Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File:                     jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier:          gbCKyD6C9/Jqby+4vt8BJx3p8bJ9Qm6M5iqCk69DkL0=
Subject key identifier:   1A:A4:88:15:CF:D4:C1:B9:88:2C:B8:4A:10:A6:4E:68:59:2B:BE:A5
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer:       /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial:       019ED4996AE8F52A4AC37298DB133C5C9E68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number:          1967
Signing time:             Wed 17 Jun 2026 08:01:24 +0000
Manifest this update:     Wed 17 Jun 2026 08:01:24 +0000
Manifest next update:     Thu 18 Jun 2026 08:01:24 +0000
Files and hashes:         1: D8C_fac31Ie3Mlmm0iY26zsUpPQ.roa (hash: aXM4Hau7o88WQaKHyho1aeWalezo3Xwt0vRqN6L/8TQ=)
                          2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: Vz6RXM/fuZPopU5MTGj77BibgJ460YIDJUVwhaIDojw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:99:6a:e8:f5:2a:4a:c3:72:98:db:13:3c:5c:9e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
        Validity
            Not Before: Jun 17 08:01:24 2026 GMT
            Not After : Jun 18 08:01:24 2026 GMT
        Subject: CN=1aa48815cfd4c1b9882cb84a10a64e68592bbea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cd:7c:35:93:a8:67:50:86:6a:d6:a4:c5:a9:
                    3d:6c:df:4d:1a:42:22:16:99:46:54:cd:26:7a:1a:
                    c8:a3:6e:aa:f3:bb:e6:b9:70:5c:de:28:68:9f:79:
                    9e:1d:59:2a:4b:f4:89:ad:de:69:5c:b4:fc:65:87:
                    18:11:8c:f5:f2:30:e5:3c:60:69:e7:45:16:f2:bd:
                    71:b1:10:12:2b:75:50:08:a0:f9:df:aa:58:65:a9:
                    a4:55:40:af:e7:b7:df:59:70:43:ce:8b:1b:2b:b8:
                    b5:eb:96:7e:0f:f2:01:4b:90:93:03:3d:07:fc:8f:
                    55:24:0b:72:16:06:a5:2e:01:08:a8:b6:b5:4c:4c:
                    9f:2b:1b:b3:6e:a3:90:f6:0f:a7:f8:49:a1:2f:7b:
                    b1:5e:59:fb:d2:cd:47:38:fa:ef:70:bf:0b:00:4b:
                    2c:51:41:e8:8a:8d:e0:51:50:c2:52:4e:d0:ec:28:
                    92:36:b0:e8:30:6a:cf:38:c7:43:9e:58:a4:52:bf:
                    85:0a:7c:1a:4c:02:88:99:ef:6e:87:8d:0d:74:16:
                    b3:5a:36:41:c6:42:08:e2:d2:20:56:58:7b:ad:60:
                    f9:be:9e:7f:7a:fd:b2:de:3f:94:de:9e:f9:32:00:
                    58:a2:b6:c6:64:77:ba:6d:3d:30:8d:93:e1:0b:98:
                    8c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A4:88:15:CF:D4:C1:B9:88:2C:B8:4A:10:A6:4E:68:59:2B:BE:A5
            X509v3 Authority Key Identifier:
                keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e8:21:e0:3a:27:92:9a:a8:f1:8d:c0:a8:4f:4a:94:2a:48:
         bc:5d:d1:a9:c9:81:ac:9c:6f:1b:9d:b0:c5:a3:1a:16:2b:70:
         3c:be:ba:ff:33:fb:2c:f7:18:82:d3:3f:b7:d7:61:d4:bf:d5:
         af:0a:70:60:b4:06:3a:ec:0d:84:99:87:4c:0d:5e:4c:4c:1d:
         6f:cf:ce:49:d6:d5:29:76:6e:12:84:71:fd:ca:0c:3f:e6:c2:
         38:79:30:fc:c4:03:9e:6c:dd:c9:84:25:49:c4:68:d8:f6:c2:
         bb:95:b1:36:51:3a:88:8c:09:54:9e:6c:88:f1:84:e0:78:7a:
         0e:f8:51:aa:95:59:c4:d8:57:46:2e:45:79:8e:a1:50:ae:2f:
         62:4b:da:6c:4b:7f:9d:4e:2e:ad:2a:3d:12:17:65:60:60:66:
         49:fe:ce:ef:0f:0f:8f:98:d2:0d:35:83:78:98:07:1f:33:70:
         93:5a:87:e4:07:09:cc:de:94:28:ea:fa:a3:58:55:10:ff:e2:
         1d:8d:56:67:3f:b0:11:8d:6b:cf:3b:eb:3b:3b:98:0f:b0:c7:
         fb:be:42:c5:d8:35:25:b7:53:d7:2b:4c:5b:c4:72:f5:e2:a3:
         cc:6b:ee:a3:dd:10:48:41:d5:26:b3:61:18:7b:7b:8d:ba:9d:
         9a:f0:4b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:02:36 2026 by rpki-client