Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
File:                     jkFZeSO5geHA1Pyi_9CozcNme30.mft (raw, json)
Hash identifier:          muJc2ZSaxrshnqRGeDWAqA+zZiWvdGjveq7aKA5wRkU=
Subject key identifier:   33:48:6E:C0:D3:09:EF:C7:30:5B:98:D5:13:C5:92:81:40:7F:C8:02
Authority key identifier: 8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
Certificate issuer:       /CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Certificate serial:       019EBFC7F8120A5569A39383825052C3EE6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
Manifest number:          02EF
Signing time:             Sat 13 Jun 2026 07:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:13 +0000
Files and hashes:         1: 2QK16_GzCxStUDI0mu8WHffdpn8.roa (hash: GKlCvD0CmH/A+xQlfrKSRNG2sqH4ve1r+aoC47JjAIU=)
                          2: jkFZeSO5geHA1Pyi_9CozcNme30.crl (hash: T/zB8EWZIe7/dD2Pk6Cxm14wZlzHm93WW3/gqijWt2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c7:f8:12:0a:55:69:a3:93:83:82:50:52:c3:ee:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
        Validity
            Not Before: Jun 13 07:00:13 2026 GMT
            Not After : Jun 14 07:00:13 2026 GMT
        Subject: CN=33486ec0d309efc7305b98d513c59281407fc802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:1e:c2:e6:11:fb:6d:8c:08:ca:61:e6:58:
                    09:b3:32:d5:81:e3:19:d6:b9:2a:97:9d:f7:f6:1c:
                    d4:87:6b:09:a6:6f:07:c5:32:91:3a:c9:b1:3e:08:
                    52:fa:e6:b6:c0:4d:7e:e1:4e:d5:17:4a:e4:5b:75:
                    16:97:93:29:2a:3a:bb:32:e0:e7:68:bd:ce:a6:ef:
                    28:e6:35:04:3e:5a:80:72:2b:7c:f5:d2:6e:c1:16:
                    00:ab:42:3a:d6:fa:15:6c:14:80:a0:ab:e4:cd:b5:
                    e6:92:44:25:9a:d1:42:6b:2e:83:b5:fa:b6:17:17:
                    d4:21:8f:8d:9a:9d:e3:01:91:fd:d6:f8:ce:d5:08:
                    65:2a:a8:1a:bd:1d:61:4f:79:73:3d:56:85:e3:0a:
                    54:e4:ba:f7:5f:71:36:2a:a2:2e:3d:7d:f7:ec:9e:
                    39:a8:f1:aa:f3:1b:22:1d:b8:6c:a1:09:e3:2b:ca:
                    6a:33:58:42:a2:b6:c9:4d:a0:83:f8:41:52:cd:34:
                    70:8b:66:85:ac:09:2a:35:b6:90:03:11:f9:34:81:
                    90:61:5a:95:ff:b4:83:d8:25:e9:c9:16:61:0c:b3:
                    f9:c8:e6:f8:ba:4c:a3:8a:ac:f4:0d:8c:38:fb:01:
                    84:73:13:5e:4c:c6:31:32:aa:28:a9:06:86:47:05:
                    2a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:48:6E:C0:D3:09:EF:C7:30:5B:98:D5:13:C5:92:81:40:7F:C8:02
            X509v3 Authority Key Identifier:
                keyid:8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:7e:df:72:9e:6a:8c:11:74:55:e0:17:52:da:12:56:35:42:
         90:42:8b:e5:52:89:04:16:c5:fd:ad:ce:34:29:47:6b:d8:b0:
         e0:da:99:f8:47:17:a2:09:f8:22:c9:e9:dc:75:0a:ae:c0:16:
         18:4f:68:49:ff:d9:6c:68:47:37:f1:db:6d:72:a3:43:45:97:
         be:1e:f1:68:75:38:bf:f8:c6:ff:39:85:74:29:b8:10:d4:64:
         41:18:a5:9b:61:cc:30:0d:84:e4:85:79:db:70:55:59:74:03:
         3d:6c:2f:52:af:bd:4c:3f:10:1b:09:8c:7d:94:5b:04:a6:00:
         83:8b:df:d8:15:f2:34:87:1f:63:40:75:9a:2a:70:63:06:6f:
         5f:0e:39:54:18:a8:3a:c5:03:dd:b8:96:f4:55:e1:9a:cb:d1:
         13:57:87:bd:73:48:4b:c5:98:6f:bf:28:c3:23:c0:94:cb:58:
         79:b6:e1:e5:e2:3d:ec:8b:03:f0:30:cc:4f:8e:ba:b1:c6:1b:
         6d:aa:87:82:c6:72:e7:80:33:40:61:ce:79:ad:68:ce:2c:94:
         30:36:bb:0f:6d:9c:d6:4e:8f:69:8e:15:ab:97:84:58:ad:a8:
         da:72:2c:87:57:5e:13:a4:f2:f9:30:8c:13:be:ed:b4:71:f7:
         38:1d:a3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:15:24 2026 by rpki-client