Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
File:                     ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft (raw, json)
Hash identifier:          IWKKaHOTspZ0XWG76Z0P4KsiGqhWPHmaB7qubOjXwnE=
Subject key identifier:   EF:60:EF:FA:CF:BB:61:A2:DC:B5:85:C5:7E:83:FD:9B:4E:95:E0:80
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Certificate issuer:       /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial:       019EC0A3B4C1D40A64FB3CEB23A5E1B6F6AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
Manifest number:          196A
Signing time:             Sat 13 Jun 2026 11:00:14 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:14 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:14 +0000
Files and hashes:         1: 6osyBEyP0HcSM0NQyBHIvRn1Fhk.roa (hash: hglwRwFDDllYX9jYTjK+3ZWKDlBPRVFz/hfeMX7vQ4o=)
                          2: JauiIPMakXs-XxyLaWxO0rjIw8E.roa (hash: iXxbDtozEsteNQ9atnfu+OC8ptchPtG62ieHNq3ckVI=)
                          3: Ote8Xple36NOljGpswnBnv1BVHg.roa (hash: 7PcKnm0HqFWloTnBPRiK0Jc5QCuqif0gaeoULdBF7ck=)
                          4: cKqvG9BsZG6su7we84q3E8DeV-0.roa (hash: yebnJKVbgSkS4D7E+ORpv+scwNkFgxpLo5cTVCzh2rI=)
                          5: jYL_MHWzxB2OX15Vxs1hmwy4NzY.roa (hash: VfRhELdR7icqL4aOULnTdK+xLakSZDUjVfSg/1rTQ3c=)
                          6: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl (hash: FbrgJqU9/Ek8G8F7FBUsJVk6YQz8cBaKcjYq1LlyvVY=)
                          7: vsAq2ox79fGO3Ta6QC_1orZGKIY.roa (hash: 11wmgbpdweQHKnUalimrWFHED8Za8q31JapGPV4qcP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:b4:c1:d4:0a:64:fb:3c:eb:23:a5:e1:b6:f6:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
        Validity
            Not Before: Jun 13 11:00:14 2026 GMT
            Not After : Jun 14 11:00:14 2026 GMT
        Subject: CN=ef60effacfbb61a2dcb585c57e83fd9b4e95e080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d3:7a:f2:40:be:87:4a:c7:bb:fd:cd:dc:88:
                    ac:75:17:98:74:4e:e0:06:27:fc:76:f9:3e:a9:83:
                    1e:a0:a5:53:82:96:fa:49:a1:c8:70:5a:f7:16:f8:
                    f7:99:7d:11:12:c2:0a:73:ff:6c:30:ea:b1:d8:01:
                    48:76:54:06:d9:57:11:23:f1:95:3b:d1:24:0b:42:
                    93:f8:0f:a8:78:9d:10:7c:e3:f8:54:7c:f2:84:cf:
                    b4:c0:03:69:af:37:bf:0c:f6:34:22:73:d1:35:be:
                    56:2d:eb:92:0e:b4:8d:c2:40:30:4a:f6:66:8d:60:
                    0a:a4:38:84:10:4b:be:66:a3:49:b0:ce:4c:8f:06:
                    6f:05:97:26:32:49:8c:d5:4f:22:f1:24:68:8f:ef:
                    c7:02:a4:ce:52:20:a8:2a:4c:45:f2:02:1d:d1:e1:
                    a0:00:f7:82:7f:38:dc:e3:8f:01:83:58:74:84:0b:
                    96:23:d2:78:90:7e:6f:6f:3f:31:ea:5c:26:df:35:
                    a5:b5:03:8e:b3:a9:74:31:cb:55:c3:d3:1c:a6:74:
                    e8:99:91:26:dc:2a:fa:37:2e:36:50:48:27:43:29:
                    45:91:f0:c8:45:f5:b2:69:74:57:bd:75:e7:db:df:
                    f2:84:c4:84:7c:86:53:87:e7:c2:ba:86:de:a8:e3:
                    47:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:60:EF:FA:CF:BB:61:A2:DC:B5:85:C5:7E:83:FD:9B:4E:95:E0:80
            X509v3 Authority Key Identifier:
                keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a7:6b:99:4f:52:0a:32:75:e5:75:e7:d7:7b:a8:32:5b:cb:
         c2:5c:c8:a4:b2:28:56:c4:62:d1:d9:c0:6a:e6:10:42:c3:82:
         14:c3:99:1c:94:4c:93:aa:68:5f:ff:0c:e3:1c:71:92:fe:c0:
         b7:dd:ac:00:53:2f:fa:c8:d7:30:ba:70:19:5b:53:62:94:fa:
         a1:6c:bf:29:04:99:c7:2f:a4:e6:6f:87:3c:0f:10:9d:47:b0:
         54:98:58:ad:14:a7:70:60:08:5a:56:d0:13:81:fb:88:98:ff:
         94:f9:33:06:87:f1:7c:fd:39:ce:f3:1a:b5:0e:0b:e4:9d:8d:
         b0:72:5a:ba:c9:88:5e:20:9a:04:85:12:52:2b:8e:ed:39:e4:
         2a:84:25:e7:12:96:7a:28:f3:92:29:c6:71:09:c7:50:a4:6a:
         5f:43:28:44:73:74:f7:45:de:8a:a8:9f:87:d6:bb:a2:34:49:
         b1:13:9a:d5:0d:54:e2:dd:27:bf:01:79:51:fa:9e:0e:9f:36:
         bd:ec:b1:d3:a7:c7:25:d3:8e:c8:f1:56:1c:45:79:65:9b:5a:
         85:65:31:fe:0f:78:9b:d3:2e:3f:12:81:ed:af:2a:f9:5c:ad:
         bf:cf:78:0c:2c:78:dc:bf:65:8a:50:60:a7:39:d0:e5:74:d3:
         52:d8:d4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:08:04 2026 by rpki-client