Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File:                     JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier:          rjQxoX7sOY34rszharZy/lGxkPKZXicUEgeHeCY3dFI=
Subject key identifier:   1B:B7:41:CC:C7:4C:42:AE:6D:8D:3F:C3:A9:9D:F6:57:E7:C0:E0:73
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer:       /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial:       019EBFFF83EFFA0BB00E420687314F677594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number:          17CC
Signing time:             Sat 13 Jun 2026 08:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:54 +0000
Files and hashes:         1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: YQNWrVq0JgnPqJrmhSzUhD65nbb1jqiML8uz30f6arU=)
                          2: QT5YaQtwh10kjLMseFaZ5StOfCw.asa (hash: mXFjq/NajihGSXsqBXu5vBTGi2iI8iMdEQGHWiYPM84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:83:ef:fa:0b:b0:0e:42:06:87:31:4f:67:75:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
        Validity
            Not Before: Jun 13 08:00:54 2026 GMT
            Not After : Jun 14 08:00:54 2026 GMT
        Subject: CN=1bb741ccc74c42ae6d8d3fc3a99df657e7c0e073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d2:e4:e4:18:82:77:b0:1b:35:18:47:a8:c5:
                    bb:a4:53:96:78:d7:4d:ad:a8:6f:cf:d7:19:8a:c7:
                    23:54:68:da:05:2b:9f:37:ea:27:e8:74:f9:4b:23:
                    fc:5f:54:17:1b:8c:c3:c3:6f:0a:ef:ed:93:c5:23:
                    32:46:b0:5d:54:4d:b9:9b:a7:61:48:23:be:0b:b5:
                    39:36:0a:76:a9:fd:d4:4d:da:2b:24:78:81:1e:ee:
                    3a:19:eb:08:d4:85:d9:f1:02:6f:45:ad:88:4c:04:
                    d9:42:66:98:31:21:56:ab:0d:69:f7:08:cd:90:72:
                    b4:5f:45:8b:4b:9b:e7:d8:9f:2d:d5:58:f0:37:63:
                    25:e3:80:4d:3d:b4:b5:58:cc:97:65:22:14:2d:76:
                    d5:2c:9e:04:7e:a5:79:fb:73:a5:a7:f0:4c:d3:a3:
                    77:03:03:44:bd:af:33:2c:b4:7a:10:34:25:75:47:
                    f4:9a:52:f3:80:ca:aa:99:64:66:43:9a:95:6a:2c:
                    23:5b:f2:9b:b2:b7:4e:d8:49:19:ff:6c:2c:4b:bd:
                    8e:3a:f0:28:2f:f7:c2:08:91:d5:06:bb:91:d1:83:
                    fd:82:ab:d2:4a:8f:18:26:d2:5d:85:95:0d:ee:f2:
                    0a:f5:21:65:eb:68:70:2d:e7:46:7f:c6:20:3a:a1:
                    5f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B7:41:CC:C7:4C:42:AE:6D:8D:3F:C3:A9:9D:F6:57:E7:C0:E0:73
            X509v3 Authority Key Identifier:
                keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ab:32:66:e3:d3:a8:c1:8a:02:8e:5b:18:9b:20:84:77:1e:
         cc:10:55:7d:b2:17:c1:e1:64:c0:0e:cd:7a:03:06:11:10:4f:
         9a:5f:de:77:46:46:69:64:95:8f:02:f7:47:26:0a:52:0f:e8:
         e3:68:33:fd:42:d4:48:71:4c:03:fd:83:74:4d:c9:ab:23:2a:
         b2:69:2d:72:47:12:e7:8c:87:be:aa:76:b3:7d:c0:94:39:19:
         2c:20:f4:7a:e7:3c:f5:c3:67:c6:30:39:ca:2d:58:20:b4:56:
         d8:c9:50:8d:fa:6b:ee:72:90:0d:1b:ca:59:21:ca:e0:90:96:
         32:14:11:7d:9f:9a:d7:57:2f:d0:56:cf:46:68:fa:07:80:5b:
         4e:dd:e1:fe:06:e5:85:cf:a9:bb:2c:41:aa:2f:2b:af:fb:61:
         64:f3:ef:88:e1:24:c0:27:ea:b9:6f:4d:4d:22:b9:b6:96:02:
         1b:cb:a2:a0:05:91:b6:de:ab:7f:f4:f7:07:e8:97:40:bc:c8:
         3a:89:e2:fa:44:3e:8b:89:3b:23:c7:a7:f2:93:49:f0:75:3f:
         12:ab:50:4f:f5:85:79:b3:14:69:bd:ea:ed:26:6e:ee:57:63:
         ec:96:16:be:e4:87:37:90:6d:94:35:c2:0e:b2:dc:72:ec:aa:
         a3:bc:13:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:15 2026 by rpki-client