Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
File:                     Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json)
Hash identifier:          RVmiNe+3BIpVbeLuCcZIEl720Sr6yECKnyV+jn0juIo=
Subject key identifier:   DF:AF:0B:93:DB:24:AA:32:7B:64:78:8E:07:0F:D6:F9:21:89:C9:E6
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Certificate issuer:       /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial:       019EC111CEDFE9D02B6C7BA6202889C52B4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 13:00:30 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:30 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:30 +0000
Files and hashes:         1: 6MvEEf7_I3zO3ShtqYd8LKtfRq8.roa (hash: lIgvAYq1Ass4AfPtbYog1dJL/68LEdNig8uh3pGw9vM=)
                          2: EKgYi5uwmdQ3SbZogfsfQT2cobM.roa (hash: Y3gYmZwUht9JEwQTGH6EyDKQhtm/rC13n1867BeBzvQ=)
                          3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: M4cYGiDw2d4YrR5lOnUGrfUsjYENkMXgBh+ax4cSL9c=)
                          4: Jqk7oDaY0GyweY_m1dLexacLzPE.roa (hash: prybAkap/ary1cwam/oMqauOzBkuf1YCV2giq0/4yoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:ce:df:e9:d0:2b:6c:7b:a6:20:28:89:c5:2b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
        Validity
            Not Before: Jun 13 13:00:30 2026 GMT
            Not After : Jun 14 13:00:30 2026 GMT
        Subject: CN=dfaf0b93db24aa327b64788e070fd6f92189c9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dd:b3:bd:7f:ee:d9:32:e8:4f:98:f8:6d:d9:
                    f3:af:6d:cd:5e:04:9d:3e:8f:1f:12:09:47:df:d3:
                    70:ab:fb:87:ea:40:1d:10:f4:f2:79:69:64:e4:76:
                    25:3f:c5:f1:77:f4:b8:fa:fb:20:03:40:75:91:f7:
                    fe:21:f0:d1:77:37:f4:ae:5f:97:f0:76:80:4c:0b:
                    37:44:e8:73:7e:cf:42:f7:cf:db:0e:73:1d:e9:5a:
                    2c:c9:33:ad:ab:5c:43:e8:ae:7f:20:69:4c:fe:14:
                    fd:74:b0:87:b1:f3:a2:a6:28:9d:dd:c5:e0:67:8c:
                    4e:42:53:99:da:de:72:6a:ac:a6:00:57:27:92:66:
                    00:c2:a4:c1:23:54:41:7b:0b:33:e6:1e:97:0e:8b:
                    ae:f4:6b:9e:05:20:63:26:a0:98:b0:a0:7e:6c:cc:
                    7b:69:d1:c7:65:22:68:f1:3d:da:27:f3:30:45:68:
                    4d:5b:f3:c0:25:5e:64:81:8f:c7:60:78:7f:79:0b:
                    bb:e4:57:56:24:e2:07:ba:af:69:f0:8c:20:e1:9d:
                    5a:8c:ec:e4:a2:28:b2:a1:b8:d4:96:b8:a5:2e:53:
                    b6:e8:66:0d:c8:54:d7:d5:ef:cd:29:af:08:3c:6b:
                    56:4f:c7:94:8e:5f:1c:51:e2:f2:19:dc:96:31:78:
                    d4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AF:0B:93:DB:24:AA:32:7B:64:78:8E:07:0F:D6:F9:21:89:C9:E6
            X509v3 Authority Key Identifier:
                keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:6e:4a:22:ce:8c:e1:4a:6e:75:41:c0:29:0a:ef:fe:ef:b4:
         25:35:8b:74:f9:f2:e4:c9:79:2f:06:c3:9f:7a:c7:9f:64:c7:
         88:9f:bf:0e:6f:7e:71:80:88:f0:a5:4b:eb:cc:75:c2:b6:be:
         1c:cc:10:50:48:a4:30:54:19:6b:38:13:1f:d1:82:a7:55:78:
         8b:0f:da:be:3b:5d:86:09:f1:97:95:45:cb:81:f9:32:88:d0:
         bd:1c:90:9a:b7:83:17:da:76:63:e5:20:02:78:83:52:ab:9d:
         de:fd:1f:d8:9d:23:2b:c9:4b:52:6c:6f:2a:6f:02:d7:fa:c9:
         52:17:04:e7:72:dc:87:e0:b6:03:d1:03:2e:ca:30:f8:87:07:
         e4:42:9b:c9:22:b5:f6:00:79:5c:ef:95:96:69:4c:28:f8:d9:
         57:28:c5:68:bb:13:4a:17:6c:13:93:40:8f:04:89:6f:6b:c8:
         06:4d:35:ee:82:71:b0:4b:9b:a0:ed:32:b5:ca:59:4b:f5:fd:
         8a:97:56:89:65:7d:7d:f6:c8:4d:98:a2:c2:fe:91:d6:b8:ee:
         d9:f2:75:1d:b4:3f:e5:ce:25:28:c2:74:17:8d:8b:6d:cd:23:
         44:91:49:92:42:bc:26:ba:6d:42:6b:05:00:6c:3b:26:1c:31:
         d4:a8:30:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:07:16 2026 by rpki-client