Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
File:                     JI9eJvHAj0SGyZEci2Cerotst00.mft (raw, json)
Hash identifier:          r7mcS3WCpsn+bgs5zOLN5d9deGpx+eINq3JwthRDLUA=
Subject key identifier:   63:D6:11:BE:05:06:ED:74:0A:B3:20:A0:41:6A:A0:6C:E2:91:BD:3C
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Certificate issuer:       /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial:       019EBF5ABCCD42CAB695FCD632EE0EC512CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
Manifest number:          195F
Signing time:             Sat 13 Jun 2026 05:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:55 +0000
Files and hashes:         1: 9WiLMBOOIFui37XsSkkIFcDbunw.roa (hash: 41f5PwE35LBjKoYTvONiL6ypIZadvUiy3rHjOLDko1A=)
                          2: C0xNgAEq_VkYSa0gjqSo4X9OgDk.roa (hash: rs9H4EjX84lTTLv+iIvf+6h9tBHNg+MMsrqn9SRaoow=)
                          3: JI9eJvHAj0SGyZEci2Cerotst00.crl (hash: E18OEmtJB8V3NDps86XvPMneYipUgpL8hO11jXM1cXY=)
                          4: PpAX2uR7dOm-fqI5gBjMqcI_sj0.roa (hash: hBH45ktoJ8q7ItYmiVnvXeZkIWerDTCntuxa+oH08yo=)
                          5: XVbyZDeAu74wqWgE4Lug0IJ0xJ4.roa (hash: G5/qOs1gotpqFOvbgNgnzqAQEWPvAJWudCVSYuYf4PQ=)
                          6: gVsFB1HmrHHx_F0oTpBh0qNylSQ.roa (hash: 0WvPL4gzlPSQJArhjHg92bA8wa85QK1qdsvxPM8R9XY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:bc:cd:42:ca:b6:95:fc:d6:32:ee:0e:c5:12:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
        Validity
            Not Before: Jun 13 05:00:55 2026 GMT
            Not After : Jun 14 05:00:55 2026 GMT
        Subject: CN=63d611be0506ed740ab320a0416aa06ce291bd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e7:ca:26:fb:ec:52:73:c6:5c:94:25:8e:c0:
                    2b:49:2f:c6:86:63:0b:22:e2:31:af:f9:31:8e:2a:
                    18:1c:dc:62:b7:c4:a5:42:0b:7f:df:5e:a9:47:73:
                    ef:dd:d0:9f:89:0a:55:d2:68:d3:c5:47:c7:06:65:
                    32:a5:ff:52:9f:93:ee:25:1c:ab:21:2e:ff:72:b9:
                    3b:11:21:e8:93:1b:bf:18:15:d9:ba:0d:78:df:65:
                    0c:dd:b4:9e:d0:d5:a4:2e:31:77:77:9e:9b:fd:56:
                    e2:3e:98:15:84:13:3a:29:d8:fd:05:02:04:8b:dc:
                    1e:d9:e4:65:2c:7f:51:05:89:6f:a7:85:fd:ea:3a:
                    84:29:f1:19:ac:63:02:2a:56:8f:3a:76:c8:56:10:
                    ca:8c:3e:1d:16:f8:62:2a:ef:9d:4d:96:97:c3:6c:
                    95:64:93:3d:cb:cf:b2:5e:bf:4f:1c:74:12:6c:6d:
                    59:39:db:fa:9f:1b:4f:5d:b2:80:47:80:4a:09:53:
                    29:ed:5f:c0:5f:72:a3:21:ff:22:d4:e6:47:c8:f4:
                    e0:9a:1c:c0:c3:67:b5:6e:34:8d:52:08:15:91:6e:
                    e4:8b:9e:18:f9:19:bb:9e:9b:95:31:e8:8f:ac:3c:
                    8b:33:35:e0:57:9c:f9:6b:54:3b:4a:5f:aa:1e:2d:
                    d6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D6:11:BE:05:06:ED:74:0A:B3:20:A0:41:6A:A0:6C:E2:91:BD:3C
            X509v3 Authority Key Identifier:
                keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:20:df:af:54:31:5d:48:d6:79:94:e4:63:9a:1f:26:8b:d3:
         ab:98:fd:e0:30:cb:ff:e4:aa:87:0e:fe:e7:35:3b:d6:94:d8:
         d7:9f:2b:60:13:59:2f:25:bb:f0:14:8d:54:f9:0f:3b:10:7d:
         fa:dd:1c:4c:12:6f:28:b2:f5:1b:77:7a:46:2d:24:ea:e4:7f:
         87:91:dc:d8:75:7c:24:7e:0c:df:75:e2:90:19:9b:c9:fd:cd:
         f2:b0:73:30:25:6e:47:5b:bc:c5:a1:61:9a:6f:93:2d:13:49:
         85:58:d1:d4:59:d2:2a:ff:6c:30:f8:c1:95:6b:a6:eb:ec:90:
         2c:4b:17:56:86:ae:71:a1:a5:d9:8b:7e:33:4c:c4:f3:a5:4f:
         61:53:17:0c:9e:db:f4:91:b2:d3:17:23:94:27:48:37:01:aa:
         f6:9b:17:89:ef:21:66:d9:c4:fb:7f:39:56:93:f5:bc:92:41:
         26:2f:64:c4:da:63:48:4e:ac:21:1c:b9:b9:c7:e9:eb:f8:92:
         e0:24:65:d8:41:3e:78:c9:ab:a9:a2:8e:49:f7:aa:33:10:6d:
         25:da:b5:d4:99:30:38:72:00:9e:75:ba:c7:0d:d2:86:06:ae:
         ac:df:b1:db:34:af:03:2e:ba:18:60:e9:0a:b3:77:1d:0a:44:
         0d:69:77:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:02:17 2026 by rpki-client