Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
File:                     1-J4in4YLBY0j_SiikmFhuHhjMMY.mft (raw, json)
Hash identifier:          1Bw7XP0k7kSu/Fw9U/m8f0bdgGHFrdsbAW4p2/DF0O4=
Subject key identifier:   00:04:73:49:28:F2:D7:74:72:7E:10:B9:83:15:8E:39:29:76:E8:58
Authority key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
Certificate issuer:       /CN=f89e229f860b058d23fd28a2926161b8786330c6
Certificate serial:       019EBFC928632181C7CE83C05EF2EDC56C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
Manifest number:          1220
Signing time:             Sat 13 Jun 2026 07:01:31 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:31 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:31 +0000
Files and hashes:         1: 1-J4in4YLBY0j_SiikmFhuHhjMMY.crl (hash: fQtkRXgBOC7Bq273Q6EdRyKB3mzWa1PN6Wg9NH23SNk=)
                          2: fSxv-fa820aQ4S9EYgBkeHgJYUs.roa (hash: K47nAqoGk2oEUNxR6ydvT1zDvrh8m0EYPg1t6S3F6ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:28:63:21:81:c7:ce:83:c0:5e:f2:ed:c5:6c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89e229f860b058d23fd28a2926161b8786330c6
        Validity
            Not Before: Jun 13 07:01:31 2026 GMT
            Not After : Jun 14 07:01:31 2026 GMT
        Subject: CN=0004734928f2d774727e10b983158e392976e858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:80:85:17:5c:e8:e1:8e:74:30:6d:73:e7:46:
                    09:81:4c:eb:73:be:f8:b6:1c:54:09:4a:ed:42:98:
                    fc:c8:ac:e7:24:f7:e7:b5:33:bc:79:61:ab:bc:d8:
                    19:88:62:d5:bc:a5:af:54:48:a0:17:d1:30:75:22:
                    1d:39:00:bf:74:3e:e2:2d:4b:50:a8:93:33:12:2c:
                    66:51:0e:8e:2c:74:a8:a3:b3:49:64:d6:8c:c5:a2:
                    39:5f:59:fc:d0:ad:ef:32:00:1f:c6:b4:8d:86:2c:
                    05:4e:a7:f2:23:c9:8c:e1:41:bd:55:1c:a6:e1:8f:
                    eb:c1:e8:60:f3:36:63:db:c2:4a:59:76:86:da:82:
                    11:b5:a2:d5:ad:c6:0f:93:b0:e0:59:2e:7f:80:0f:
                    7a:6d:8e:c2:09:ac:e5:85:34:c1:f7:68:3c:16:bd:
                    a9:52:3a:65:a9:a6:a6:4c:64:ae:83:73:26:a1:9c:
                    c1:f1:ff:46:bc:d7:31:9b:86:2e:a1:2d:1b:d6:84:
                    51:45:45:87:f3:17:d0:34:3b:b3:25:2c:25:fe:fd:
                    ea:eb:53:47:73:83:9c:9a:0a:df:67:bb:c7:e1:80:
                    9a:2c:b9:fd:ec:96:09:b1:f5:b9:54:91:32:65:15:
                    53:f4:0a:7b:3e:5c:50:7c:35:62:55:8a:ba:16:dc:
                    3c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:04:73:49:28:F2:D7:74:72:7E:10:B9:83:15:8E:39:29:76:E8:58
            X509v3 Authority Key Identifier:
                keyid:F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:15:af:49:9a:8e:ac:35:d3:43:84:8c:43:fa:7d:9f:71:4f:
         4c:03:5c:0b:3c:27:70:3f:ad:4c:31:4a:43:9c:59:31:5f:de:
         11:5b:5b:e7:6c:9c:a2:ae:26:42:6f:ee:fa:3b:c1:49:01:66:
         09:89:98:bc:a6:66:a7:2e:56:de:f0:79:bd:45:b8:99:9d:32:
         e1:e1:66:b7:81:28:68:fc:df:da:e0:79:68:54:8e:78:8a:4d:
         eb:cc:45:96:02:f9:54:3a:5b:1c:e2:f5:9a:5b:68:3d:96:a0:
         f8:35:9d:7d:ec:e9:fa:42:39:4d:e2:f9:6e:86:aa:1f:08:74:
         e3:f3:c1:d0:d5:22:62:bd:17:97:89:b5:40:db:ca:77:bb:dd:
         0d:e1:b5:93:7b:35:00:d9:d1:20:5f:18:bc:8a:6b:6e:75:44:
         f0:59:bd:6f:30:f5:bf:f8:00:6f:01:d7:e8:c2:58:e8:58:fa:
         fc:49:fc:a9:f7:a4:30:1d:8c:d2:6c:1e:9b:83:ea:a7:b5:4f:
         3f:a4:83:34:de:d4:58:34:60:52:6f:e2:da:22:02:00:6c:68:
         61:7a:d6:bb:75:31:dc:3b:6c:b7:05:65:98:7b:60:4e:95:b4:
         25:be:6c:d3:2a:4b:d4:32:46:cc:3a:91:33:05:ee:18:fe:1f:
         60:f0:17:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:45:04 2026 by rpki-client