Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
File:                     Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft (raw, json)
Hash identifier:          CdDAqiLLKVjSUTw7ZuBAGmEy4RozKclhQmw5bdoUswk=
Subject key identifier:   02:6F:E2:7F:B7:9C:53:AC:B1:0C:10:00:80:F0:C0:BE:1C:E7:D8:3F
Authority key identifier: 25:AF:AA:1E:FB:29:FF:A5:6E:6F:5D:42:06:22:DF:F0:69:7F:A6:27
Certificate issuer:       /CN=25afaa1efb29ffa56e6f5d420622dff0697fa627
Certificate serial:       019EC3DC38FCDD63E4A1C83FF5690671A39F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
Manifest number:          31
Signing time:             Sun 14 Jun 2026 02:00:49 +0000
Manifest this update:     Sun 14 Jun 2026 02:00:49 +0000
Manifest next update:     Mon 15 Jun 2026 02:00:49 +0000
Files and hashes:         1: Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl (hash: K0TX8fK4/BoIQ0yzY3DZcdcS0Uul5CzVS0iLmhnxNuU=)
                          2: wzD-Y1XRaC-02kl2ZMaS3E6fGFs.roa (hash: J6QWqMXaVC1M4duQaZv5ICVDFegW9Ncnya/aGNgLbJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:38:fc:dd:63:e4:a1:c8:3f:f5:69:06:71:a3:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25afaa1efb29ffa56e6f5d420622dff0697fa627
        Validity
            Not Before: Jun 14 02:00:49 2026 GMT
            Not After : Jun 15 02:00:49 2026 GMT
        Subject: CN=026fe27fb79c53acb10c100080f0c0be1ce7d83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:25:db:10:ff:19:ec:8e:99:61:e6:71:b9:d7:
                    56:65:e9:dc:a0:0a:0f:3e:6b:4a:91:97:2e:0b:6e:
                    90:5b:9e:00:b1:0d:88:1d:7d:ce:f9:c8:be:68:9c:
                    31:f2:a4:c2:26:60:aa:b5:85:ba:97:4d:2a:e5:80:
                    ac:ee:1d:3b:ef:2a:30:e3:a5:72:ce:f0:fa:ff:09:
                    d9:0f:54:35:a8:69:f5:10:7c:18:0e:87:7e:21:98:
                    03:53:85:83:33:89:dd:b6:18:0b:c5:6d:1f:60:90:
                    a1:81:bc:a8:af:6d:00:59:64:35:ac:9f:53:ca:94:
                    93:07:ac:e3:ed:50:d3:b8:2c:f2:ae:f1:ea:5c:d4:
                    1a:34:de:18:76:5b:c9:95:f0:c8:75:36:4e:4d:47:
                    96:b5:4c:d3:8c:e4:93:34:8d:a3:fe:b3:79:e8:d4:
                    2c:55:c0:dd:16:56:57:43:20:5d:75:f1:6b:49:89:
                    36:5c:ae:db:ea:8d:67:cb:22:21:c7:61:cd:b3:e3:
                    da:78:b4:83:20:a6:43:1c:d0:ea:b7:d9:5d:aa:4d:
                    09:93:37:42:c4:a9:4f:99:a1:60:dd:2a:68:2b:d3:
                    d9:21:b4:e6:81:d3:8c:ec:b4:75:6f:b1:2a:aa:7d:
                    0c:a7:0c:e3:6b:88:3d:48:eb:05:ee:51:69:8b:de:
                    b2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6F:E2:7F:B7:9C:53:AC:B1:0C:10:00:80:F0:C0:BE:1C:E7:D8:3F
            X509v3 Authority Key Identifier:
                keyid:25:AF:AA:1E:FB:29:FF:A5:6E:6F:5D:42:06:22:DF:F0:69:7F:A6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:64:58:64:06:0b:06:8a:66:3e:f9:8d:a9:85:63:66:96:ee:
         fc:37:b5:05:93:08:c5:e3:0f:ba:f5:de:f8:d3:69:94:61:9b:
         d4:7c:13:e8:e2:1f:e5:62:56:d6:ee:6a:62:60:e1:c7:58:90:
         eb:56:7c:17:25:b5:27:cb:df:e5:99:5e:5f:eb:44:9f:da:d5:
         0f:54:1c:8c:96:52:c9:85:47:5e:30:94:50:8c:a4:f1:12:a8:
         de:4f:cc:65:90:3e:a4:56:b0:e9:98:9f:64:30:2d:17:1d:4f:
         aa:9b:8a:a2:4b:3c:94:24:90:b2:94:1e:52:3f:9d:40:1b:54:
         b6:fe:c7:0f:7b:ec:15:4d:91:dd:e9:8e:ba:74:07:fe:b9:3d:
         7a:96:3c:90:0b:a6:80:bf:8b:5d:b7:61:57:aa:9a:9d:0d:2b:
         ba:9e:da:8a:db:77:25:e6:06:b5:d0:c8:79:3e:ab:fe:35:fa:
         b9:6d:f1:67:0d:e0:a6:60:ec:c7:d7:eb:5e:12:02:18:f7:97:
         cf:05:b5:bf:52:4f:65:99:9b:be:b2:48:87:ec:c6:10:f5:de:
         79:0d:94:11:c5:fd:45:2f:e1:60:64:50:64:a6:99:99:3b:d8:
         78:00:a7:33:8d:07:f6:76:fb:6c:41:f2:0a:be:6a:9e:8a:c6:
         23:cf:36:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:05:40 2026 by rpki-client