Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
File:                     jcayOVFjzkewNvrgKnH5SIBL9V8.mft (raw, json)
Hash identifier:          SYighFB/61YoO0oFCXC5IB5t8Zgg0pE9ZbLUPk53dSE=
Subject key identifier:   60:D6:78:8C:B7:B6:35:BF:F1:53:2B:2C:25:CB:D1:4C:B2:DE:2A:1F
Authority key identifier: 8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F
Certificate issuer:       /CN=8dc6b2395163ce47b036fae02a71f948804bf55f
Certificate serial:       019EC1ED91FFE61C6F3CBC965B1B9264CB1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
Manifest number:          C6
Signing time:             Sat 13 Jun 2026 17:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:32 +0000
Files and hashes:         1: UqSLybQPqtyf12w058GGJrCrwlE.roa (hash: ay496TJzckN/WV79yGM4pv+K/GRv47GhhBgHEduwC9o=)
                          2: jcayOVFjzkewNvrgKnH5SIBL9V8.crl (hash: i/Zpk4RyQfIv8tti4nAs6zWYSR06nq7abR9T00qKfRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:91:ff:e6:1c:6f:3c:bc:96:5b:1b:92:64:cb:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc6b2395163ce47b036fae02a71f948804bf55f
        Validity
            Not Before: Jun 13 17:00:32 2026 GMT
            Not After : Jun 14 17:00:32 2026 GMT
        Subject: CN=60d6788cb7b635bff1532b2c25cbd14cb2de2a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:e9:5f:b7:9d:9f:3f:5f:f3:b6:bd:20:53:
                    59:34:4e:23:ac:8e:d0:27:e7:e2:aa:c9:a8:19:e2:
                    49:26:fe:6d:1d:a5:4c:12:a5:b2:fc:f4:88:ef:d8:
                    42:fd:d3:fd:72:6f:41:65:12:0f:8a:db:96:37:ed:
                    9b:d9:01:ea:9c:31:9f:07:d7:1d:c7:35:c7:ce:6b:
                    72:7c:4e:1b:b1:e1:d5:70:66:67:81:1e:4c:a8:cb:
                    08:e3:19:50:0b:ee:c6:e7:6c:6a:21:07:70:c6:01:
                    0d:10:70:4e:65:87:b7:99:b3:31:37:a2:c1:e4:f7:
                    59:22:80:ea:e8:a3:0f:2c:9c:ce:e9:ca:15:50:2f:
                    b6:f9:a2:5b:74:c3:99:ec:8d:b8:c0:87:09:ba:be:
                    af:bf:5e:bc:70:fc:ff:45:40:ca:2b:63:4e:e2:45:
                    9a:6e:74:cb:0f:ff:e3:b6:7d:04:b3:ad:45:25:f6:
                    52:f4:e9:08:ce:8f:92:27:3d:f7:3c:e8:78:9e:73:
                    41:c5:77:e3:c6:62:43:fb:fe:0b:9b:ea:44:d4:3e:
                    87:12:e9:62:d4:74:01:40:33:84:e7:27:c7:bd:9e:
                    52:cd:2c:70:13:b9:4d:5c:ad:18:96:30:6e:89:3f:
                    13:a1:f2:14:da:f4:6f:0a:a9:a3:7e:35:c1:b4:2f:
                    e7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D6:78:8C:B7:B6:35:BF:F1:53:2B:2C:25:CB:D1:4C:B2:DE:2A:1F
            X509v3 Authority Key Identifier:
                keyid:8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ab:bb:61:6e:43:48:4a:51:9e:fd:0c:7c:d7:34:eb:fa:54:
         da:d4:c7:8c:ee:dd:48:02:62:60:6c:dc:27:86:46:b7:4b:2e:
         ae:2f:50:ee:19:99:9c:4d:50:ce:cd:96:00:fa:a5:df:90:25:
         ab:11:55:fc:d5:f0:fc:1c:23:8d:b6:2f:0e:6a:c7:16:d0:43:
         28:c8:10:ac:c5:67:eb:f2:ba:03:7d:9e:3b:78:d3:ae:01:16:
         37:5c:5f:36:5d:f8:70:7d:17:2f:80:f9:1d:31:ef:53:a5:9e:
         9b:52:91:a1:ee:9c:34:cc:63:ec:52:f2:35:b2:65:a1:33:63:
         a7:53:ca:f2:43:47:87:fc:54:31:ec:8f:e6:59:02:58:05:a3:
         de:b8:8c:38:d1:e6:42:45:e6:b4:78:01:8b:f9:72:dc:1c:75:
         29:38:9d:5c:38:08:09:ab:ce:32:c7:b5:92:20:bd:96:a1:c2:
         62:0c:9a:09:58:75:7b:9c:38:54:8a:b0:15:13:f7:12:84:86:
         b6:f7:4d:94:6e:7b:19:06:c0:52:3c:c0:39:89:87:ce:14:f9:
         43:43:0e:99:84:ec:f1:4c:7b:57:95:11:35:f4:2c:2f:45:ea:
         e8:d1:28:9d:57:e8:f5:51:3f:63:51:5d:76:f9:cb:c6:01:b7:
         a2:79:66:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:05:45 2026 by rpki-client