Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
File:                     jrM9OZ3Q9flhftTkcOa9ydELeiA.mft (raw, json)
Hash identifier:          5nEBrN6JPyIHqrNlhJxGE2D7OdQP4CJNeuqFVyynhYM=
Subject key identifier:   14:1C:D0:7D:FA:E9:18:7B:3C:3A:B4:AA:54:9E:3C:01:F6:F7:18:20
Authority key identifier: 8E:B3:3D:39:9D:D0:F5:F9:61:7E:D4:E4:70:E6:BD:C9:D1:0B:7A:20
Certificate issuer:       /CN=8eb33d399dd0f5f9617ed4e470e6bdc9d10b7a20
Certificate serial:       019EC2C93C5D18A3A9C5BB7B9A7ABD7B428A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
Manifest number:          EE
Signing time:             Sat 13 Jun 2026 21:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:28 +0000
Files and hashes:         1: _Wy5a31X0fWVI5kzqNmJQQC4UbU.roa (hash: 9Bcaw7GkeT0B0JGjnO2Z6JkUkn/KrawL89AtsYKJKU0=)
                          2: jrM9OZ3Q9flhftTkcOa9ydELeiA.crl (hash: ydz3FwW9PG5OpNIjbJAS2Bvnj3nVqSJnEYJHbZPWYUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:3c:5d:18:a3:a9:c5:bb:7b:9a:7a:bd:7b:42:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb33d399dd0f5f9617ed4e470e6bdc9d10b7a20
        Validity
            Not Before: Jun 13 21:00:28 2026 GMT
            Not After : Jun 14 21:00:28 2026 GMT
        Subject: CN=141cd07dfae9187b3c3ab4aa549e3c01f6f71820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:55:73:9d:25:36:5f:37:fb:9d:6c:fe:37:92:
                    c1:04:87:4c:9b:cf:ce:ae:91:16:26:d8:e2:99:a8:
                    b7:55:b2:db:e2:80:0a:b9:16:e4:fb:3a:eb:eb:bb:
                    32:90:56:02:8d:c8:80:a4:80:6f:8c:36:c1:e8:5b:
                    5e:13:ed:3c:8e:02:3e:f0:b3:be:c9:fc:bb:8e:ab:
                    45:4e:c0:30:98:6c:a2:7b:af:c4:f5:5e:66:e7:fa:
                    9d:d6:da:39:d2:ff:a0:db:f5:04:98:34:cb:98:38:
                    af:46:66:a7:b9:a8:0b:af:0e:b6:31:c7:94:c1:01:
                    f6:21:35:fb:b9:a5:99:ff:d9:fa:ff:fb:a9:87:09:
                    b4:55:df:38:fc:4d:e7:91:f5:0e:01:26:25:3b:e1:
                    6b:3c:c9:7a:cc:ee:f9:80:72:73:30:99:86:fd:9f:
                    c1:27:b2:04:e1:ae:05:52:51:e0:48:40:c6:ef:45:
                    e2:50:85:2b:b0:c6:77:e4:90:6e:39:d3:1e:cf:28:
                    bf:9e:d7:3e:e1:f6:09:9e:76:d8:d4:f3:ca:5e:be:
                    94:aa:35:a7:36:8c:79:53:01:36:2a:fb:d0:71:1e:
                    93:70:6b:b4:4b:6c:ea:f0:42:20:42:5b:c4:5c:1e:
                    41:81:9d:f2:7e:79:5f:01:b6:23:d5:e2:69:fc:1c:
                    c8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1C:D0:7D:FA:E9:18:7B:3C:3A:B4:AA:54:9E:3C:01:F6:F7:18:20
            X509v3 Authority Key Identifier:
