Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File:                     ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier:          u+J+GkZhZxqtdZjK0+5yqhCDaYgdHujdXvdi1i9UEFM=
Subject key identifier:   AF:FA:B0:3F:F8:03:F0:90:FA:46:16:0C:9A:6B:CF:A9:38:B3:4D:00
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer:       /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial:       019ECAF10675DFCC5D0FE1AB379CBCD691CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number:          1969
Signing time:             Mon 15 Jun 2026 11:00:53 +0000
Manifest this update:     Mon 15 Jun 2026 11:00:53 +0000
Manifest next update:     Tue 16 Jun 2026 11:00:53 +0000
Files and hashes:         1: 2qzM6x9baKtwfCTVUC_vOHhaD9Q.roa (hash: slF8umIXO8u1xfM7uQvlWuXSbFnPY4ktqm1QtTsVvaw=)
                          2: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: fKOhSIptk+cvlpeYcWXfmysHnBdZ1TLN1IFzwpHo5Ac=)
                          3: qj22xyeLu60pShMzvtnaPDnNQis.roa (hash: Fv9rfv3pioycRBue2RhOjkBOSKLXM7H4+uyv5DM79wI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Jun 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ca:f1:06:75:df:cc:5d:0f:e1:ab:37:9c:bc:d6:91:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
        Validity
            Not Before: Jun 15 11:00:53 2026 GMT
            Not After : Jun 16 11:00:53 2026 GMT
        Subject: CN=affab03ff803f090fa46160c9a6bcfa938b34d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f4:d7:69:f5:e7:f4:13:94:0c:f3:e0:62:9a:
                    22:4a:bd:bd:b7:75:bc:54:cb:b9:ac:cc:03:ea:6e:
                    09:61:21:26:ea:81:41:2c:2c:cb:4f:dc:10:0f:88:
                    36:dd:1d:b7:d0:2b:11:b4:02:34:52:87:2a:8d:4c:
                    77:54:75:55:01:2f:30:b6:3f:43:7b:9f:08:94:0e:
                    27:2b:73:93:2e:2a:d3:61:97:65:e2:6b:1c:d6:97:
                    04:3b:c2:6a:b1:16:f0:88:0e:c7:64:ff:ca:e4:a1:
                    53:94:8a:e3:98:8d:27:17:bc:b3:30:45:7c:83:53:
                    a2:c4:e5:30:48:75:85:83:49:aa:a8:e7:15:30:0d:
                    f7:2c:fb:65:53:b5:04:b0:71:bd:a6:b3:6c:2e:bb:
                    b3:b5:e3:81:0d:f9:35:09:7c:07:d1:eb:ee:48:b1:
                    7d:56:58:70:34:1b:51:4f:82:71:cc:ce:54:44:34:
                    be:52:d8:3a:9a:69:3e:a4:d4:26:a2:a8:db:b0:ae:
                    b2:1e:f3:19:9b:30:74:fb:5c:5e:88:6b:2f:72:e0:
                    e7:77:a7:00:67:3a:56:47:be:d3:0a:76:48:57:23:
                    eb:87:4e:4f:78:70:b6:c6:4e:41:d2:5a:f3:e0:e4:
                    7c:1f:df:db:6d:b6:b8:5d:72:69:62:9f:cb:fb:d4:
                    bc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FA:B0:3F:F8:03:F0:90:FA:46:16:0C:9A:6B:CF:A9:38:B3:4D:00
            X509v3 Authority Key Identifier:
                keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ec:f5:53:87:21:50:9e:09:2d:04:78:f9:83:eb:be:77:ac:
         48:fe:91:de:f4:34:62:d5:8b:ea:40:cf:eb:53:b6:cd:9f:76:
         22:8b:1d:00:ca:8a:f9:f7:36:db:dd:71:ef:ba:7c:f9:46:40:
         9f:e7:ab:de:e3:57:02:3a:be:aa:5a:8f:d8:bc:8b:7d:9f:cf:
         5a:04:a3:22:76:40:bb:66:ea:b6:6e:f3:41:52:34:dd:74:4f:
         03:cf:0c:7c:11:99:e5:24:7e:df:0d:66:39:ac:32:6e:27:97:
         73:7e:0a:70:91:cd:c5:e1:5c:97:90:4b:fa:fc:bd:62:7f:5c:
         e5:e5:74:ce:37:35:c5:18:6a:32:50:79:83:89:c8:eb:fc:39:
         33:3b:ce:38:9a:ac:0d:fe:b5:48:e7:1c:d1:12:62:a8:1a:b5:
         5c:e5:98:09:5c:48:d5:c8:1b:97:c2:0c:a4:d8:ba:6d:9b:7c:
         75:e0:33:dc:61:76:1f:0e:32:31:99:2f:36:1b:67:ef:1c:d6:
         4c:d6:99:2d:ff:7a:2f:17:e8:45:8a:a1:a8:f3:c6:e1:b6:f4:
         bf:22:4c:56:da:6a:df:58:28:23:e8:58:2f:35:c0:3f:ee:fa:
         39:20:aa:76:41:24:0e:25:ba:3c:07:bb:60:a8:4d:84:4a:c6:
         79:7e:f5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 16:52:56 2026 by rpki-client