Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
File:                     jagkvGMczuGumdcQOv0tx08eKcQ.mft (raw, json)
Hash identifier:          yHQF1h08BiyynBVs5wS5PiNZZgcdrdm/yqm8FmQElbQ=
Subject key identifier:   81:58:8E:09:57:72:45:7E:07:F5:7F:4C:9A:5A:21:1D:0F:A6:4F:76
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Certificate issuer:       /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial:       019EBFC878FC2F87BA2BC0CF00505627D542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
Manifest number:          18ED
Signing time:             Sat 13 Jun 2026 07:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:46 +0000
Files and hashes:         1: gl2nmwO4v0CeZLjHm3SDRIyos8Q.roa (hash: XbNVPIMyzYNGS/m6xHDz4/G85Dxs4nrc/Ehwb2bG/rs=)
                          2: jagkvGMczuGumdcQOv0tx08eKcQ.crl (hash: Q5SZGVnryTgVJeaIynKMBtTPLVaniFbZCYrcupkvzTc=)
                          3: kNR-gUHIBkAVG5LDVgVJxvEY3q8.roa (hash: d0VW7tyS0/KepNZdJ2Fz8K2kUTPgtIVFBZK37jfxU0M=)
                          4: kUXgXHjZh6Dhv7swtP0uScwOUOU.roa (hash: quIM8+yqzd47fNHZBFQKX0gUs534hYfsNXJItcjTlM4=)
                          5: v9YovKS0rkxgh-imaNT6dS4t8wE.roa (hash: +gjCRrqjahMp/Uxvqf8OR5Yjihz0o/VceeWEOtR4+ZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:78:fc:2f:87:ba:2b:c0:cf:00:50:56:27:d5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
        Validity
            Not Before: Jun 13 07:00:46 2026 GMT
            Not After : Jun 14 07:00:46 2026 GMT
        Subject: CN=81588e095772457e07f57f4c9a5a211d0fa64f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4d:b3:be:80:a4:d5:86:d9:de:f7:ec:a3:77:
                    95:f5:1a:51:10:d8:94:a6:53:6e:f6:ac:d2:88:59:
                    cb:af:43:ec:47:4f:86:6c:2c:ce:5b:27:78:b0:68:
                    d0:b7:e2:d2:f0:50:6a:35:e8:45:e2:9b:c9:eb:eb:
                    71:e3:c6:9b:95:f8:36:88:b3:f6:c6:95:30:0c:16:
                    0d:63:8c:03:c6:1c:83:f8:f4:1c:08:13:80:c2:ba:
                    f4:73:23:02:d9:e8:68:b5:2b:dc:51:5b:c2:8f:7e:
                    34:17:90:2c:e9:20:fa:d7:d2:24:dd:bb:dd:33:46:
                    59:33:79:58:a5:2c:59:64:ad:a9:43:35:4c:2d:11:
                    78:89:a9:a2:01:8a:81:7f:84:cd:9d:66:32:25:86:
                    aa:f8:09:c0:dd:5b:51:6d:bf:27:29:cc:79:1c:af:
                    d7:45:96:37:09:0e:63:b2:89:e0:a0:ed:d9:f4:31:
                    b1:31:2a:81:ee:59:1d:ba:40:d9:8a:73:91:24:c2:
                    81:47:75:89:42:67:30:2e:b2:44:bf:f9:63:af:8f:
                    9f:30:b1:c1:bf:58:d2:76:93:11:9c:a6:a7:c2:8a:
                    fc:81:77:32:27:24:c1:d6:b3:10:d7:f4:0e:fd:93:
                    8d:d2:2b:36:16:b4:bc:e4:67:07:5f:72:de:82:20:
                    71:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:58:8E:09:57:72:45:7E:07:F5:7F:4C:9A:5A:21:1D:0F:A6:4F:76
            X509v3 Authority Key Identifier:
                keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:26:d6:8e:2f:62:c9:5b:3a:3a:a3:9e:8e:6a:30:4d:e5:b3:
         38:72:66:99:cf:10:9c:6c:02:66:0d:d3:b4:43:df:0b:89:77:
         6a:2c:1a:4d:b9:b0:d7:c5:49:8a:c8:ef:9a:67:05:56:c9:92:
         68:9a:19:9b:7f:4e:65:42:ec:0a:19:a0:e2:f6:59:ab:b3:60:
         8c:8b:23:2b:05:80:cb:96:a5:6a:cf:73:25:5c:64:4c:1f:06:
         ea:3b:0a:c2:07:63:f1:94:3e:45:37:04:bd:45:f9:b6:16:51:
         2b:55:65:43:c7:62:18:de:17:d0:31:b3:96:de:21:41:3d:ac:
         54:a2:bd:65:c3:15:b0:0c:02:3c:44:5a:95:80:5c:24:b2:91:
         eb:54:32:88:9e:24:66:f0:20:64:0c:eb:d6:c2:4e:12:c4:0c:
         22:36:48:17:08:ef:1e:9f:62:94:63:f3:d8:69:fe:d9:a3:a7:
         f4:25:44:cd:2b:02:99:a9:de:ef:7e:7e:ff:4d:d3:28:1c:fa:
         10:c4:39:59:60:0d:97:dc:f7:c0:29:11:4e:0f:b7:80:ea:d5:
         a4:9a:99:88:3c:75:39:38:cf:26:93:bd:ee:a7:e2:c9:35:6c:
         81:73:bb:3e:f3:da:e2:74:fa:ce:ec:1f:c8:42:83:6d:7f:f6:
         98:7a:ad:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:34:06 2026 by rpki-client