Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
File:                     JvFwsZuX7hfecyobaK4iuo5fVuQ.mft (raw, json)
Hash identifier:          3XRoNHHS36+iEAUvzAcgi3bwTYQf/lUJH9/yJArqT+g=
Subject key identifier:   6A:E2:D0:32:D7:7D:1A:C9:7C:CE:98:A9:BE:41:30:77:78:B5:DF:E0
Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
Certificate issuer:       /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Certificate serial:       019EC22472F6CC2CC8CB975BA82F6CE67A00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
Manifest number:          0C3B
Signing time:             Sat 13 Jun 2026 18:00:29 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:29 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:29 +0000
Files and hashes:         1: 4FrplW2P0skTJUa1sCtVMSIppcM.roa (hash: D9MVNJi9010IKib/p9TXKfT7aX0EYXNgCDs72hr1/ps=)
                          2: JvFwsZuX7hfecyobaK4iuo5fVuQ.crl (hash: p5NUYLENECsLWHFyMANNADDmoyQ5//RPNBq1AU1XaTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:72:f6:cc:2c:c8:cb:97:5b:a8:2f:6c:e6:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
        Validity
            Not Before: Jun 13 18:00:29 2026 GMT
            Not After : Jun 14 18:00:29 2026 GMT
        Subject: CN=6ae2d032d77d1ac97cce98a9be41307778b5dfe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:ef:ba:e2:f9:2f:fd:f2:81:8f:fb:7d:2f:
                    bd:de:e1:72:c5:c3:f0:b8:26:27:9a:d3:fd:72:1e:
                    43:9a:a9:52:fe:88:54:d6:41:a8:96:2d:55:44:b2:
                    a0:95:dc:c2:41:e6:dd:ed:9f:e7:65:96:e0:b2:b0:
                    28:1d:8a:47:ae:bf:c4:29:70:1a:0e:12:6a:a5:6f:
                    a7:52:28:c8:36:d1:d3:2c:ec:2a:0a:fc:a7:5e:52:
                    6a:61:dd:63:d6:fa:d5:18:e6:d3:11:37:24:23:97:
                    bc:12:02:a8:32:7b:1e:19:55:ff:2c:8c:59:0b:85:
                    d9:7a:ff:d0:3f:d4:13:e9:09:81:03:f1:43:02:b0:
                    a9:60:29:9b:ee:d1:af:2d:8e:f2:37:fe:ac:d2:df:
                    30:63:48:c7:95:78:9b:77:ca:81:61:95:6e:37:0a:
                    28:bd:f9:31:4b:b3:77:69:8b:cf:f2:c2:a3:11:20:
                    ac:ac:82:8d:34:d7:f6:0c:72:f6:a1:e8:0e:b3:27:
                    f1:7e:66:e5:90:03:e3:38:e4:a9:e2:f7:43:56:30:
                    7c:1e:e8:20:e4:ab:e3:a9:d9:d7:d7:94:a0:c4:b8:
                    95:90:ed:2b:68:9c:e9:5d:6a:68:ec:0d:d6:c7:5f:
                    e3:e3:48:c9:71:cf:0f:13:61:ca:cd:e0:29:9e:73:
                    4f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E2:D0:32:D7:7D:1A:C9:7C:CE:98:A9:BE:41:30:77:78:B5:DF:E0
            X509v3 Authority Key Identifier:
                keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:67:83:27:1f:84:8d:5a:3b:79:28:61:c2:43:b0:3a:6b:a5:
         5c:2f:7f:fd:9c:ad:20:6a:67:2c:54:4e:2c:33:5e:7e:79:cf:
         54:e9:7d:ae:f0:cf:34:c8:32:75:06:a2:1c:6f:46:5c:39:e2:
         f0:04:68:e5:f1:3e:84:0d:87:ca:58:5b:ba:95:d5:2a:90:c8:
         48:5e:d5:fc:26:09:5f:c6:9d:9f:a5:30:cb:42:50:e9:f5:61:
         df:72:43:e3:f3:7a:09:de:46:cb:3c:1b:c2:5d:aa:28:cb:54:
         cd:e7:5b:43:7d:05:39:1b:33:5c:47:ad:25:a7:5e:51:c4:16:
         66:ad:c6:57:da:2e:a3:ce:70:1f:f8:5d:09:39:c6:a3:be:29:
         96:42:41:ca:4b:a2:58:d9:cf:98:ce:47:e8:00:c6:4f:d4:2a:
         1e:34:fa:15:a6:eb:37:51:71:fd:29:4d:6a:7f:fd:a7:5f:07:
         fd:54:ca:71:f8:38:a9:b3:7c:86:f1:c9:42:87:53:ad:9d:a1:
         dc:43:3e:34:08:d8:53:42:e5:f7:be:a2:ad:f8:b3:f6:47:92:
         b5:b1:29:c1:f0:3a:88:b8:91:72:2e:28:53:b1:1b:18:fa:55:
         c8:07:c9:15:12:68:5e:19:92:51:bd:5e:bc:dc:bd:e4:fa:9d:
         41:5d:0f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:48 2026 by rpki-client