Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
File:                     JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json)
Hash identifier:          BJY4HpquVpVv4taSOCz6G81Bb5DqZjE5VEhRTu4XkIs=
Subject key identifier:   34:02:18:E3:B8:97:28:1E:34:6D:90:B1:CD:E8:1F:DA:48:DC:0A:B8
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Certificate issuer:       /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial:       019EC292244DFC0E20E3DE18239FD17BA894
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
Manifest number:          18EE
Signing time:             Sat 13 Jun 2026 20:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:17 +0000
Files and hashes:         1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: v2P4znmNljusctIw5utgnhMXnLwhCZ0QoSH0vuLn3w4=)
                          2: eL4sddmNTd7PSzARjzADz_21RBc.roa (hash: 9PP/TpfqraKWqrmb3Ro9MwG6dH8Z8rYhFZu1I649JYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:24:4d:fc:0e:20:e3:de:18:23:9f:d1:7b:a8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
        Validity
            Not Before: Jun 13 20:00:17 2026 GMT
            Not After : Jun 14 20:00:17 2026 GMT
        Subject: CN=340218e3b897281e346d90b1cde81fda48dc0ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:5a:74:b6:ed:7c:6f:4a:3d:96:b1:a6:70:
                    77:c3:f6:56:68:2e:b3:a2:fa:e6:f0:6d:6f:77:a6:
                    d7:4b:13:fe:f5:fa:02:b2:29:95:76:7b:72:6b:95:
                    dc:63:0f:18:bb:d7:a7:25:98:cd:f5:30:ad:b2:8e:
                    c1:71:62:d5:b0:ef:9e:b9:e7:af:22:8b:e5:40:36:
                    f5:da:37:cb:54:17:67:a7:9e:5c:d4:44:9e:2c:de:
                    e4:51:53:e0:76:8a:65:5c:72:50:57:c5:00:29:fb:
                    46:c7:2f:95:49:89:44:d6:fd:1f:16:e0:4a:cf:bc:
                    c5:15:25:d9:70:76:0e:d8:4b:db:8d:f6:af:21:22:
                    5b:89:33:11:d0:7f:d2:2f:98:7b:87:d0:05:1c:21:
                    54:0d:d7:56:59:55:e5:85:e7:84:ec:69:71:67:69:
                    06:9b:83:d4:b7:1f:75:23:19:f1:53:ab:c2:21:ef:
                    69:92:d1:fa:4a:48:56:3f:0e:8e:d8:15:a2:d6:f4:
                    df:30:ac:c7:3f:94:d2:24:bd:27:66:67:cc:87:bf:
                    ab:92:80:e0:29:3c:a6:94:27:1f:bf:fd:60:a3:ba:
                    a8:33:29:a8:06:c8:8a:0b:2f:58:0a:3a:44:6a:72:
                    ba:df:4b:e4:65:ac:bd:4c:87:0a:ba:8e:1a:39:e6:
                    02:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:02:18:E3:B8:97:28:1E:34:6D:90:B1:CD:E8:1F:DA:48:DC:0A:B8
            X509v3 Authority Key Identifier:
                keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d2:7f:2b:07:7c:61:03:36:bd:b2:2e:76:02:55:26:a0:51:
         a7:91:ea:7c:96:d5:16:eb:ea:dc:60:9b:e4:ad:35:9c:36:8e:
         6d:cd:93:12:f7:4f:45:48:9d:99:34:e5:f3:74:b7:1a:38:42:
         6f:22:e6:94:4a:95:87:25:0c:33:0d:b7:fb:75:ab:89:e7:d3:
         d6:7e:d0:83:9d:e6:43:a9:09:32:4a:4d:12:10:f6:e9:bf:7d:
         21:00:a2:b5:ae:43:c2:f4:be:a6:bf:80:13:3a:3a:eb:04:e4:
         fb:f1:0f:0a:65:6b:ba:ba:b2:38:03:16:f9:21:1f:55:d1:b4:
         45:32:d4:37:85:2f:24:87:03:4f:03:ca:d5:c6:ec:49:cf:6e:
         79:99:66:8d:ae:c6:43:2a:b9:9a:0f:af:9c:4d:c5:ed:fd:96:
         26:fc:e5:96:f4:b0:34:bf:43:6d:32:56:01:a7:53:21:1e:be:
         d3:69:24:6a:ab:36:1c:32:16:06:01:3e:71:53:81:ed:ee:b1:
         a2:8f:19:ba:2c:27:f4:10:1d:18:6c:31:b3:57:72:af:e0:f0:
         98:a4:a2:c4:77:84:f8:5d:85:b9:01:77:49:1e:b6:2c:59:7d:
         a8:ad:d8:e3:d4:a7:85:77:8d:fe:e5:ce:83:9c:1e:35:6a:cf:
         02:ee:f6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:20:10 2026 by rpki-client