Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
File:                     J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json)
Hash identifier:          uji4uM/TyNkso2OMfEPlnt5avOmUz9ri2ExRcOOemYs=
Subject key identifier:   38:C5:78:6F:3E:EB:83:19:39:2F:F5:43:27:93:32:0C:63:CA:B9:9B
Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Certificate issuer:       /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Certificate serial:       019EC25BCE184169E45995A7A37906BC9A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
Manifest number:          1119
Signing time:             Sat 13 Jun 2026 19:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:56 +0000
Files and hashes:         1: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: NlYdOcGU37gn7fPJHT03tpMcMV2SZ8COuH4n7Lazqn0=)
                          2: zpBvr7D0ZTnk2RASjPjWwuPCBo4.roa (hash: 6ihXuEihTvHi2kmbZX2/h+YBlObaB/XzKmiIBYoX2XQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:ce:18:41:69:e4:59:95:a7:a3:79:06:bc:9a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
        Validity
            Not Before: Jun 13 19:00:56 2026 GMT
            Not After : Jun 14 19:00:56 2026 GMT
        Subject: CN=38c5786f3eeb8319392ff5432793320c63cab99b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:30:38:e5:ce:62:3f:5e:15:1a:ea:5b:9b:
                    da:bc:f4:5d:6d:bf:f0:74:38:ed:df:01:2d:bb:38:
                    70:d1:93:87:23:01:a4:a0:6e:98:51:43:41:2a:a1:
                    0d:69:40:cf:12:a9:bb:84:de:08:b8:ba:8c:c4:ce:
                    5b:15:50:f3:9c:da:0c:50:e7:0a:23:78:57:21:b0:
                    92:5b:5f:7e:8f:9e:fd:46:64:d2:66:21:8c:ff:40:
                    46:0a:76:3d:29:56:b3:d5:5c:85:38:9c:38:bd:64:
                    30:92:81:21:ca:78:ba:d7:57:ac:79:8f:f4:ce:46:
                    16:e6:b5:eb:ad:4e:8b:35:80:7e:d3:fc:42:a7:79:
                    51:76:aa:47:af:08:ea:79:09:a6:55:15:d3:15:92:
                    fb:1b:ea:59:4f:43:6b:2c:40:88:e5:7e:d7:ae:b6:
                    22:80:d4:4e:0d:08:29:fe:43:d5:ee:ed:dc:eb:96:
                    75:9c:86:d0:e7:ff:8b:f1:47:5a:6f:f5:6e:26:bf:
                    1b:7f:a5:56:73:93:84:1d:7f:17:62:bb:93:e3:7d:
                    7d:07:95:c9:7a:b9:82:7b:b9:e8:6a:89:b9:8a:39:
                    ef:4e:c0:49:a2:17:48:b9:2c:d8:7a:ff:c1:6d:01:
                    70:ad:36:1c:b7:1a:4a:4f:82:d1:f9:0c:5b:d2:0f:
                    0d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C5:78:6F:3E:EB:83:19:39:2F:F5:43:27:93:32:0C:63:CA:B9:9B
            X509v3 Authority Key Identifier:
                keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:da:38:bb:32:11:56:6a:48:93:0c:fb:b8:25:37:9e:ce:f0:
         43:8c:d3:b3:b1:fa:08:84:91:e4:de:60:03:29:0d:d9:d3:d8:
         81:3e:af:ba:b0:42:fd:c1:22:90:68:f1:77:30:e0:ca:7c:d6:
         80:ee:45:ad:6d:2a:f3:ed:51:0d:d5:63:5e:19:fb:74:25:4b:
         b2:d2:7a:5e:6b:be:13:9b:b6:52:2f:64:e6:88:43:55:12:8e:
         37:62:ee:18:bb:35:81:56:ce:6f:ed:b1:d9:81:7d:bc:3d:c4:
         71:2c:33:ad:6d:34:1f:cd:7f:b2:2d:d6:20:12:7e:00:21:76:
         91:ca:13:d0:e4:a8:d4:fa:b9:33:9d:96:df:f8:63:b3:7e:3d:
         df:07:64:e9:f3:25:09:4e:73:84:39:ed:57:f1:c6:85:0c:30:
         8c:12:0d:91:15:ef:4c:79:c0:4c:e4:d2:55:c7:a3:29:e3:05:
         49:b3:ed:29:4b:de:54:c4:25:be:e7:fb:57:e3:db:a0:d7:c2:
         06:13:ec:b7:51:22:9a:34:8a:bc:79:bd:8e:20:1a:a6:e8:12:
         dd:cd:5e:6c:96:3b:bb:e2:72:5f:d4:e6:c5:a5:37:9a:04:f7:
         a6:b1:f4:63:45:bb:c8:89:62:dc:8d:3f:27:f1:89:4e:93:fa:
         1a:33:c5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:51:00 2026 by rpki-client