Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
File:                     JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json)
Hash identifier:          BtgwCF2ezFIQEx/VkgNc4i1WyJqIq98F7UNuQ8bWbIs=
Subject key identifier:   66:2B:7F:ED:85:08:EF:E8:CB:08:1D:42:DF:ED:31:43:AF:B5:6B:75
Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
Certificate issuer:       /CN=256be176b313e1a8a050f670af576771b655d611
Certificate serial:       019EBEEC97B67C431FD792C089DBCC84533A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 03:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:36 +0000
Files and hashes:         1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: OFUaEt3RXQH+IaIaByr+pG134clpVjzWTeY+7OP+RMM=)
                          2: p2IMZfuSyzWUQCvrAkoFeLo46oo.roa (hash: hxar/HLUHEBtlzcjTx3TaCuWIzPYRzZYjjh5egyYeWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:97:b6:7c:43:1f:d7:92:c0:89:db:cc:84:53:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256be176b313e1a8a050f670af576771b655d611
        Validity
            Not Before: Jun 13 03:00:36 2026 GMT
            Not After : Jun 14 03:00:36 2026 GMT
        Subject: CN=662b7fed8508efe8cb081d42dfed3143afb56b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:be:b2:7e:4e:67:6a:e6:0d:7c:ec:97:c3:
                    cb:85:9b:9c:c0:d0:18:14:0b:4f:2e:af:e0:72:eb:
                    fd:76:16:03:24:0b:d0:d4:81:38:a3:a3:7f:c4:bc:
                    d1:c7:fc:10:ef:ca:81:51:fc:f5:2a:4c:5b:12:36:
                    18:07:a6:a7:72:29:ef:cd:4b:72:d5:fd:d1:26:ed:
                    a0:66:ab:a3:d2:f5:f8:3d:52:89:dd:9a:e1:c6:09:
                    17:d6:75:5f:9b:de:e4:97:4f:92:a4:03:3a:05:ac:
                    de:23:33:35:af:ef:7d:86:78:ac:9a:f1:97:07:71:
                    fc:b0:1b:4a:5d:68:29:1d:2b:a2:63:e8:f9:5e:4e:
                    4d:86:82:06:a1:56:0f:cb:9b:cf:76:81:2e:65:68:
                    e0:0a:05:f5:b2:2d:87:da:35:77:98:42:89:6c:53:
                    84:8e:82:c2:97:79:f5:2b:f2:d1:49:89:96:06:92:
                    82:31:8a:f7:8f:12:92:17:c7:7f:f6:c0:1e:9d:fc:
                    d2:51:8d:74:30:cb:e9:1f:55:c0:17:30:08:31:9c:
                    10:71:b7:15:f8:92:50:75:bf:a5:13:01:4d:7c:81:
                    fa:4f:1b:85:9a:06:b2:ca:71:39:92:64:33:30:d3:
                    c2:68:bc:f7:95:ed:57:82:7c:7a:01:d2:56:24:6f:
                    a1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2B:7F:ED:85:08:EF:E8:CB:08:1D:42:DF:ED:31:43:AF:B5:6B:75
            X509v3 Authority Key Identifier:
                keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c0:56:ff:58:fe:29:69:19:ce:11:6c:7c:97:df:3d:e2:3a:
         b4:28:6c:8e:68:f0:fa:b5:ba:6d:9f:6c:f7:2e:f9:73:9c:d4:
         c2:da:97:07:1c:5c:f6:5a:f2:78:85:95:86:29:70:1f:4f:75:
         89:63:8a:5d:d3:fe:87:d2:de:87:b6:05:62:f5:97:15:ea:d0:
         a1:b5:4d:bd:f6:8a:21:d7:0e:db:b6:a1:11:a2:28:00:b2:92:
         d6:6e:18:3c:92:eb:92:46:f8:59:f5:3a:fe:b6:d5:07:c1:2c:
         08:f1:57:14:d3:68:6a:17:91:dc:81:2c:6d:69:bf:f1:eb:7b:
         e1:72:ff:ec:f9:72:64:bf:e3:83:0b:ca:8a:7b:32:9d:20:48:
         65:28:66:ff:9a:1a:55:07:6e:06:c6:1d:85:6b:d9:ac:fd:a8:
         be:10:70:e5:01:e5:aa:f6:33:75:a0:a8:2e:46:50:70:0a:95:
         20:2f:ab:7c:86:9d:47:67:4b:cc:b1:3a:4d:df:80:8a:be:10:
         ba:96:dc:b1:9b:8b:9b:aa:0a:fa:c3:ca:37:d2:57:22:27:2c:
         17:c8:1d:2e:26:04:5b:2b:c1:ee:71:75:0b:20:51:be:3f:a6:
         20:1e:63:cb:cc:0e:d8:d5:07:b7:70:16:3b:1b:bb:50:57:d3:
         b0:cb:88:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:55:44 2026 by rpki-client