Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
File:                     _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json)
Hash identifier:          vUFJRBOTA1iYn3hgz7IRZHSiF53x4hAjFjPaJ14PzzU=
Subject key identifier:   5E:DC:5F:DF:D6:9F:0C:D7:48:4A:D6:3F:7A:47:4F:DC:59:77:85:FD
Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
Certificate issuer:       /CN=fe340911274377a89ca1f9c15f180da986d744b7
Certificate serial:       019ED386079999661C12D8EB4A9C7E208AF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
Manifest number:          05F7
Signing time:             Wed 17 Jun 2026 03:00:36 +0000
Manifest this update:     Wed 17 Jun 2026 03:00:36 +0000
Manifest next update:     Thu 18 Jun 2026 03:00:36 +0000
Files and hashes:         1: 9SBS7gJbmM_H_U69hDRLz5tqENk.roa (hash: CohDToPDWHyGMje9oQIew781Ud8ugON8LORc7w4Ntug=)
                          2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: dSmRqVmYE7nUK+q661k3cvb7JYG+Fq+ppvL5Mgi/fak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:86:07:99:99:66:1c:12:d8:eb:4a:9c:7e:20:8a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7
        Validity
            Not Before: Jun 17 03:00:36 2026 GMT
            Not After : Jun 18 03:00:36 2026 GMT
        Subject: CN=5edc5fdfd69f0cd7484ad63f7a474fdc597785fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b9:63:c0:2c:6a:cb:84:7f:c5:0e:03:6c:c3:
                    d0:e6:ec:77:3c:15:7c:6d:c1:0d:6d:c4:58:4b:46:
                    04:e0:77:ca:63:c1:de:2c:ae:ef:e6:25:07:40:52:
                    1a:14:a5:9a:a7:f0:7f:52:e5:b1:12:6e:41:ec:01:
                    61:10:0e:42:64:7f:67:23:d7:94:84:c9:07:bf:60:
                    fe:89:30:ca:dc:84:3d:b6:66:46:b0:cb:c5:80:a9:
                    7a:d0:88:0c:54:41:93:22:25:99:1e:5a:fe:7e:92:
                    92:de:26:f2:be:73:77:94:20:2e:8d:fc:5c:1f:5d:
                    98:e1:9a:0c:ca:90:f9:23:f2:ec:8f:27:8c:be:0b:
                    3e:e8:53:0b:dc:9a:b6:5e:3f:4b:ba:6c:5d:54:53:
                    0f:a1:8b:01:6d:f2:8c:e5:c6:2f:e6:4d:6d:90:1c:
                    96:51:b9:07:9f:99:15:1b:dc:6a:fa:55:85:99:1d:
                    1e:96:06:26:5f:f6:00:18:8f:93:c8:0c:24:b2:b6:
                    a4:e3:0f:e9:a7:6d:79:f3:ef:59:ee:2d:b1:78:24:
                    22:0a:fb:4e:98:26:03:54:41:22:a0:0d:bf:13:7b:
                    2c:c0:67:89:50:af:fd:97:14:a4:28:74:05:6b:7e:
                    23:ea:06:a3:d3:69:99:78:c2:23:28:f5:b0:68:e1:
                    c4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DC:5F:DF:D6:9F:0C:D7:48:4A:D6:3F:7A:47:4F:DC:59:77:85:FD
            X509v3 Authority Key Identifier:
                keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:01:4b:fa:a6:d9:2f:46:62:2e:92:60:72:a4:01:a7:e7:63:
         19:81:e6:78:d2:c0:37:b0:93:76:0f:f3:40:73:f7:5d:2e:50:
         60:c8:43:cc:ed:46:bf:a4:f4:d6:b9:9f:67:bb:43:7b:60:cf:
         ed:96:82:bb:83:52:ed:b8:93:40:6f:92:88:d6:10:a8:1a:38:
         a0:75:86:ea:86:2b:a6:d8:42:0a:4b:79:97:55:bf:fb:50:fc:
         16:9a:0c:de:ac:ca:d6:62:49:fc:0a:4d:c4:2c:e0:5e:e7:98:
         22:3e:c4:b4:c6:5a:e6:a4:f6:26:01:4f:4a:36:cc:37:84:b4:
         4c:28:c8:bc:f5:82:43:92:bd:75:7f:c8:37:51:85:7b:ec:0a:
         a7:2a:72:07:46:d8:73:04:9d:8c:3a:5f:17:92:c7:f4:2a:c0:
         f8:ca:1c:d0:25:a7:8e:1d:6a:6d:be:8e:2a:3e:51:8c:ee:7d:
         90:0e:1f:09:30:39:93:0a:c1:87:be:78:8e:77:01:81:23:ad:
         a3:7d:18:1f:c8:bd:12:90:db:0d:d8:96:ab:c6:d1:13:21:ba:
         f5:78:60:e4:e7:73:70:4e:58:bf:e2:4c:28:d2:3f:72:a1:e5:
         63:5c:12:90:2d:61:14:00:40:a5:4b:00:13:65:96:ab:16:9e:
         c4:34:7e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:19:39 2026 by rpki-client