Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
File:                     J-cRzjQCblevMpDH3izSHcZx4Pw.mft (raw, json)
Hash identifier:          jLV+Oe3oq1Y5lOZCXx/wGfof6JzdE8eQ0N0c7xBoirk=
Subject key identifier:   1E:F5:6A:84:5F:B4:B0:5D:53:59:69:31:B1:86:48:0C:45:A2:2E:77
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Certificate issuer:       /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial:       019ED507EF57B1F0AADF06E35A608941FED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
Manifest number:          1968
Signing time:             Wed 17 Jun 2026 10:02:07 +0000
Manifest this update:     Wed 17 Jun 2026 10:02:07 +0000
Manifest next update:     Thu 18 Jun 2026 10:02:07 +0000
Files and hashes:         1: J-cRzjQCblevMpDH3izSHcZx4Pw.crl (hash: sBcG8VveuPGiY7iMvBrP/xE+8FfwEjlCqvhynkPqhE0=)
                          2: _n04tbHejANq8Ug_J-BPx0EeIOY.roa (hash: XtKxscitCuMv9T8d0VZ6njYDJbqu3csyAljLvKPr+l0=)
                          3: y_SBLUhzBtU72NxeeIak4RRDnEU.roa (hash: x10yvxp0EebXuA7j4nfdDlIV0rhNw6PWqLB8KW20YOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:07:ef:57:b1:f0:aa:df:06:e3:5a:60:89:41:fe:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
        Validity
            Not Before: Jun 17 10:02:07 2026 GMT
            Not After : Jun 18 10:02:07 2026 GMT
        Subject: CN=1ef56a845fb4b05d53596931b186480c45a22e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d3:b7:23:6f:62:94:57:44:1d:fc:00:fe:02:
                    47:12:bd:8f:81:da:ea:d3:17:b3:32:ba:f7:4b:5c:
                    e2:91:76:d8:bb:f0:c1:09:97:e3:b4:7f:85:e8:fe:
                    34:6f:7e:6c:90:71:fc:17:f0:4b:7b:4d:de:ba:0d:
                    c7:c3:84:bd:60:1e:ab:c9:29:c7:57:81:15:74:64:
                    44:e3:d2:4a:82:c3:92:d3:1b:33:15:c2:ef:d9:3f:
                    a1:0b:be:f3:ed:90:ff:72:e4:46:22:07:f4:1b:9c:
                    be:98:ce:cf:68:c8:55:f0:ba:b4:01:08:8e:68:f8:
                    33:75:85:2b:8c:8f:c4:45:99:70:05:5e:9a:c5:94:
                    04:02:41:37:9a:37:2e:f6:ff:25:9f:2e:f2:9d:e3:
                    6e:7a:4a:a9:f7:dd:58:fc:9b:ee:33:9c:c9:e5:b1:
                    9e:2a:4c:d8:cd:e5:97:e8:f7:0f:c7:5e:cf:c2:1e:
                    02:cf:f0:15:d2:79:de:61:45:1a:45:b7:6e:96:82:
                    bf:9e:79:64:ca:8a:c5:aa:8d:71:2c:dd:7e:5d:8d:
                    d1:6e:28:2a:20:c2:88:41:50:a7:96:71:1a:c2:b1:
                    0e:51:1c:ed:87:c7:97:d6:a5:8b:e2:a2:17:a5:a3:
                    7e:04:bd:1c:80:d4:cb:c3:97:4a:6f:a1:12:87:c8:
                    ff:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F5:6A:84:5F:B4:B0:5D:53:59:69:31:B1:86:48:0C:45:A2:2E:77
            X509v3 Authority Key Identifier:
                keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e8:89:c9:68:03:50:3f:63:92:79:fa:69:10:4c:4c:88:82:
         e8:ba:00:a7:a7:9e:d1:5e:88:4a:b6:0a:23:d1:1f:08:aa:3b:
         f4:a3:43:b5:b5:79:d8:fc:77:35:16:dc:66:fa:62:8e:c0:87:
         09:7e:17:8d:46:23:7d:2d:36:c5:00:d1:c8:2e:72:8d:10:b8:
         a8:34:76:fe:59:9e:b0:33:cd:4b:07:29:d7:73:ed:8e:9c:fd:
         f2:1b:76:db:a1:0f:f4:aa:0b:a7:19:49:f9:76:c8:c7:20:14:
         6b:5b:4b:c5:ca:4a:2c:02:89:68:c8:69:23:b5:a3:55:13:a3:
         ca:55:2d:65:fc:06:39:01:dd:7e:4c:27:8e:85:43:12:14:fd:
         97:c9:e8:ee:b4:42:e7:ef:6e:f6:9f:8a:8c:1c:54:2e:73:4a:
         6c:ed:ff:a6:b6:95:7d:b5:f0:d9:a7:97:6e:ab:50:81:8b:8f:
         a7:cb:55:b4:52:c4:7f:32:da:de:75:e2:43:8c:25:92:33:79:
         fd:e9:a2:fa:e3:a0:57:99:73:90:67:0a:39:9b:24:a0:50:f6:
         ae:8d:38:dc:2b:ed:e4:37:c8:0c:0f:02:29:b6:7e:07:5b:70:
         0f:f1:1e:6f:79:b4:20:df:05:99:b7:ba:f3:df:9b:30:68:29:
         75:c1:c7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:01:03 2026 by rpki-client