Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
File:                     jHtuGDyNUsxGBbqLXa3cZjJik-w.mft (raw, json)
Hash identifier:          WNpa9jJ9Nw0phBGpv0p9byULZx6jTdPND/I70fw87Qo=
Subject key identifier:   34:E4:79:6B:95:24:11:63:E3:A8:C0:A8:65:5E:55:5B:AA:FF:4B:1D
Authority key identifier: 8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC
Certificate issuer:       /CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec
Certificate serial:       019EC337F004FA2AD7C77D300FF8DBB25F76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
Manifest number:          18D8
Signing time:             Sat 13 Jun 2026 23:01:23 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:23 +0000
Manifest next update:     Sun 14 Jun 2026 23:01:23 +0000
Files and hashes:         1: W9QORcGeUP3iLWU0X9nRIs0WJkY.roa (hash: hIl0UXb0kykXac0sKp+S7Vm2Hm+hm3Ey7N0z0BeyVKw=)
                          2: jHtuGDyNUsxGBbqLXa3cZjJik-w.crl (hash: KKDp4MQyB4wDkmWl9THdDoquWcfsYPWybPiGG7oBhCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:f0:04:fa:2a:d7:c7:7d:30:0f:f8:db:b2:5f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec
        Validity
            Not Before: Jun 13 23:01:23 2026 GMT
            Not After : Jun 14 23:01:23 2026 GMT
        Subject: CN=34e4796b95241163e3a8c0a8655e555baaff4b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1c:88:b3:fd:b5:27:a9:2e:25:79:96:2a:e5:
                    fc:57:47:c8:79:58:75:6a:87:a3:4f:70:4f:18:73:
                    36:7d:9e:e5:7e:a0:ad:e1:28:89:2d:4e:54:37:0a:
                    b5:df:77:dd:05:19:66:cb:95:e7:86:88:32:67:91:
                    43:4a:e1:05:27:f4:fa:2f:75:4c:7c:e3:89:df:9f:
                    bd:71:4c:5b:05:df:cb:23:67:aa:58:78:86:33:d0:
                    4d:9c:d9:e3:a6:e0:d2:12:1a:fc:ba:a0:56:de:70:
                    24:54:01:ac:87:d5:ab:3d:89:fa:0d:cf:a0:70:47:
                    ce:2c:ba:90:ca:ff:80:a9:dc:97:a9:f3:dc:d3:8b:
                    95:c6:df:b6:ec:ba:ca:54:97:10:a4:2e:51:7b:e8:
                    13:fb:b6:bf:32:df:71:1b:1f:bc:c4:87:96:cc:02:
                    47:bf:d0:90:c8:43:17:a6:c3:aa:9a:76:1c:a4:68:
                    3c:6e:8f:9d:2b:2c:46:01:72:ea:f5:56:61:09:a9:
                    47:b4:ff:9e:7c:9f:b3:88:8b:20:e2:72:a8:78:04:
                    0d:47:1d:17:96:77:46:ae:f0:9f:2a:8e:04:d2:e7:
                    55:ff:4d:8c:2e:d5:aa:eb:84:cb:e8:f6:57:76:69:
                    94:6d:32:79:01:5f:44:5d:9a:86:d3:bd:22:dd:09:
                    d1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E4:79:6B:95:24:11:63:E3:A8:C0:A8:65:5E:55:5B:AA:FF:4B:1D
            X509v3 Authority Key Identifier:
                keyid:8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f8:1e:88:ea:de:79:c4:c5:c7:8f:64:91:99:3d:1e:0e:46:
         9a:8a:43:c4:d5:9e:d1:d6:a0:db:79:49:bb:e6:eb:58:d6:ea:
         86:fc:57:65:3e:32:89:3f:f0:ed:6f:ff:8d:54:9a:11:b9:cd:
         34:9c:8c:20:38:47:19:d1:25:89:e3:00:fd:ba:55:90:9d:d5:
         a8:37:4a:9f:e5:a1:58:08:a0:a4:a0:ac:53:27:a2:11:da:77:
         89:4f:99:f2:c1:80:12:4d:92:ca:e8:45:44:5a:f1:4d:f9:20:
         4b:98:fd:a9:72:b4:6f:8b:80:78:fc:09:81:fb:e8:6c:19:e4:
         b4:8b:82:da:4e:2b:b8:9f:da:6b:6e:db:8a:df:c3:80:e4:96:
         9e:0f:c8:de:4a:30:f5:49:ab:c7:62:26:9d:4c:b6:bd:cf:cb:
         26:21:f2:02:13:ab:47:09:27:26:0d:0d:d5:37:c2:64:29:c4:
         74:6f:db:1c:ce:5c:01:16:cf:75:35:12:71:a0:0c:ce:60:cc:
         42:da:e2:43:f1:82:14:46:8e:45:ac:f2:ec:cc:fe:1a:78:96:
         61:31:50:69:bd:09:2d:29:74:37:7b:e6:bc:ed:73:38:90:50:
         a6:a3:be:57:1e:4f:54:4d:82:6b:6d:33:e1:69:e7:12:1d:74:
         ef:48:53:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:52:08 2026 by rpki-client