Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File:                     JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier:          W11pP6XtwprxIdQJxZmphn1Ku8Dv+exchO4vNhdURnw=
Subject key identifier:   DB:4B:6E:54:4C:0B:C0:35:0E:B0:F0:D1:4A:A6:1C:7C:5D:67:A4:EA
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer:       /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial:       019EC0DADA204CC5D7050F1720B88DF41480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number:          195F
Signing time:             Sat 13 Jun 2026 12:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:28 +0000
Files and hashes:         1: 3pF8IhqwUxmlbr6s48L9oPema6M.roa (hash: dwMpIPqTUrQBexVcKq3XaTovbIKuATLe+PvFHdYURt8=)
                          2: BsDV5gEChvqJlOEUL1parquidSQ.roa (hash: 66XQpURFVhssGT5jkMQej1bzbdrps7y8gPjFudVSOts=)
                          3: FhKAoau0JjukzC47olP9U847XGI.roa (hash: 3F1NNCOQC9ZPD91aPkyQm6i6mrnOfMArj9YcvlMVCtY=)
                          4: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: FDaLgon6I/4oy3xnoBWXmMXPyPgRzIaxvleII7vu2eM=)
                          5: Q0wZrBWN3__RjDh4ep9XdbeLvtw.roa (hash: y3g1ixBFrS6jt/5ELqww8HbbFtrwY3FruCtmtguhTkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:da:20:4c:c5:d7:05:0f:17:20:b8:8d:f4:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
        Validity
            Not Before: Jun 13 12:00:28 2026 GMT
            Not After : Jun 14 12:00:28 2026 GMT
        Subject: CN=db4b6e544c0bc0350eb0f0d14aa61c7c5d67a4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c4:77:43:17:d5:76:20:a3:f9:39:c7:63:64:
                    e5:7e:fe:a3:73:2c:a6:9f:b1:3d:db:8b:e2:88:0f:
                    3a:04:fe:74:87:da:41:fa:cb:e8:7c:05:46:c3:ce:
                    bf:65:e7:fc:6d:88:9b:07:4a:8c:3f:c4:6b:a2:52:
                    d1:a4:8d:77:e6:2b:28:61:33:5b:af:f5:45:18:23:
                    9d:ab:11:6c:fe:bb:b8:42:a8:9c:d9:30:d7:2b:3f:
                    f2:e9:29:11:45:f5:57:3c:84:92:b4:ba:1d:e2:5a:
                    40:a8:b9:0a:94:2f:6c:48:30:8b:f1:e7:ee:b8:3f:
                    c6:61:c2:da:86:54:1c:4f:61:61:14:24:5d:aa:e7:
                    92:19:1a:71:de:95:0d:c2:0e:15:eb:40:a3:a5:94:
                    d9:60:a9:70:b6:ab:b3:19:d1:51:31:d7:6e:e9:38:
                    f4:ba:67:35:3f:d4:ef:b0:16:6b:d5:70:f3:7e:34:
                    ee:74:f8:45:55:6a:4d:1b:1e:78:84:3b:5b:ab:1c:
                    64:ad:ec:3e:8a:ba:cc:62:9b:94:ef:27:73:1e:78:
                    a6:db:07:24:b9:e6:6f:d9:01:df:09:f8:43:48:c1:
                    ea:17:74:42:cd:c8:8c:3d:c6:49:ad:a3:f3:c3:08:
                    d7:27:90:83:b1:e3:dc:f2:d7:2f:f6:91:69:c5:cc:
                    b7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4B:6E:54:4C:0B:C0:35:0E:B0:F0:D1:4A:A6:1C:7C:5D:67:A4:EA
            X509v3 Authority Key Identifier:
                keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d5:62:81:dd:28:ef:95:a3:01:a9:13:ba:1e:6f:67:c0:df:
         d2:12:cc:76:bd:37:79:83:29:c7:e9:ee:d3:6a:47:45:5d:b8:
         72:62:7a:72:c6:c9:cb:b7:38:15:dd:62:ca:32:7b:bf:3f:2c:
         87:d7:f5:fa:0e:d7:6b:66:34:ef:8e:4f:e1:80:61:ee:e7:43:
         e9:b4:a6:28:30:88:84:c0:16:81:40:9e:c8:cd:a5:eb:93:18:
         a8:6c:4b:8b:58:0e:80:bc:4c:1f:e6:1a:75:e8:40:a4:51:a4:
         57:48:2f:44:ed:92:b7:4c:ad:8f:91:d8:68:0a:7b:61:60:88:
         d2:4e:e1:5b:d1:10:c5:45:60:8a:1a:40:75:0b:f4:1d:d1:e8:
         cd:35:87:fb:5e:67:31:16:ae:78:c5:c6:f7:68:bc:2e:1e:94:
         de:c3:8b:28:c8:33:5d:8c:c4:13:8c:35:2b:e2:57:89:c2:3f:
         26:7a:4e:8d:93:d8:8f:6c:3d:51:83:7f:e9:6c:26:bd:81:c3:
         90:63:7a:1a:f6:74:ae:30:c5:52:ce:ee:2f:fc:ee:c3:f1:d8:
         e1:06:92:1b:6a:9c:af:e5:82:b7:ac:01:66:ef:26:c6:d1:95:
         e6:f8:55:ad:26:d6:44:e0:b4:d8:21:c1:08:49:32:74:50:40:
         50:20:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:32:14 2026 by rpki-client