:47:3A:5D:58:4A:9D:27:6A:9C:01
Authority key identifier: 24:7C:DB:5E:A8:2E:03:33:36:64:0E:9E:EC:8E:A0:98:CA:C8:61:80
Certificate issuer:       /CN=247cdb5ea82e033336640e9eec8ea098cac86180
Certificate serial:       019EC29252816C7B876E510A9DA2E71B3A71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
Manifest number:          C0
Signing time:             Sat 13 Jun 2026 20:00:29 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:29 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:29 +0000
Files and hashes:         1: JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl (hash: R4G/z7eTzD0T/kmxRZHj2QFTjTTHnPgwDh/QEZk4dtY=)
                          2: sr5kiWaUNJb3k53oHKiE3zAeNCc.roa (hash: 4lKEnHHPq8ieSuUmi9tpKwDYW28NC9iz/gZMj6c8NHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:52:81:6c:7b:87:6e:51:0a:9d:a2:e7:1b:3a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=247cdb5ea82e033336640e9eec8ea098cac86180
        Validity
            Not Before: Jun 13 20:00:29 2026 GMT
            Not After : Jun 14 20:00:29 2026 GMT
        Subject: CN=6fc7360b085bf3d1d38e473a5d584a9d276a9c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:1b:bc:bf:35:1e:6f:d5:3d:57:2a:f0:24:
                    b6:73:ef:01:3d:80:b1:f5:6a:e0:9d:3c:fe:a2:86:
                    a7:a8:30:e6:fd:77:3c:5e:ad:d7:5a:bb:98:53:49:
                    a3:67:37:f3:58:1a:34:6e:ec:70:9a:f3:a4:36:83:
                    61:e3:ee:ff:0d:2b:a4:48:40:01:90:ca:31:13:40:
                    47:1f:f2:bd:8f:3e:36:b7:d4:29:78:ec:a5:82:60:
                    1f:e0:b8:2b:34:5e:b6:bb:bb:9b:f6:bb:ba:61:ea:
                    d9:1f:1e:8c:62:35:67:fd:00:cd:31:f4:d3:df:0a:
                    9e:0c:44:2e:39:e9:b0:e9:cc:d5:4f:8e:95:87:5c:
                    60:01:ce:fa:0a:77:94:0d:e0:56:41:9b:a2:d3:e8:
                    09:38:22:24:81:0d:21:06:b6:d9:85:5c:45:6a:44:
                    e0:1f:bc:2a:0e:7e:cc:80:cc:bf:f9:61:45:1e:36:
                    c8:4c:ee:d4:71:a5:9d:2e:f1:73:b8:34:2e:e2:61:
                    84:8e:9c:3f:e6:35:01:8f:25:c6:79:0b:75:64:26:
                    cd:62:1a:40:6f:b3:8f:27:84:ea:78:d0:af:16:4d:
                    6f:75:6d:e7:cf:02:9e:de:3a:06:e5:90:37:3a:96:
                    b6:22:4d:4c:98:2b:d3:cf:be:f0:f0:52:72:a7:a9:
                    f7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C7:36:0B:08:5B:F3:D1:D3:8E:47:3A:5D:58:4A:9D:27:6A:9C:01
            X509v3 Authority Key Identifier:
                keyid:24:7C:DB:5E:A8:2E:03:33:36:64:0E:9E:EC:8E:A0:98:CA:C8:61:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:93:ce:c6:32:52:cd:62:65:2b:28:23:b6:19:13:08:8c:b7:
         8e:ce:d0:d6:25:95:90:38:f1:ad:6d:26:3d:5f:29:8a:73:7a:
         df:a6:39:52:38:c7:76:67:03:6d:3c:97:f3:61:f3:01:b4:21:
         85:9a:85:f8:c1:4b:6f:a6:30:35:bc:10:da:84:28:41:a9:de:
         68:d8:10:7d:2a:83:c2:b5:6a:d5:10:8b:ee:c6:08:62:17:93:
         b9:4f:3c:fe:c0:20:1f:a2:4c:3a:fb:97:7e:d1:8a:dc:43:7a:
         a4:5c:89:ad:22:f2:bc:c4:4f:a6:be:52:9f:94:60:52:20:4e:
         f2:37:12:0b:5c:cc:55:55:8d:9a:7f:cb:b9:3d:3e:2d:30:11:
         60:d9:dd:35:1a:96:3d:d9:c0:8b:02:50:c2:59:47:2c:c8:91:
         5c:75:d6:2d:73:8e:d3:d5:6f:c4:d3:c8:42:fa:44:3c:6a:60:
         50:60:2e:b1:7f:02:f5:37:3a:4f:e0:86:20:b0:da:55:c6:cf:
         e0:0f:27:0d:4d:5d:d2:32:bd:3a:68:42:35:8d:30:74:88:34:
         83:c3:a3:94:8a:b4:b5:f5:f2:9c:a4:c4:8a:bd:30:d1:b1:6d:
         57:fd:d8:17:af:2d:27:1a:fe:97:16:fc:7d:6d:c1:44:b3:39:
         33:c8:6e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:50:43 2026 by rpki-client