Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
File:                     J7syqoyfjQXFF74q1mUvZlUKjVc.mft (raw, json)
Hash identifier:          vHYGHUQfs/I5Q1vFL4c7PRI8aIQPFUgdf5OX3grNfZY=
Subject key identifier:   7F:44:55:97:3B:2B:AD:B2:21:0C:AC:C2:8E:B4:82:17:03:F1:C6:9A
Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
Certificate issuer:       /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Certificate serial:       019EC1B7002879E8372E82147A5D25D7B3E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
Manifest number:          1960
Signing time:             Sat 13 Jun 2026 16:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:56 +0000
Files and hashes:         1: 3RCjNuMxUkfSYyNOUlggwRfWfc4.roa (hash: UnwrsssJDeDLbtzFhokPg+3DUFYJBO3poSSiUsMCOJk=)
                          2: J7syqoyfjQXFF74q1mUvZlUKjVc.crl (hash: Wdge8xDkHGU69FZPvLrJHFr9JU23BgAJsVdaXW6+kQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:00:28:79:e8:37:2e:82:14:7a:5d:25:d7:b3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
        Validity
            Not Before: Jun 13 16:00:56 2026 GMT
            Not After : Jun 14 16:00:56 2026 GMT
        Subject: CN=7f4455973b2badb2210cacc28eb4821703f1c69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:35:78:ad:20:d9:d3:9f:3e:97:62:af:25:de:
                    c5:05:b8:86:b9:8d:32:e6:26:f4:a0:15:72:b5:92:
                    44:25:5a:44:e6:d7:69:e9:06:15:6e:d9:d1:08:2e:
                    eb:40:7c:b5:f6:41:b7:7e:83:70:15:0d:db:0d:ba:
                    64:02:42:b6:d9:3f:e1:49:18:c4:91:74:b4:14:04:
                    41:ee:70:00:48:1c:91:95:1b:91:68:6e:c3:c9:ed:
                    0f:cc:8c:28:90:90:4b:d6:19:32:67:12:b9:3a:ed:
                    6f:59:c7:1e:1b:9a:54:4a:83:e9:fa:90:ea:47:c8:
                    a1:1c:4e:af:6f:58:8b:a2:be:22:0a:d0:69:6d:59:
                    4d:26:7d:f3:85:c4:9d:bd:f2:d9:ab:19:22:ef:c7:
                    fa:79:dc:43:49:ad:17:87:72:56:38:8c:1c:f0:a0:
                    32:b8:4e:0c:9c:96:5b:ee:97:a9:f9:da:7f:50:33:
                    c2:c2:43:2d:b3:c8:25:02:68:9d:56:c9:8b:b8:44:
                    79:6f:9b:4a:86:ea:03:5e:3e:72:90:9d:65:bc:62:
                    67:ee:ed:67:54:3b:1b:3e:52:05:a5:99:cf:9a:a7:
                    ce:0d:c3:a1:56:d4:54:9e:fe:40:cf:69:de:50:79:
                    c2:6e:3e:0b:3d:5c:17:aa:25:ba:09:93:5a:be:e1:
                    86:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:44:55:97:3B:2B:AD:B2:21:0C:AC:C2:8E:B4:82:17:03:F1:C6:9A
            X509v3 Authority Key Identifier:
                keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e3:0c:94:9c:85:42:30:bc:b8:ad:6d:ec:8b:98:d6:bd:a0:
         ee:5b:03:ad:d0:6d:9a:dc:59:b2:df:63:9e:4a:76:a6:dc:81:
         95:34:48:55:ff:8d:58:f4:70:a3:82:7a:a2:57:be:1a:3d:56:
         0b:f2:c6:98:d5:c5:e5:f0:a0:36:4b:98:e7:60:9e:8d:a4:68:
         52:3a:57:4f:3a:30:71:cd:33:40:ba:b9:10:c3:45:f4:20:1c:
         a3:17:fe:a3:0b:62:48:01:e5:a9:2b:bd:aa:92:7b:87:65:31:
         fa:c8:7c:31:8f:22:3d:02:c3:13:5f:43:35:97:7f:7f:95:0a:
         4d:16:63:86:72:bf:47:78:a9:3b:4d:a1:8e:a2:72:23:f0:a1:
         b6:17:27:74:34:d9:8e:ff:44:a6:92:8d:08:b2:91:30:b3:a9:
         69:75:b4:7b:46:84:e3:02:6a:4f:b4:64:7d:3d:5d:56:ec:bd:
         7d:ad:81:db:83:01:1e:6a:84:0a:2d:c3:72:13:33:6f:54:68:
         a9:04:5b:7c:f7:03:83:31:34:39:6d:3c:05:a5:7c:3c:d1:44:
         18:3f:5d:c5:3b:2e:82:b4:84:48:d7:70:3e:58:2e:81:0a:71:
         2b:b8:89:c0:1e:39:da:cc:08:ad:7e:54:fd:e5:8e:b9:8a:60:
         cb:2e:4b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:31:53 2026 by rpki-client