Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File:                     J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier:          4vQiMfVEqVFzwyQXTiXK19d3Gi+ZQzwK/jcAFcTSJao=
Subject key identifier:   B9:A6:4F:4D:E4:B9:80:8F:49:0E:B7:BF:69:DC:B7:BA:8F:73:B5:54
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer:       /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial:       019EBF5ACF7E7FA10544856CC2264DDE08B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number:          17BA
Signing time:             Sat 13 Jun 2026 05:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:00 +0000
Files and hashes:         1: 8pRpGLC7ufdVgfYDDUF6Zet2ESs.roa (hash: N6b81cttyVRNjS1aPTuek9kLwNALHCKPqaI95N5VpXM=)
                          2: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: OTrOq7itCQKQxQVJ0N6+dLh8FdD5EFLLzYOOzZaI1q4=)
                          3: iLJXM2riD2xLyWPgVHhFPJznv3A.roa (hash: htQVMbTQl+9gmW8aaJPtyq2ErZGw3e/ACgLnMofyCY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:cf:7e:7f:a1:05:44:85:6c:c2:26:4d:de:08:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
        Validity
            Not Before: Jun 13 05:01:00 2026 GMT
            Not After : Jun 14 05:01:00 2026 GMT
        Subject: CN=b9a64f4de4b9808f490eb7bf69dcb7ba8f73b554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ae:d2:11:f2:af:de:7f:b0:2e:bc:7e:7f:af:
                    79:6d:7b:4a:94:ec:46:50:b5:d1:87:81:b0:93:c0:
                    39:fb:14:9a:ca:df:fc:e7:cc:53:a4:99:eb:68:a8:
                    f2:d1:b2:68:91:80:c5:60:d6:e8:96:66:40:ad:5e:
                    ab:8a:f6:6e:f1:90:2d:c9:41:f5:0e:f9:c1:9c:0c:
                    82:ae:5e:06:46:66:68:45:79:1a:b5:ed:b3:ba:cd:
                    73:28:43:12:8e:0d:6f:af:72:a3:ad:a9:07:84:23:
                    51:3f:1b:6a:0b:f7:c5:dd:b4:0b:f4:4a:41:49:f0:
                    60:f8:16:77:97:00:2e:bc:21:d4:94:83:2c:f1:27:
                    9e:09:a7:02:cf:53:00:96:00:50:ee:aa:fe:40:d6:
                    94:fb:44:0a:78:06:95:95:63:37:5c:02:4a:ef:0a:
                    56:4e:aa:f6:f7:6c:18:09:9d:14:9e:e4:2c:6d:e5:
                    4b:ed:d4:2f:c2:a5:6c:8c:44:83:24:e1:98:d2:5a:
                    a9:70:0f:5f:26:39:f7:0e:78:e6:26:87:b4:e4:bf:
                    cc:41:22:a9:64:5b:bb:86:04:7d:d5:e0:a6:d8:1d:
                    cf:ea:f5:4c:22:e6:30:47:50:c1:48:d2:64:0b:f5:
                    62:48:8a:c1:a3:da:b8:52:e5:9d:94:24:c6:a6:c3:
                    b0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A6:4F:4D:E4:B9:80:8F:49:0E:B7:BF:69:DC:B7:BA:8F:73:B5:54
            X509v3 Authority Key Identifier:
                keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f8:c7:e1:26:2a:27:f3:91:12:83:71:74:33:eb:b4:e8:28:
         96:50:95:e6:05:e0:8a:6d:d3:ef:09:f5:de:be:a4:28:93:a8:
         84:a9:e1:17:a5:25:d4:16:4f:4e:45:ba:23:09:62:9a:48:20:
         01:84:5a:06:f0:c7:a0:d6:11:19:ab:ea:3a:74:d4:15:f6:9b:
         ae:1f:e4:bd:87:68:7e:14:5e:ae:0c:89:e4:37:27:c3:e9:33:
         cb:a4:c0:a1:a8:04:91:88:49:e8:ec:ee:11:2b:7a:6c:df:3c:
         b1:c8:c2:c6:5c:f0:4d:cc:e6:e8:be:6b:94:4c:2b:12:bf:f6:
         5c:ef:9e:9b:05:c3:44:12:2b:00:26:38:ad:a9:b8:45:ce:ed:
         f3:f9:29:a2:74:d5:72:a7:14:11:97:13:81:1b:0f:0d:ec:a1:
         fd:1e:fa:24:80:f9:0e:02:ff:54:f5:e1:67:7b:b0:1c:4d:1d:
         3a:e3:91:39:cb:6b:c2:54:4e:d0:63:ed:53:69:3b:fc:f8:48:
         46:c2:9c:f8:b9:64:e5:a7:dc:d4:ef:da:57:3f:e2:83:55:29:
         b5:63:22:d6:25:38:8f:69:c6:09:fc:90:f7:4d:9d:a7:71:8d:
         78:ab:fe:be:47:66:c0:09:1d:2c:54:01:12:7b:1c:b2:1f:01:
         8c:63:e4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:17:25 2026 by rpki-client