                keyid:8E:B3:3D:39:9D:D0:F5:F9:61:7E:D4:E4:70:E6:BD:C9:D1:0B:7A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:52:df:db:dd:c3:92:a8:7c:ab:38:17:ee:96:50:42:59:aa:
         fb:8c:d8:b3:b6:8f:a0:29:83:24:6c:09:d3:e2:44:31:b5:64:
         45:8a:8e:b0:04:de:72:8a:57:3f:07:6e:e6:4d:eb:47:7d:07:
         79:8f:1a:e1:49:70:67:a4:b7:b0:76:62:8c:6f:9c:f7:63:86:
         6f:40:f8:b5:95:fd:1e:ce:35:37:07:0d:23:8f:25:7f:55:04:
         4a:4a:6d:3f:21:4e:17:19:7e:1c:b8:b2:82:2e:57:41:f8:76:
         fd:17:2f:ce:fe:ef:81:6a:fd:1e:d8:34:65:d9:1e:16:51:e5:
         48:6e:f7:b9:b5:96:bf:f8:b8:36:75:30:40:eb:17:9e:8e:15:
         63:cb:6b:ee:c6:c6:a9:8d:eb:30:61:a2:2c:1e:3d:50:47:08:
         43:d3:52:04:3f:a5:1c:5b:2b:f7:00:59:f4:0c:99:36:bd:76:
         4f:74:16:90:07:73:0f:d5:ff:46:57:64:2a:02:32:6c:d9:ce:
         43:c7:65:99:e2:8c:12:1a:65:8a:40:6c:84:d1:dc:40:d2:ff:
         1e:92:23:55:40:bd:d0:56:e4:27:66:dc:eb:eb:9c:60:eb:b5:
         fc:9a:f2:0d:22:0d:c1:85:51:99:9c:e6:5f:3f:e4:cd:23:fd:
         04:90:ff:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyTxdGKOpxbt7mnq9e0KKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjMzZDM5OWRkMGY1Zjk2MTdlZDRlNDcwZTZiZGM5ZDEw
YjdhMjAwHhcNMjYwNjEzMjEwMDI4WhcNMjYwNjE0MjEwMDI4WjAzMTEwLwYDVQQD
EygxNDFjZDA3ZGZhZTkxODdiM2MzYWI0YWE1NDllM2MwMWY2ZjcxODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVVznSU2Xzf7nWz+N5LBBIdMm8/O
rpEWJtjimai3VbLb4oAKuRbk+zrr67sykFYCjciApIBvjDbB6FteE+08jgI+8LO+
yfy7jqtFTsAwmGyie6/E9V5m5/qd1to50v+g2/UEmDTLmDivRmanuagLrw62MceU
wQH2ITX7uaWZ/9n6//uphwm0Vd84/E3nkfUOASYlO+FrPMl6zO75gHJzMJmG/Z/B
J7IE4a4FUlHgSEDG70XiUIUrsMZ35JBuOdMezyi/ntc+4fYJnnbY1PPKXr6UqjWn
Nox5UwE2KvvQcR6TcGu0S2zq8EIgQlvEXB5BgZ3yfnlfAbYj1eJp/BzIjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQc0H366Rh7PDq0qlSePAH29xggMB8GA1UdIwQY
MBaAFI6zPTmd0PX5YX7U5HDmvcnRC3ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJNOU9aM1E5ZmxoZnRUa2NPYTl5ZEVMZWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iMTBmMDUtNGM1Yy00NzQ3LWI3MDQt
ZmQxN2JhODhkOGNiLzEvanJNOU9aM1E5ZmxoZnRUa2NPYTl5ZEVMZWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9iMTBmMDUtNGM1Yy00NzQ3LWI3MDQtZmQxN2JhODhkOGNi
LzEvanJNOU9aM1E5ZmxoZnRUa2NPYTl5ZEVMZWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1Lf293D
kqh8qzgX7pZQQlmq+4zYs7aPoCmDJGwJ0+JEMbVkRYqOsATecopXPwdu5k3rR30H
eY8a4UlwZ6S3sHZijG+c92OGb0D4tZX9Hs41NwcNI48lf1UESkptPyFOFxl+HLiy
gi5XQfh2/Rcvzv7vgWr9Htg0ZdkeFlHlSG73ubWWv/i4NnUwQOsXno4VY8tr7sbG
qY3rMGGiLB49UEcIQ9NSBD+lHFsr9wBZ9AyZNr12T3QWkAdzD9X/RldkKgIybNnO
Q8dlmeKMEhplikBshNHcQNL/HpIjVUC90FbkJ2bc6+ucYOu1/JryDSINwYVRmZzm
Xz/kzSP9BJD/2g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:18:36 2026 by rpki-client