Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
File:                     JwafGIPczJOnhpxB7D6XL_X9SwE.mft (raw, json)
Hash identifier:          z2hQLtRyZ3HgNCHLjOtFgA/it7TSf5GmiwoaA1C6RDU=
Subject key identifier:   0F:5E:3D:95:2A:92:A4:A8:82:AF:30:20:14:08:1B:8B:39:D5:74:D3
Authority key identifier: 27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
Certificate issuer:       /CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Certificate serial:       019EC2CA19D0F378A15CFA4A548E7A30F630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
Manifest number:          03E4
Signing time:             Sat 13 Jun 2026 21:01:25 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:25 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:25 +0000
Files and hashes:         1: JwafGIPczJOnhpxB7D6XL_X9SwE.crl (hash: XW1bDt+yFL5fecpMkCwtNE9F/I+zkA9pX5GgKLx8h2I=)
                          2: c-F07oW418TCkLIDuM4bPsepLlw.roa (hash: HiwmaaNLgIsPLCrsmNEOGqUJ63k1RwsqFon6JmR4rWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ca:19:d0:f3:78:a1:5c:fa:4a:54:8e:7a:30:f6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
        Validity
            Not Before: Jun 13 21:01:25 2026 GMT
            Not After : Jun 14 21:01:25 2026 GMT
        Subject: CN=0f5e3d952a92a4a882af302014081b8b39d574d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b7:b6:ae:6c:d7:a5:94:7d:a4:80:56:75:20:
                    1e:d3:72:13:b0:aa:49:3b:23:8c:35:27:bc:08:b5:
                    a2:87:d7:10:b8:b6:de:d1:57:cc:66:dc:10:70:5a:
                    22:a4:7e:a5:52:9c:19:ec:f8:9a:6c:88:dc:24:1c:
                    ee:08:94:87:64:b8:88:37:91:41:7d:29:ab:53:d4:
                    a4:51:d6:8d:61:11:47:08:89:d0:ce:66:24:ee:e2:
                    09:92:8c:34:36:4f:77:58:7e:45:85:5a:ed:67:15:
                    fa:f5:f7:42:ea:40:ca:3c:fa:2c:b7:dd:08:c2:2c:
                    61:5f:28:b2:ca:7b:ba:58:7f:3e:f3:43:6a:47:c7:
                    fd:1e:25:bd:3e:c6:45:af:fa:ba:56:39:33:28:8f:
                    c5:ca:5b:10:88:25:a6:cf:af:de:ff:46:65:4a:a4:
                    18:e5:21:77:b0:2f:9a:8c:bd:ef:ac:1a:da:12:9a:
                    c7:b9:a9:70:a3:ff:c4:2b:1e:fe:34:d0:ad:46:e4:
                    c6:5c:55:54:99:a2:ae:2e:d3:af:22:0c:65:8b:ce:
                    b0:20:3c:53:ff:92:a8:e6:b2:8c:8b:18:3c:ba:12:
                    9d:36:94:94:2b:69:10:e3:fd:83:8c:15:f8:3b:e2:
                    61:34:53:30:14:51:34:bd:2f:36:8e:06:58:7a:ac:
                    b7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5E:3D:95:2A:92:A4:A8:82:AF:30:20:14:08:1B:8B:39:D5:74:D3
            X509v3 Authority Key Identifier:
                keyid:27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:4c:90:10:34:c5:cc:53:fe:19:2c:62:71:ec:3a:36:78:3e:
         68:b8:2a:76:af:9f:b9:09:bd:a7:65:2c:d5:8d:c3:09:e5:a9:
         1c:7d:2c:35:4c:1a:bc:3e:39:85:1e:8c:c2:16:70:6e:f1:71:
         9a:34:22:62:b7:de:5f:74:f4:54:a2:df:52:9f:e1:80:9b:73:
         18:b0:05:90:5d:a4:81:21:7e:b0:71:0c:42:8a:da:ea:e4:bb:
         b7:f7:02:36:fe:7c:1f:9f:45:d4:ac:5b:06:2f:ff:3b:b9:99:
         c5:6a:0b:b5:63:48:f4:60:8e:8f:10:c5:ec:f4:b5:b2:dd:c0:
         64:9e:96:ab:aa:4c:b8:7f:ed:af:a1:de:7f:85:f6:3c:22:50:
         40:6c:53:bb:9b:f7:5b:36:5a:b9:ac:34:34:f5:e2:ae:52:ac:
         c7:a7:1e:3f:d1:3f:cc:ee:b3:b7:6c:aa:e0:50:97:1f:13:ab:
         fd:c0:45:0b:e3:11:37:71:cc:f9:61:35:5a:a0:da:82:a3:1c:
         36:b9:ca:c9:05:48:1e:e0:aa:93:4b:38:cb:38:c3:df:3d:49:
         28:30:b6:f5:72:12:33:c8:96:ae:36:80:7a:90:67:a3:08:e8:
         b6:9f:71:05:cf:88:69:f0:3b:04:d9:c4:0f:f6:0a:b9:f8:80:
         45:f1:a4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:07 2026 by rpki-client