Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
File:                     1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json)
Hash identifier:          IuSqiXQhvCsyM3cGWkqtuzPqQ1/Ud4dVX5wQYmJzhJw=
Subject key identifier:   72:47:B8:91:DA:60:CA:C7:F8:C2:F7:C6:62:A2:7D:48:11:AB:CB:5D
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Certificate issuer:       /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial:       019EBEB6335F0E56598D9C6663C1F0F9B3B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
Manifest number:          08B9
Signing time:             Sat 13 Jun 2026 02:01:12 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:12 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:12 +0000
Files and hashes:         1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: 1VyIyXRk2uNR0j4jSsXm57ufuQtjGdY/kkQS9JKXh1k=)
                          2: jbum_D98f7wXxL3zfJIV6BCwD8g.roa (hash: C+K78EzxF6K+3h9zUKmt0tIENTKcf8CCLlSHEr+JL70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:33:5f:0e:56:59:8d:9c:66:63:c1:f0:f9:b3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
        Validity
            Not Before: Jun 13 02:01:12 2026 GMT
            Not After : Jun 14 02:01:12 2026 GMT
        Subject: CN=7247b891da60cac7f8c2f7c662a27d4811abcb5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:27:70:5b:46:a4:bb:05:5a:90:ab:82:8b:
                    d9:bc:da:70:35:64:5d:e0:bf:96:06:f2:71:20:79:
                    f6:54:37:3e:0d:00:a3:7b:09:1b:20:ca:1d:63:47:
                    31:f9:e9:40:73:6e:0b:b2:2f:6f:a3:29:2b:53:bb:
                    8f:07:dc:18:1b:4d:d3:93:b3:25:d6:1d:37:59:30:
                    20:97:df:16:b8:87:7c:08:39:48:f8:1d:5a:b7:db:
                    99:8c:66:11:3e:e2:85:8e:ef:c1:3b:5e:db:54:a6:
                    7e:44:5d:65:b7:43:0e:ac:64:d1:c0:ff:2e:8e:72:
                    81:9b:27:85:ad:27:f2:22:3f:05:f3:87:5c:6d:b2:
                    c1:cd:89:24:cd:6d:bf:2e:c7:de:af:fa:73:0d:91:
                    97:eb:20:fe:c4:01:4e:6d:b3:f8:15:36:eb:5b:a5:
                    17:98:58:71:fa:7a:6c:10:0c:6a:fd:d3:07:31:c8:
                    60:ee:39:3f:47:a7:a6:84:78:3e:85:c7:93:36:e2:
                    d9:7e:8c:76:ac:5e:ff:e8:c7:19:64:0b:cc:d6:6d:
                    bb:88:60:02:d7:f8:e7:fd:f5:40:9d:17:0b:ed:42:
                    26:9a:59:88:5b:5b:18:9a:02:94:fd:fd:2c:4f:6c:
                    c6:46:fa:07:7d:ce:f6:1e:0a:c0:06:fb:3b:91:74:
                    c4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:47:B8:91:DA:60:CA:C7:F8:C2:F7:C6:62:A2:7D:48:11:AB:CB:5D
            X509v3 Authority Key Identifier:
                keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:14:f6:df:6f:0c:cb:1d:cb:24:b8:65:2f:71:cb:8a:e4:3d:
         b7:88:0e:47:8d:e9:1b:c5:f2:3b:17:df:97:ab:90:23:fb:30:
         64:a9:f4:3a:fe:9e:f6:d5:0f:ee:c3:25:bb:7e:44:47:17:d7:
         5c:8b:7c:60:c1:6f:24:95:2c:0e:8a:91:29:ac:6c:04:88:1f:
         6d:30:d5:7b:d2:30:97:ed:d7:73:5b:7a:39:93:5b:7f:d3:ce:
         f6:5a:e4:8c:51:03:77:f8:c8:e0:d3:2a:ab:27:7e:df:3f:ae:
         2f:27:3d:62:99:09:e4:b6:60:1a:8e:1d:ee:49:22:a2:7d:e9:
         81:b9:5b:47:a5:27:12:44:00:23:cd:b3:59:49:8d:4a:b1:38:
         7f:c8:95:e1:50:dc:5a:13:33:c9:54:bf:98:1f:3d:46:e7:1d:
         9c:17:d6:e5:36:7e:d7:c8:f6:7b:70:a8:8c:93:20:2e:91:dd:
         1a:15:cb:fc:04:16:c8:2a:14:50:b8:d2:a4:d9:66:a9:32:41:
         b4:65:bc:bb:bb:6e:d4:4a:c9:03:1f:65:76:74:c0:f3:10:e2:
         33:de:e2:7e:7a:46:99:db:7c:bf:0c:c7:92:83:88:41:de:1b:
         29:3c:26:fe:29:dc:29:26:7e:5d:5c:c7:1e:b9:68:3c:c9:98:
         4b:36:00:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:43 2026 by rpki-client