Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
File:                     1jpuJY1igPPdl6ltlIbZPULxjUs.mft (raw, json)
Hash identifier:          EkSZCm1dHofNV2qn4dEsQNcilVU2wa1gFGp/+paq0SQ=
Subject key identifier:   56:97:1A:41:0D:C8:8B:29:61:F8:79:82:C3:12:2F:6B:6C:FF:C2:59
Authority key identifier: D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B
Certificate issuer:       /CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
Certificate serial:       019F93C95F13DB43CF8C596F832F6028CC45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
Manifest number:          062B
Signing time:             Fri 24 Jul 2026 11:01:15 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:15 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:15 +0000
Files and hashes:         1: 1jpuJY1igPPdl6ltlIbZPULxjUs.crl (hash: PPjRrtJHI139M+D4LiMkYUq5Q5OonXVfzFoHI3bMYCY=)
                          2: 3CZ316XifGJ7iXy_fvnC6yaUCL4.roa (hash: jpVzlrWllusXIidVkRRsjohQfHqCLoCDqt5WfrDTXj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:5f:13:db:43:cf:8c:59:6f:83:2f:60:28:cc:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
        Validity
            Not Before: Jul 24 11:01:15 2026 GMT
            Not After : Jul 25 11:01:15 2026 GMT
        Subject: CN=56971a410dc88b2961f87982c3122f6b6cffc259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:f5:d9:55:ce:fc:9e:2d:a8:e0:d2:b8:21:
                    78:46:bc:f0:86:b4:e1:1c:4b:6a:74:ec:de:38:f7:
                    d5:d7:50:b3:cc:77:66:a5:98:e8:0c:c4:98:1d:58:
                    58:bf:43:06:b6:ac:8a:96:d6:54:a9:53:fe:e8:6f:
                    b5:7e:ba:00:87:5b:63:39:8a:3e:03:72:e1:50:d5:
                    a9:ae:1a:dd:f4:42:22:09:29:b5:15:4b:4d:ed:34:
                    3e:9b:cd:8c:97:d6:f8:a2:5a:a6:28:c0:d2:5f:e7:
                    10:0f:67:58:2b:71:8d:49:db:e5:4b:19:b6:8a:6e:
                    5e:f5:76:34:bb:1a:15:d0:ca:4d:2f:9e:59:cf:61:
                    0a:ca:d9:09:0e:b1:42:d4:8d:d4:ee:29:01:9a:d4:
                    22:20:b2:6a:05:d9:08:8c:ef:ae:e2:b7:d6:03:c9:
                    01:94:c6:bc:39:4b:cc:7f:e9:b5:fd:46:cd:83:49:
                    77:96:ef:0b:de:8b:45:ec:a8:fb:8b:9f:a7:f6:53:
                    5f:c0:a1:c0:1d:ea:bf:ae:23:05:70:be:2d:85:7d:
                    13:63:5c:c5:9a:3f:00:eb:43:9f:25:a2:39:be:d7:
                    fb:10:06:e0:ab:be:74:61:7f:d2:9b:db:ef:d8:8e:
                    db:54:6a:8b:d2:7a:d9:4b:26:c6:87:a6:92:2b:cb:
                    5a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:97:1A:41:0D:C8:8B:29:61:F8:79:82:C3:12:2F:6B:6C:FF:C2:59
            X509v3 Authority Key Identifier:
                keyid:D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:68:d8:86:54:82:ee:31:47:dc:ad:a6:2a:50:21:7c:92:6d:
         9b:63:c7:15:80:f0:ff:07:72:e0:1b:d8:73:16:55:40:04:2a:
         08:7c:3d:42:56:f1:ee:3d:7a:85:b8:39:70:c9:54:8a:45:f1:
         20:2a:2c:b9:2f:fb:15:02:c6:d7:f0:e8:13:53:0f:ec:6e:cd:
         51:e8:93:43:e0:82:dc:96:52:30:cf:ce:a6:d5:c5:d4:09:fd:
         16:8e:33:26:4d:70:dd:64:ca:77:4e:f1:63:50:62:4c:31:8c:
         e0:24:25:3f:19:61:24:e4:aa:d0:cd:fb:4d:6d:7e:93:90:cd:
         ab:f0:39:b6:a7:60:91:72:eb:85:e6:ed:78:9c:98:0f:d2:73:
         05:64:65:93:64:8b:aa:cd:a7:84:c1:3c:ad:7e:1a:28:af:5f:
         6a:18:a5:06:9a:47:0b:50:0f:b8:2e:01:92:51:2e:f2:cf:41:
         bb:5a:98:92:62:e9:a0:dd:29:72:8b:53:ba:88:8b:74:6f:0d:
         d5:ed:31:94:67:fc:9c:5f:36:a0:75:3b:f1:31:23:01:63:01:
         4a:63:cf:9c:61:d7:c5:21:57:27:fa:4e:a6:76:fe:a4:ca:5e:
         73:bc:19:d0:72:22:f0:33:37:53:d5:e2:81:6c:2a:5b:44:9d:
         e0:bf:10:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:16:38 2026 by rpki-client