Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
File:                     Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json)
Hash identifier:          NT7pRdKElxCbLtILLPDPxS8v3t+bP13uGRlPECBH7bA=
Subject key identifier:   FE:F2:6A:CB:46:A5:2A:A5:6A:78:8D:BB:31:84:55:0C:E7:9D:A7:AA
Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
Certificate issuer:       /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Certificate serial:       019EC25B7C8369485D3101833665ACA8BC29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
Manifest number:          0340
Signing time:             Sat 13 Jun 2026 19:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:35 +0000
Files and hashes:         1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: AJGjTWoYpCiCNtUclyGoxEeHx0KKBob/eoeXo7D0yqI=)
                          2: LPtgrCTtvqxu3cjuNnJKHmVe1hU.roa (hash: BGV23TnfOPa93rWNrPOH2klHvaD0qSg8RA6zxqAnbzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:7c:83:69:48:5d:31:01:83:36:65:ac:a8:bc:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
        Validity
            Not Before: Jun 13 19:00:35 2026 GMT
            Not After : Jun 14 19:00:35 2026 GMT
        Subject: CN=fef26acb46a52aa56a788dbb3184550ce79da7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:89:a0:72:d2:2e:3f:04:24:37:16:8c:92:
                    fe:d4:20:42:d2:cf:7b:1d:8f:02:d2:9d:14:48:5f:
                    1a:9c:32:05:3d:75:bf:5b:2e:8f:49:47:0d:30:7f:
                    34:4e:41:59:f1:a9:d0:aa:7e:79:11:12:0c:84:95:
                    51:6f:24:c5:22:a3:0d:6f:0d:12:7a:b3:c3:f5:29:
                    53:13:28:27:55:16:04:7f:4c:54:46:e1:1e:82:50:
                    a6:97:1f:55:54:f5:bb:20:a6:95:b4:1c:ef:0c:b5:
                    ce:a6:df:ce:3a:c6:a1:24:fa:30:6b:61:47:b5:14:
                    0d:4c:70:5e:7d:7a:60:5a:54:00:12:3c:98:e5:f3:
                    4b:2e:00:4e:dc:55:4e:5c:fc:95:46:d7:2b:48:96:
                    17:fe:91:64:13:95:9f:4d:25:99:d7:44:79:a2:e6:
                    e1:f2:d5:bd:c7:f5:1b:fe:d2:d6:a4:34:65:ae:b9:
                    61:63:0b:0d:de:4a:b6:a3:f1:28:e2:d5:11:1e:e9:
                    27:de:2c:4c:7c:63:99:e5:89:ba:61:a9:71:c5:90:
                    87:76:c6:d3:9b:60:af:c6:74:24:25:c7:12:28:ad:
                    f9:18:70:ad:76:4a:5a:fc:e5:59:b0:b6:51:52:77:
                    f5:ca:05:10:08:a0:75:cf:2c:61:00:aa:49:60:b0:
                    37:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F2:6A:CB:46:A5:2A:A5:6A:78:8D:BB:31:84:55:0C:E7:9D:A7:AA
            X509v3 Authority Key Identifier:
                keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:29:af:18:24:a2:61:14:9a:81:bc:3f:79:63:dc:9a:3e:be:
         8f:ef:f1:ed:96:35:2b:50:80:81:0d:f1:f8:28:6f:39:ff:d1:
         8e:75:9c:2a:73:7f:f0:0b:99:03:35:38:87:18:8e:3d:22:72:
         39:3f:6b:84:ce:06:d8:06:3f:78:c7:14:a5:f5:dd:92:fc:b3:
         92:5f:05:82:f8:e1:69:c7:cd:ae:ed:73:6e:ed:de:67:3b:8e:
         53:46:2d:e5:0a:64:01:98:b2:bc:fe:36:3e:b3:b2:be:59:04:
         b3:e1:2e:10:a7:91:92:c8:51:57:9d:67:55:44:76:66:cf:bd:
         aa:e3:04:54:81:ff:6d:39:ba:e6:00:d8:3a:aa:f4:04:98:b3:
         83:1f:7c:a6:c1:58:86:b4:f0:1e:a3:0c:50:2e:2e:a5:b4:8e:
         d6:22:9f:6e:78:90:8f:2b:70:7b:f7:7f:5b:83:67:6d:f6:41:
         b2:3d:8a:ef:28:cd:38:45:b8:81:93:c0:61:a1:2a:58:d5:dc:
         84:74:be:56:61:4a:d3:b7:14:26:54:f3:f8:f8:9c:ea:ba:c3:
         ae:00:60:4f:d2:ee:1e:05:c4:94:17:f5:57:b1:bc:c7:33:18:
         2b:d2:5e:90:3e:60:39:74:17:ac:f7:c1:7f:fe:7d:76:7a:77:
         54:78:91:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:09:52 2026 by rpki-client