Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
File:                     _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json)
Hash identifier:          8YohM9zO2bEMvYMTfe3JkeTAPjg6//EbxzKySn4t8FY=
Subject key identifier:   8E:26:F0:11:66:4E:9A:61:69:DE:58:55:DB:01:5C:0A:F5:59:0B:5F
Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
Certificate issuer:       /CN=fe340911274377a89ca1f9c15f180da986d744b7
Certificate serial:       019EC036150D7B320FD6C75966993E970442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
Manifest number:          05ED
Signing time:             Sat 13 Jun 2026 09:00:30 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:30 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:30 +0000
Files and hashes:         1: 9SBS7gJbmM_H_U69hDRLz5tqENk.roa (hash: CohDToPDWHyGMje9oQIew781Ud8ugON8LORc7w4Ntug=)
                          2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: o2WBqJ0dVyiD057kcdECBKPoUdstr4nyZQp5DJ0RksY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:15:0d:7b:32:0f:d6:c7:59:66:99:3e:97:04:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7
        Validity
            Not Before: Jun 13 09:00:30 2026 GMT
            Not After : Jun 14 09:00:30 2026 GMT
        Subject: CN=8e26f011664e9a6169de5855db015c0af5590b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:33:ca:e9:1e:0f:38:8c:dc:92:d2:dc:92:
                    27:75:c1:f0:8e:aa:f1:33:41:14:9c:c5:d1:c0:77:
                    63:86:d5:ab:4d:e5:68:2b:b3:00:3d:6d:ab:c4:51:
                    e5:22:b5:e0:ed:23:82:53:e0:d0:62:6d:a7:b2:84:
                    b5:b5:7d:22:85:a9:2d:0e:ca:5b:63:1a:b6:76:ee:
                    20:99:47:c9:8b:8b:fc:ec:a1:ff:e2:da:78:5e:ed:
                    c3:b9:3e:02:bc:83:2d:83:b7:4d:ac:5d:b5:ac:22:
                    b5:37:cb:69:4e:8b:9f:29:96:cc:14:13:4a:c4:78:
                    53:13:21:4c:07:36:04:4b:32:96:22:ab:e8:b8:11:
                    3c:84:82:cd:6d:9a:ac:f6:be:85:54:93:73:94:5e:
                    b4:a9:f9:2a:81:2e:4e:f0:f0:ee:4a:1d:00:40:16:
                    97:ac:59:ec:2d:3c:e0:26:95:fe:6d:73:e7:b5:00:
                    4e:03:8b:3d:12:a5:09:b6:37:5d:8c:7a:05:26:61:
                    e4:0e:59:56:a0:09:05:14:14:a4:c7:60:8e:9b:9e:
                    87:b1:8d:b1:d5:84:db:28:8b:91:f9:3d:1b:60:46:
                    33:cd:e2:42:05:00:d1:27:c8:97:a7:f3:0b:71:6a:
                    0e:c1:9c:a8:bb:ec:3c:6c:58:e5:10:d8:99:82:d0:
                    6f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:26:F0:11:66:4E:9A:61:69:DE:58:55:DB:01:5C:0A:F5:59:0B:5F
            X509v3 Authority Key Identifier:
                keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:58:6c:39:b1:94:a0:78:f2:ea:d0:ca:4f:39:29:e3:22:c9:
         5f:4c:45:80:83:54:12:b1:67:f0:84:11:21:c5:28:9d:bc:fa:
         2c:e1:ef:7b:f1:de:f0:f8:37:57:80:4d:a9:ce:31:0f:9d:f6:
         82:b3:05:08:1c:7b:3f:5a:a6:23:96:78:5f:1f:15:67:8c:bd:
         da:da:12:e1:bf:04:ef:b6:92:14:b4:84:66:da:18:c8:38:c2:
         15:6a:78:81:66:3b:51:c5:0b:c5:b8:59:ee:f3:80:37:ea:ff:
         18:4b:70:ea:bf:42:43:07:73:f4:f1:e9:e6:1b:a3:cd:03:60:
         ee:3b:7b:a6:4b:a1:a7:e1:b5:f0:28:a9:dc:ab:e3:f7:94:08:
         bc:43:da:1a:f7:b1:ec:94:92:c6:39:5a:51:81:8e:98:6b:5a:
         cb:5c:30:06:78:f5:19:5d:be:0b:30:99:86:47:67:b6:24:c2:
         78:af:04:3a:16:ca:e5:e8:73:9a:62:4a:61:23:7d:88:77:1b:
         a4:5a:3d:18:7d:d8:64:14:55:6b:d9:c0:76:63:b9:94:af:63:
         39:e2:04:e0:68:5a:13:9e:2d:95:10:50:30:fb:b8:92:06:0a:
         1d:7b:6b:7b:98:b6:b8:cd:e2:0e:68:bb:48:4e:8c:7b:78:f7:
         a7:4b:eb:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ANhUNezIP1sdZZpk+lwRCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMzQwOTExMjc0Mzc3YTg5Y2ExZjljMTVmMTgwZGE5ODZk
NzQ0YjcwHhcNMjYwNjEzMDkwMDMwWhcNMjYwNjE0MDkwMDMwWjAzMTEwLwYDVQQD
Eyg4ZTI2ZjAxMTY2NGU5YTYxNjlkZTU4NTVkYjAxNWMwYWY1NTkwYjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+kzyukeDziM3JLS3JIndcHwjqrx
M0EUnMXRwHdjhtWrTeVoK7MAPW2rxFHlIrXg7SOCU+DQYm2nsoS1tX0ihaktDspb
Yxq2du4gmUfJi4v87KH/4tp4Xu3DuT4CvIMtg7dNrF21rCK1N8tpToufKZbMFBNK
xHhTEyFMBzYESzKWIqvouBE8hILNbZqs9r6FVJNzlF60qfkqgS5O8PDuSh0AQBaX
rFnsLTzgJpX+bXPntQBOA4s9EqUJtjddjHoFJmHkDllWoAkFFBSkx2COm56HsY2x
1YTbKIuR+T0bYEYzzeJCBQDRJ8iXp/MLcWoOwZyou+w8bFjlENiZgtBvMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4m8BFmTpphad5YVdsBXAr1WQtfMB8GA1UdIwQY
MBaAFP40CREnQ3eonKH5wV8YDamG10S3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85ZGFmMmYtNDZkMi00ZDA1LTkyNmIt
YThiZjIxNGVkMTY2LzEvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85ZGFmMmYtNDZkMi00ZDA1LTkyNmItYThiZjIxNGVkMTY2
LzEvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVhsObGU
oHjy6tDKTzkp4yLJX0xFgINUErFn8IQRIcUonbz6LOHve/He8Pg3V4BNqc4xD532
grMFCBx7P1qmI5Z4Xx8VZ4y92toS4b8E77aSFLSEZtoYyDjCFWp4gWY7UcULxbhZ
7vOAN+r/GEtw6r9CQwdz9PHp5hujzQNg7jt7pkuhp+G18Cip3Kvj95QIvEPaGvex
7JSSxjlaUYGOmGtay1wwBnj1GV2+CzCZhkdntiTCeK8EOhbK5ehzmmJKYSN9iHcb
pFo9GH3YZBRVa9nAdmO5lK9jOeIE4GhaE54tlRBQMPu4kgYKHXtre5i2uM3iDmi7
SE6Me3j3p0vrBA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:52:57 2026 by rpki-client