Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File:                     jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier:          YMoDRuCvy4T8K9bLBuU9+TcogwU5L8asumD2RebN2i0=
Subject key identifier:   06:75:63:C2:EC:72:DC:B8:EF:AB:0E:1E:AF:27:6A:9A:04:CA:A7:55
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer:       /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial:       019EBFFF0EDDAD303FCF78DBDA491F544A83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number:          1985
Signing time:             Sat 13 Jun 2026 08:00:24 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:24 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:24 +0000
Files and hashes:         1: 5RrePjfBfgFsb1dfhghTvm6VuXQ.roa (hash: kBSyv/KZQ0qJXn8NAa0tIDmtlcQIduDFV8hiLoM2Mcw=)
                          2: 9XXmMNy-VHJ0PLsbfxTeybE0OHk.roa (hash: tv89A0XeQybFhGlMxmSOiFsbHBh2Q6fNjP2cbql77Wk=)
                          3: EFOJ5hBQeND6qpOwej-hMBPDrb4.roa (hash: 64pmfHtYGatuKBycpEHQu6TCsuyqMwyKSXfipltHlOU=)
                          4: HMYMrzVLN168eCAt_VV9QEMc1vE.roa (hash: WNkIhTv4maTJmnFA0xAIC09aoeLQEEiiGXxq3HqPXJ4=)
                          5: WUu3HDK7_b9UY0uEWE1eCFmRxi8.roa (hash: vFNR8Uj+MyPWrDQ7TG/uWi1P+9M7J9xGwepHob8miIw=)
                          6: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: t4xgWELvMbYoH1k6krz3utiHJcbMUg4HPFVc27bMxUU=)
                          7: nJ7N_QAqwTZAZdT0YkSUpJyKqPU.roa (hash: bO16KmSqrJMMMxqy56go6I9tZ7emzSjvu3bgctCivCY=)
                          8: qpb9tX8sfLyt6D276zZ0qYuN9GQ.roa (hash: bRF4+8TUZLsEoI3KAZWa9IvCW2TSQ5hlcXoGFeSa3Vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:0e:dd:ad:30:3f:cf:78:db:da:49:1f:54:4a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
        Validity
            Not Before: Jun 13 08:00:24 2026 GMT
            Not After : Jun 14 08:00:24 2026 GMT
        Subject: CN=067563c2ec72dcb8efab0e1eaf276a9a04caa755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:95:88:1a:25:2c:6b:37:ad:01:b4:06:37:
                    81:b8:12:ea:81:0b:88:6f:82:24:eb:a9:6a:34:07:
                    23:fe:68:26:6d:e7:b0:59:14:5e:b3:46:bb:57:83:
                    bc:f0:c1:23:aa:0b:ba:03:6b:ef:31:ab:9d:e8:ea:
                    37:15:a7:e0:ab:d1:2d:2a:12:7f:8d:b9:8c:1b:0f:
                    14:92:db:5e:41:a2:66:e7:0e:78:cd:b9:ae:14:c3:
                    33:f6:7f:d4:4e:a6:e5:e2:71:ad:7b:3e:36:99:79:
                    f1:df:89:e1:fb:15:78:a6:9c:98:25:92:b7:01:52:
                    b2:f4:40:6f:8c:4f:68:12:5e:84:04:18:72:a6:65:
                    e0:e5:f6:5f:38:4c:89:aa:88:db:d8:87:af:24:77:
                    80:60:43:68:76:13:69:e3:0d:51:83:94:3a:af:a5:
                    dd:a0:27:ce:65:81:06:f8:98:3e:32:f5:a7:76:e8:
                    d3:db:b6:81:b2:21:f9:b0:0f:a2:0d:99:f0:29:0e:
                    fa:38:e4:be:16:e7:64:18:34:84:59:3f:d5:9a:d4:
                    52:32:f7:4d:d7:9b:54:99:a0:1c:88:a1:93:f5:70:
                    4f:96:6c:25:10:a3:7a:db:24:c8:e7:68:df:39:59:
                    87:f2:eb:e4:3d:cf:d8:be:a8:d2:5f:99:cb:16:5a:
                    77:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:75:63:C2:EC:72:DC:B8:EF:AB:0E:1E:AF:27:6A:9A:04:CA:A7:55
            X509v3 Authority Key Identifier:
                keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:93:d2:b4:b2:30:65:21:28:5e:4c:a3:fa:1e:b3:98:97:46:
         0f:5c:7a:49:ee:69:dc:93:34:ad:2e:0b:36:a3:77:ea:fb:ec:
         7d:35:80:e6:1d:12:b9:04:84:54:23:5f:2d:d4:21:69:43:b4:
         cc:9b:36:4a:05:34:9a:0c:44:e4:d0:c3:2d:89:73:2e:02:e4:
         09:d5:d4:ee:5c:45:6e:76:ce:0f:59:79:ed:66:5a:62:15:12:
         13:57:ae:9e:c6:5c:55:7b:30:03:bb:d4:d5:f6:fa:55:8a:3f:
         51:fd:58:d8:0d:01:9b:10:d2:6b:da:60:d0:bb:4a:26:04:2a:
         5c:7c:85:fa:1b:d7:9d:3a:33:aa:39:0b:34:c5:af:3c:27:2e:
         16:29:06:0b:be:cc:11:61:d6:ab:e6:b5:fe:ea:59:76:4d:cb:
         31:52:25:e4:bc:4c:81:32:d4:10:82:66:cc:7f:54:75:32:f3:
         d0:4e:b0:bb:d5:1d:0e:59:f2:e1:86:07:d4:7b:79:63:18:f9:
         aa:e7:a2:93:d1:10:9a:a9:82:fe:ff:22:b9:30:31:c4:91:d5:
         77:de:4a:81:fe:50:b3:74:4f:67:25:d0:63:74:1e:f5:5f:07:
         54:84:7c:0f:72:44:aa:12:5c:74:f7:20:a9:c9:7b:dc:7b:0c:
         63:be:6e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:10:02 2026 by rpki-client