Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
File:                     jkFZeSO5geHA1Pyi_9CozcNme30.mft (raw, json)
Hash identifier:          3u1x4RGlhBdSiof9pC8cN8KNMP4WIJLZWHxg1SWPfzI=
Subject key identifier:   C9:FF:CF:FA:E5:80:65:3C:8B:F9:67:10:23:CA:3B:68:98:30:09:93
Authority key identifier: 8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
Certificate issuer:       /CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Certificate serial:       019FA9754F74D2943DA112A4CBEE7B93E159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
Manifest number:          0368
Signing time:             Tue 28 Jul 2026 16:01:05 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:05 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:05 +0000
Files and hashes:         1: 2QK16_GzCxStUDI0mu8WHffdpn8.roa (hash: GKlCvD0CmH/A+xQlfrKSRNG2sqH4ve1r+aoC47JjAIU=)
                          2: jkFZeSO5geHA1Pyi_9CozcNme30.crl (hash: 2qZVfxZYxkZ4qRTyFNV4QNsK5YTYRIqLTjlALPFPsxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:4f:74:d2:94:3d:a1:12:a4:cb:ee:7b:93:e1:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
        Validity
            Not Before: Jul 28 16:01:05 2026 GMT
            Not After : Jul 29 16:01:05 2026 GMT
        Subject: CN=c9ffcffae580653c8bf9671023ca3b6898300993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:26:1c:62:7b:18:03:22:14:78:91:e6:fd:
                    80:3c:62:1e:0d:26:ee:32:d2:9e:20:18:ce:89:ee:
                    e3:05:11:87:ce:ea:68:f1:e4:80:02:65:05:5f:06:
                    b9:56:5f:1e:07:1e:0a:ad:28:81:ab:29:76:0d:aa:
                    64:0d:19:d0:5d:7c:be:2c:8d:3d:97:f0:06:16:68:
                    0b:ba:4d:a1:70:94:87:cd:69:f1:06:3b:db:e9:47:
                    8d:90:ab:ac:15:41:f4:08:38:83:c8:ad:2b:c1:79:
                    7f:26:a9:b7:b6:e3:ad:8c:c2:ee:a8:7f:7c:b1:52:
                    3a:b7:ac:d1:19:5e:3c:aa:85:23:e3:5e:d3:2f:b6:
                    d6:7a:72:b6:b1:eb:fc:24:f9:ce:c1:6b:7a:80:0c:
                    df:04:8f:5e:e0:4e:18:8d:7d:55:c7:0a:3d:ff:52:
                    2a:fd:ec:ed:e3:33:7a:31:da:87:a2:a5:f3:c9:20:
                    88:4f:80:04:7e:b6:11:0c:bd:c9:48:ef:e9:49:39:
                    50:56:05:31:3e:c6:ac:05:88:66:03:42:a1:66:96:
                    72:b7:dd:97:7b:25:72:17:96:b2:ba:27:4a:3c:b6:
                    33:d7:ae:5e:97:02:fb:c8:e0:24:6a:7f:eb:4b:53:
                    f0:1e:4f:fe:c1:5b:98:25:bf:38:dc:e4:e8:e8:c9:
                    04:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FF:CF:FA:E5:80:65:3C:8B:F9:67:10:23:CA:3B:68:98:30:09:93
            X509v3 Authority Key Identifier:
                keyid:8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b2:80:57:3c:a2:b5:35:44:ce:21:84:6c:8e:90:6f:2c:d8:
         86:6d:07:52:ed:b5:dd:5f:d6:0c:e8:95:a9:30:34:91:72:41:
         9b:1e:e3:12:37:ff:09:3d:db:c8:a7:f3:8f:ee:23:d0:4e:97:
         ab:03:b1:1a:ae:0a:31:0a:b8:e6:82:70:fc:6e:19:1a:ab:b5:
         4b:03:45:0d:fb:42:a3:8c:27:3d:ff:3c:3d:74:d9:bd:f2:a8:
         56:b8:51:5e:a9:71:18:e0:86:4b:9d:05:64:9e:13:1a:6c:a8:
         da:64:3a:90:4d:a9:e5:63:b5:4a:c1:6f:15:5d:28:bf:76:37:
         27:26:55:80:c6:e8:7c:a7:08:b1:cf:29:fa:ac:23:e2:36:fc:
         42:45:d7:fe:03:af:73:11:3a:4b:0e:ca:b4:b6:cd:eb:79:35:
         41:2d:e6:8d:ff:03:90:5f:e8:78:2c:a5:4c:a6:d8:c4:60:d6:
         ef:61:fa:80:9c:36:8d:7c:fb:68:c4:d3:5b:50:01:90:87:b3:
         24:5b:06:43:77:e9:6c:20:b5:b9:a9:64:83:ce:ec:a3:00:29:
         15:5f:38:9e:36:e0:3a:e5:2c:01:16:ac:93:f0:00:32:b8:69:
         a7:e3:42:13:64:d8:f4:c1:f7:fa:a0:9e:d4:ec:55:13:52:f3:
         06:9c:a6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:56 2026 by rpki-client