Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
File:                     j1Gq0OQUir4_KouNQxjzS0VrZfE.mft (raw, json)
Hash identifier:          np1YYH5vK3Juxid0eE72gXRzfuGDsq0u9g+kPyUDy0M=
Subject key identifier:   93:7D:45:43:25:10:39:1B:AB:A0:D4:BA:99:99:85:A1:59:00:77:0C
Authority key identifier: 8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1
Certificate issuer:       /CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
Certificate serial:       019EC1EDB2BB6749ACA75C0E2C9AEF72B0B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
Manifest number:          0223
Signing time:             Sat 13 Jun 2026 17:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:40 +0000
Files and hashes:         1: 17JRT-eliiqD0ZudhQwcd-RHoCY.roa (hash: rsCaM5usnSELR3Hid5CN2oWYMmohcr2pCEMxJm1TSn4=)
                          2: 5CYe2w6R8bIP53LSediQOkU8X6Y.roa (hash: 62hxmbI0Pt2Gc+kE97Qd4+IWL8YV1uOGUoBpSifMc4g=)
                          3: AiyDVffautqfmFw0-sHwLnrdi94.roa (hash: NqMMGxy1WwFAXktdmGqyVpQBfDu1vxm8tC/DWTYXqCg=)
                          4: KTAAuRsqmRld1n4ZdiqcKLG_hbI.roa (hash: Z/rqoZBNVfDm70QTbYQ7hfqHZXGsKtZpgexuaPzb1M4=)
                          5: j1Gq0OQUir4_KouNQxjzS0VrZfE.crl (hash: 9Qe89tmTaCxy8tSh0NE+Lzjs5MgsQ/0lDjQsD29Fe88=)
                          6: lXUAxU6WVwpNoYD3PNJupX0IdnQ.roa (hash: 1IXDFDpAZ7cDUUd7sdHkzjt07vGwbPC7cOUCYW3+UFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:b2:bb:67:49:ac:a7:5c:0e:2c:9a:ef:72:b0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
        Validity
            Not Before: Jun 13 17:00:40 2026 GMT
            Not After : Jun 14 17:00:40 2026 GMT
        Subject: CN=937d45432510391baba0d4ba999985a15900770c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:df:27:42:4d:dc:02:bc:76:d0:62:90:a9:fe:
                    ba:34:9d:5d:56:af:e3:c6:06:7d:6a:5d:9e:29:bd:
                    e8:c0:28:67:0e:22:fe:e7:6b:dc:d7:98:ca:b2:a3:
                    35:55:e4:00:1f:b4:9f:7a:b6:9e:4d:0e:a1:4e:62:
                    62:4d:14:6d:67:45:49:61:bf:31:b2:3c:69:fc:12:
                    aa:e9:ed:73:3f:82:f5:af:cf:82:69:18:ba:7a:11:
                    85:65:02:e0:25:7b:8d:d2:34:e5:d2:2f:79:ea:87:
                    50:2f:de:00:73:32:e5:f8:79:18:95:6f:91:60:cd:
                    35:0f:9c:d6:07:bd:6d:86:4d:d2:8a:cf:5a:da:6a:
                    de:b0:dc:a5:3a:a7:43:a5:c9:a5:10:07:cb:e1:4a:
                    15:dc:21:7c:4f:75:45:e2:a5:d9:3d:4b:98:aa:61:
                    ca:21:ff:0f:64:c8:13:ec:2c:0f:76:ae:24:ec:18:
                    ab:3b:6f:f3:99:fd:d5:84:a7:81:51:d5:66:7d:1b:
                    88:fe:bb:a3:3f:fb:d1:a8:6f:1d:96:ee:49:4f:90:
                    be:94:f9:2d:b7:55:5e:12:7c:f3:c1:a4:6e:29:57:
                    f8:f6:cd:db:01:c1:ae:b6:6b:01:f9:0d:ca:e8:76:
                    07:05:fb:d8:aa:43:b5:46:9b:9d:e3:b7:28:a5:11:
                    ad:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7D:45:43:25:10:39:1B:AB:A0:D4:BA:99:99:85:A1:59:00:77:0C
            X509v3 Authority Key Identifier:
                keyid:8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9c:ce:e6:d5:52:02:19:fd:55:51:d2:bb:48:24:77:da:db:
         45:69:8d:1c:d4:7e:b9:87:d3:61:69:c9:67:46:95:40:ca:69:
         e8:16:4f:f6:4a:60:7b:a5:87:d7:fe:bb:b7:dc:02:66:ad:18:
         3b:9b:f8:3b:31:24:79:dd:25:90:5c:89:ac:07:cc:1e:44:d9:
         1b:ec:b3:f5:0f:f6:25:35:c1:65:5e:68:f2:e9:93:1a:ed:a0:
         64:41:34:35:24:13:0d:0b:61:79:40:ab:fe:ca:c0:dc:f9:37:
         9e:52:53:e7:c7:ed:be:76:8c:19:e4:34:24:ea:59:3f:5f:35:
         f2:04:b3:96:a6:f1:c3:64:32:ed:91:74:57:6d:f1:09:8e:8e:
         2a:71:9d:4e:fe:dd:36:d8:c4:73:a6:1e:db:23:47:8b:ae:46:
         71:7a:33:b9:92:d3:5c:53:53:71:5d:a5:a6:69:d9:3d:59:50:
         77:76:70:1f:b9:4f:23:11:2a:65:f6:36:a5:90:c5:14:14:aa:
         05:7a:ea:ab:d3:ea:3c:b9:23:4d:c3:2d:f5:0c:7d:aa:a1:50:
         7a:5d:a2:bb:25:7f:81:4f:c3:68:6c:db:01:3b:97:65:9c:9d:
         13:60:74:dd:68:4c:db:3b:70:52:8e:38:c7:14:47:c3:7d:57:
         a5:63:ad:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:20:36 2026 by rpki-client