Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
File:                     jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json)
Hash identifier:          lAiiUDma7fTH3aw7cRGHWgissK3cFYwJXJsRZU2z7xM=
Subject key identifier:   0B:76:48:25:9F:9C:47:16:CF:27:B3:B6:61:C1:F9:3B:1C:39:69:6E
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Certificate issuer:       /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial:       019EC2926651BEEF15A39FEAAA7D71155A2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
Manifest number:          1003
Signing time:             Sat 13 Jun 2026 20:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:34 +0000
Files and hashes:         1: izuIQwSNejBqnNpH3A_7x0Kxp-Y.roa (hash: wI9EPeDCKXCM+FRLEMa5vPoWLl/ecDeCm1gVreAFy1Y=)
                          2: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: SvrrEsb/ojZ3qQvEFdbwpCilIwI+diZ1QBXlHwlKowA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:66:51:be:ef:15:a3:9f:ea:aa:7d:71:15:5a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
        Validity
            Not Before: Jun 13 20:00:34 2026 GMT
            Not After : Jun 14 20:00:34 2026 GMT
        Subject: CN=0b7648259f9c4716cf27b3b661c1f93b1c39696e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:16:96:d0:69:51:6f:29:9a:b7:36:45:8e:2d:
                    20:2f:bd:aa:ea:95:68:5c:4b:96:f7:8b:48:91:eb:
                    3f:ed:72:f3:91:6c:fa:83:ba:15:c0:b8:b9:15:be:
                    98:4c:68:30:31:e1:5b:fb:dc:c6:fc:d3:90:81:53:
                    a7:a3:29:0e:ae:1d:95:1c:71:ed:8d:9b:aa:85:92:
                    37:31:75:d0:ee:f6:47:d1:0e:51:b6:a3:bd:8a:1e:
                    cd:3d:e5:c2:c1:a9:f5:f9:ba:91:52:ee:66:be:1f:
                    35:a9:e1:8e:bc:b9:53:51:44:7e:ef:f6:c8:b8:89:
                    e6:45:df:48:15:c5:cd:0f:1e:0a:24:f9:a6:b4:00:
                    39:4e:04:1d:0c:e1:dc:43:c1:2c:43:df:ec:72:7b:
                    ed:07:72:ea:cc:34:d3:1a:c3:d3:1c:49:35:95:7d:
                    ea:58:96:7d:16:7e:a2:78:c8:92:be:88:6e:34:83:
                    89:f4:d2:cc:55:0a:d9:8a:00:fe:64:7d:f4:f1:0c:
                    fb:bc:32:c8:be:8d:bc:83:d8:5c:7e:28:6f:3d:81:
                    c9:9b:04:e3:87:99:11:d3:6b:90:42:19:de:ea:aa:
                    e7:e0:ff:b0:0e:c4:c4:71:27:6d:ba:0a:ba:8e:12:
                    4a:6f:df:50:eb:5a:c1:90:e1:b0:9f:8f:de:43:1f:
                    7f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:76:48:25:9F:9C:47:16:CF:27:B3:B6:61:C1:F9:3B:1C:39:69:6E
            X509v3 Authority Key Identifier:
                keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:db:2f:db:17:88:01:dc:db:eb:3c:1f:81:a9:aa:26:90:f9:
         20:f7:f3:da:fb:8f:09:40:4d:8c:fd:4e:5c:40:b2:0f:35:64:
         97:04:fd:aa:ea:28:36:05:47:cd:bf:fe:20:7f:36:61:62:c0:
         c9:51:34:ae:e0:1d:13:a7:8f:d6:ed:23:a8:6f:60:83:32:b8:
         cd:73:83:70:db:f3:7a:50:bb:50:9f:f7:7a:78:7b:69:50:06:
         18:cc:87:1c:75:8d:08:30:46:5e:c7:9b:fc:40:93:2f:97:53:
         41:75:e6:ec:70:cd:e8:af:14:55:3e:94:7a:e2:69:ee:8b:61:
         d9:9a:6d:2c:40:19:a0:97:14:e4:9e:db:15:9a:23:66:d4:6d:
         b3:53:26:14:19:23:37:57:9b:a3:fa:c8:90:2e:1a:4e:4c:25:
         8e:81:cd:ac:f0:ff:23:6e:63:0a:b1:f9:bc:2a:50:4d:10:b8:
         c2:ef:bb:8e:a9:b0:57:b1:0f:ee:38:80:94:40:5f:1f:73:a8:
         62:12:1d:13:8b:4d:92:b2:1f:82:d3:24:dd:a4:16:98:af:11:
         4c:c5:19:f0:0a:95:0c:cc:ed:a6:36:d0:4c:08:ee:e3:6d:a2:
         61:0f:f6:5d:c8:d2:b4:a0:4b:47:5f:c1:2f:67:36:a4:c7:5b:
         16:34:b7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:45:47 2026 by rpki-client