Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
File:                     jlo2o46eViR2rnC5FQKOMBhxKRk.mft (raw, json)
Hash identifier:          qMJhtvIMsQBxQOftv2xQJRwZGISJo18HRga5QmkGb60=
Subject key identifier:   AA:F3:86:BE:68:FF:9C:65:A8:33:FB:75:BB:D7:40:BF:E3:0B:1F:3F
Authority key identifier: 8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
Certificate issuer:       /CN=8e5a36a38e9e562476ae70b915028e3018712919
Certificate serial:       019ED34F4370A4B7586399CF48C7FF9B3C6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
Manifest number:          0D06
Signing time:             Wed 17 Jun 2026 02:00:47 +0000
Manifest this update:     Wed 17 Jun 2026 02:00:47 +0000
Manifest next update:     Thu 18 Jun 2026 02:00:47 +0000
Files and hashes:         1: KCCXTiyEdgg9X9UWZ--_fhYVO_Q.roa (hash: 0RPtm2bqma6nOnpNbHsYWDjHVvYXOYQDlwmuFFsHb6M=)
                          2: jlo2o46eViR2rnC5FQKOMBhxKRk.crl (hash: 1+9Pxsk392Ms6a5zARLTVHg//JfHDodhkWIbBMZnTX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 02:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:4f:43:70:a4:b7:58:63:99:cf:48:c7:ff:9b:3c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e5a36a38e9e562476ae70b915028e3018712919
        Validity
            Not Before: Jun 17 02:00:47 2026 GMT
            Not After : Jun 18 02:00:47 2026 GMT
        Subject: CN=aaf386be68ff9c65a833fb75bbd740bfe30b1f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:46:81:ee:46:cb:e4:c4:8c:84:b8:73:e7:24:
                    6f:fc:61:8f:fd:43:09:ba:c0:03:9f:f7:a2:54:1f:
                    b6:d5:cf:c8:1f:a7:c0:ee:f8:3c:d5:02:63:bb:8f:
                    5f:16:21:94:9c:c5:54:14:4f:7c:14:ee:89:9c:d0:
                    7e:3c:89:af:3a:2e:fe:e2:f7:03:bb:f2:91:8f:de:
                    6e:7a:41:77:bd:13:56:92:f2:52:2b:92:b5:ac:3f:
                    26:73:71:32:39:3a:2c:58:5d:3e:b5:db:40:51:26:
                    e6:e3:38:10:b1:58:78:41:e7:ca:5b:91:d7:9f:31:
                    f8:c3:d8:7f:07:80:14:8b:6b:9c:d4:71:33:1e:13:
                    c4:f4:08:15:8b:9c:da:aa:26:24:52:2b:30:c3:0b:
                    a4:8d:55:f5:1f:18:61:0c:42:df:3d:b7:cf:44:25:
                    58:3b:de:a3:5a:8d:f9:18:f0:2b:84:a3:b1:85:8f:
                    57:f9:48:f3:50:d7:c7:9f:c6:e0:f3:86:fc:93:16:
                    39:19:b4:3d:57:99:fe:bc:94:76:67:c9:84:60:d5:
                    1d:3a:95:8b:f0:84:d2:3a:68:ab:54:db:15:fe:3b:
                    96:3f:48:f6:b9:54:2a:4f:72:8d:f0:9d:d1:d6:68:
                    70:db:65:59:48:6e:86:b2:49:3e:68:af:28:72:1e:
                    db:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F3:86:BE:68:FF:9C:65:A8:33:FB:75:BB:D7:40:BF:E3:0B:1F:3F
            X509v3 Authority Key Identifier:
                keyid:8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:62:32:d9:a2:98:40:a1:18:ef:7b:d0:d8:ed:58:9d:65:cb:
         d2:c6:fe:21:a0:f2:e5:eb:58:54:91:6e:13:50:05:c6:5d:9c:
         ce:83:47:c3:ba:06:d8:e1:ab:8f:ed:03:2b:a9:7a:b9:e6:49:
         7f:ff:52:eb:94:89:38:c2:3a:52:6d:e5:84:e1:79:d3:df:f8:
         9c:9f:5f:ed:8a:53:1a:19:85:d8:d5:8c:af:f0:69:47:a3:c2:
         09:09:1c:62:03:80:cd:e8:c9:2c:c0:87:b7:56:5f:96:54:cf:
         27:10:f7:2f:36:74:19:51:e9:3a:a1:e6:8f:24:4b:3e:92:5f:
         bd:4a:47:a8:3f:cc:68:28:e8:f1:47:69:0d:22:db:6c:62:69:
         9e:f8:06:c6:35:51:46:d5:fc:5c:9c:b6:3d:e4:1e:bc:4f:a9:
         ad:aa:0f:a4:f4:b7:a4:ec:92:c7:dd:75:c3:5b:24:57:7d:8d:
         36:66:fe:39:08:ac:22:12:c6:f0:e3:86:1d:ee:21:de:90:17:
         26:cf:f7:6b:d2:b0:18:ee:f8:5c:06:e3:fe:b0:18:96:b7:b6:
         5a:4d:47:30:32:ed:d2:28:36:42:54:b3:51:56:e8:db:97:0a:
         36:32:d9:49:db:d0:b0:79:23:03:c2:af:1e:52:42:2a:60:f4:
         9b:74:4a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:00:36 2026 by rpki-client