Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
File:                     jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft (raw, json)
Hash identifier:          ovErFEpcpafUuAKnKEwoCyia++GZEkoP+Jvd7lD9T6Q=
Subject key identifier:   98:0A:00:26:83:F0:BA:49:B1:61:27:F6:B0:29:9F:4E:A8:AB:08:A3
Authority key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
Certificate issuer:       /CN=8e79cef458de50392e3c02b69182f34c60148d24
Certificate serial:       019EC2929C659DFB19E4C254BF2AE5FA5420
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
Manifest number:          032B
Signing time:             Sat 13 Jun 2026 20:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:48 +0000
Files and hashes:         1: _c6xx4G9gRqlWT599mmQOoWoW50.roa (hash: c/9VJ4HKTN9Q4dyySRrDW6GfcNhn9tZLqvs7ju71Tx8=)
                          2: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl (hash: eCUwzgOPsyb/gPcRmU3rcrfyyzbKz1CQBXg8a80PQMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:9c:65:9d:fb:19:e4:c2:54:bf:2a:e5:fa:54:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e79cef458de50392e3c02b69182f34c60148d24
        Validity
            Not Before: Jun 13 20:00:48 2026 GMT
            Not After : Jun 14 20:00:48 2026 GMT
        Subject: CN=980a002683f0ba49b16127f6b0299f4ea8ab08a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:4a:e2:db:59:f6:6e:98:2a:b8:b4:9a:ee:
                    14:d8:e6:0d:4a:92:05:08:99:6d:74:e8:7b:cf:25:
                    a5:f7:48:36:02:3a:da:75:ae:8e:1c:71:c6:05:d7:
                    c0:ab:01:2b:fc:a9:0b:cc:9b:c5:5a:46:80:05:4b:
                    49:1d:e8:1e:d3:84:3c:32:3e:e4:7d:70:e7:32:01:
                    0e:e2:f5:4e:0f:9c:4b:f3:91:2f:96:8d:93:9a:a2:
                    f6:18:9b:77:92:6e:7b:57:c0:fd:13:72:bf:d3:35:
                    65:4c:66:71:ae:48:78:aa:16:e6:35:70:fd:d1:5f:
                    95:b8:f5:8b:c0:aa:5e:bf:f5:32:a2:df:5e:9b:c4:
                    86:b5:39:04:2c:c4:75:b3:bd:43:48:94:bf:4c:84:
                    6c:01:5e:28:bd:a6:54:60:1f:30:4a:0d:78:bc:94:
                    a0:d0:ff:1f:a7:64:70:b9:e4:96:e0:4c:46:fb:ee:
                    51:23:fb:92:aa:33:da:ea:2c:4a:78:9a:9a:57:c1:
                    ca:da:ce:a2:ab:6c:3a:8a:a9:56:15:ba:af:59:62:
                    19:1c:29:cd:da:98:0e:04:5f:c6:fc:b9:48:dc:02:
                    95:71:39:b3:ad:11:3c:ea:35:6d:33:52:8a:e2:23:
                    e9:f9:af:1e:32:94:7d:82:44:58:69:40:94:f6:27:
                    d1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0A:00:26:83:F0:BA:49:B1:61:27:F6:B0:29:9F:4E:A8:AB:08:A3
            X509v3 Authority Key Identifier:
                keyid:8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d6:d7:b8:f8:fe:c8:df:60:22:53:a3:84:ba:c4:51:04:7b:
         dc:f1:99:56:43:8e:f4:3d:86:bb:64:75:5c:f1:63:69:88:6e:
         cb:e7:dd:e7:8a:be:4c:42:58:36:ec:a0:b0:31:13:88:5a:d8:
         c7:4b:e9:e2:c3:9f:fa:8f:44:c5:28:9c:2f:1a:d7:83:7c:20:
         08:dc:f4:94:31:16:c9:51:31:9b:a3:a4:09:95:03:a0:72:d3:
         5a:59:5f:b8:74:e0:d6:ef:e6:fe:f8:db:d8:67:07:86:a5:3f:
         8e:18:f5:95:17:51:09:8d:ef:f2:9a:e9:62:8e:08:9f:32:d4:
         4d:05:0c:52:5f:30:dd:e9:4a:73:25:c3:e9:42:bd:98:14:7f:
         bc:c8:1b:04:67:13:3e:01:3f:36:23:9d:c9:3d:67:69:78:cf:
         aa:3f:70:74:3f:d7:ad:14:68:55:90:22:dd:9f:d6:06:c5:0c:
         9c:00:2d:c3:dd:01:36:3c:24:ef:be:f9:12:eb:a2:ad:ca:89:
         63:85:09:25:9a:1b:c8:23:a4:1f:63:f2:6b:cf:cf:ba:b5:c6:
         bc:6d:58:ef:b5:ee:24:f4:03:0e:ff:8f:53:91:0b:86:bc:5b:
         d3:05:47:c4:87:18:f2:51:3c:14:4c:88:cb:59:05:12:f6:ca:
         36:f9:e3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:31:05 2026 by rpki-client