Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
File:                     jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json)
Hash identifier:          jhxYHr2bKDpgJBeoJm/KJPgZu/aTV7Jd96n5dui1hS4=
Subject key identifier:   BE:C2:82:85:57:13:AB:20:1B:58:75:75:98:8B:7E:44:07:52:95:99
Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
Certificate issuer:       /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Certificate serial:       019ED3BD62308AD90EB8601AF825C9E486A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
Manifest number:          1938
Signing time:             Wed 17 Jun 2026 04:01:04 +0000
Manifest this update:     Wed 17 Jun 2026 04:01:04 +0000
Manifest next update:     Thu 18 Jun 2026 04:01:04 +0000
Files and hashes:         1: 5F8fCYtrrQdfgsAoVZA3OcbnHm4.roa (hash: AzqyrkcpbN1w6j6KveyH418q6t/qMGxkXX4rVFhWMOc=)
                          2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: Btp7v8Qlry9LjU7u7x2XydE12c8AzdmMd9d49dGIZvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 04:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:bd:62:30:8a:d9:0e:b8:60:1a:f8:25:c9:e4:86:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
        Validity
            Not Before: Jun 17 04:01:04 2026 GMT
            Not After : Jun 18 04:01:04 2026 GMT
        Subject: CN=bec282855713ab201b587575988b7e4407529599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e2:96:76:1e:90:c3:26:83:12:01:27:a2:3f:
                    a0:28:1f:b4:6c:40:60:a6:04:d1:1a:5d:c1:b4:79:
                    78:84:4a:3a:39:a8:d4:6f:43:cf:a1:b7:37:18:94:
                    99:41:1f:95:11:7a:7c:4b:03:bc:41:12:4f:a0:45:
                    ca:95:15:0b:23:99:50:16:5c:d2:0a:3e:c9:66:35:
                    c6:9a:b0:25:32:91:90:64:5d:f9:21:69:1c:23:56:
                    a4:a1:9f:83:40:84:3a:0e:ad:b8:ee:78:48:50:5b:
                    4a:40:43:80:a7:7e:39:63:90:49:91:9d:70:fe:e8:
                    8f:62:f0:54:ee:62:b0:1a:77:6b:5e:85:ea:4a:5c:
                    66:8f:93:70:21:a4:45:1a:b1:7d:a5:55:86:8b:0e:
                    db:9f:f8:8c:a4:0b:02:06:e2:11:08:c3:cf:1d:19:
                    e6:0a:55:49:ea:cd:3f:4e:02:48:7b:64:c3:95:4e:
                    c5:6c:b1:0e:b8:96:10:b6:92:50:e3:26:15:4d:db:
                    cf:10:bf:cc:97:a4:58:5d:e8:e8:43:fb:0f:56:51:
                    b1:8c:a6:02:7b:7d:27:61:35:c8:d0:6e:ab:05:21:
                    68:28:e3:a3:cd:92:84:76:4e:1d:c0:7c:28:6b:3b:
                    3b:8e:d1:6a:ee:37:e6:0b:dc:77:3d:3d:3c:36:8f:
                    56:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C2:82:85:57:13:AB:20:1B:58:75:75:98:8B:7E:44:07:52:95:99
            X509v3 Authority Key Identifier:
                keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:3c:0e:79:e6:e8:ae:c4:83:b7:67:2f:5f:db:bb:7b:a7:89:
         e7:0e:90:f2:1e:a3:15:fc:10:40:76:58:c3:42:e1:24:ae:60:
         9c:de:48:db:3d:30:6c:55:2e:a5:57:65:fa:86:0f:d7:bd:e4:
         5f:9f:d0:e8:2d:1e:a1:51:d9:da:1e:44:01:72:e3:dc:7f:eb:
         ba:04:e7:2c:41:2d:87:ed:ac:23:a9:86:0b:f3:11:8f:df:4b:
         b3:11:a5:5b:aa:f9:4c:08:e1:19:04:7b:ec:83:dd:a7:12:25:
         e7:d0:46:e4:30:28:91:14:9a:e0:7d:ea:83:f1:fb:6f:66:5b:
         d0:64:f4:64:5e:de:53:66:27:4d:de:a3:37:0c:c1:17:3e:36:
         60:e2:ce:dd:62:12:8e:1a:e7:a3:28:0f:40:1c:2f:86:59:ae:
         12:14:55:a5:64:2e:4c:7e:81:de:06:d9:6b:25:9b:32:aa:2c:
         b8:29:90:e8:a9:37:71:dd:5b:7c:1c:79:92:a4:1f:18:fa:a4:
         7b:c2:d7:23:18:a6:2f:24:2e:30:b7:14:fb:b7:00:04:7d:6f:
         ed:50:06:09:3f:9c:31:7e:63:a4:04:06:b3:ec:48:56:4c:19:
         3b:d4:5a:25:e1:18:d6:15:83:f6:8e:0d:bb:b0:9c:91:e8:76:
         d8:d6:c0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:22:25 2026 by rpki-client