Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File:                     tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier:          xzT7LSYsDDBgB+h2sc2t2xPD0MWeUbFXZI018jN1DmI=
Subject key identifier:   C4:FF:08:ED:67:D2:F5:7B:BB:01:0B:49:7F:4B:A6:0D:78:AC:4B:55
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer:       /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial:       019EC2C9338C5F41C78387A17635AD947421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number:          0986
Signing time:             Sat 13 Jun 2026 21:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:26 +0000
Files and hashes:         1: A_-h6j62GakTf8sVYSZUPDVBMR8.roa (hash: csIAxW9bXtziqhqyhaEg7C2GF8tHOgSMTxW10V1Xvoc=)
                          2: Bl3sRdVXNfJpY6b4S8cUpd5mA1I.roa (hash: Tra0gJRg7Sdu8UJqi6AHrAI7bigGVXmLkWidwg3C4tQ=)
                          3: LZoD34sDnrN3y_73QTX2kyN9b6k.roa (hash: IoZnnALkgT6FHthQCMqgOrKOzFNDYA7UUiSgGhGeNdE=)
                          4: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: QF/wyak0FJ61wNb9UBxamJiqDQcudk18Gu1TcQB0S9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:33:8c:5f:41:c7:83:87:a1:76:35:ad:94:74:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
        Validity
            Not Before: Jun 13 21:00:26 2026 GMT
            Not After : Jun 14 21:00:26 2026 GMT
        Subject: CN=c4ff08ed67d2f57bbb010b497f4ba60d78ac4b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4c:4d:07:72:15:bf:e4:cf:13:0a:92:7e:ce:
                    e5:05:ef:bc:35:c2:19:78:86:61:48:e2:6b:7a:fa:
                    f9:7b:b2:59:74:f4:5d:ab:7f:fc:73:34:cd:06:86:
                    4b:df:50:4b:ae:df:e7:c3:85:be:5e:c8:68:27:c4:
                    e2:58:19:29:14:00:84:49:2f:7c:7d:01:ac:bf:6a:
                    ce:4b:be:cd:41:47:ff:15:c0:78:79:94:a1:4d:e2:
                    b1:19:38:1a:61:61:d5:c3:05:8f:7c:f0:64:22:72:
                    8a:a8:13:c6:23:ae:e9:2e:e6:2b:53:e9:77:c7:8f:
                    5a:7e:82:23:76:af:86:9c:f1:f1:eb:9c:6a:bb:7f:
                    5a:83:45:1c:84:23:70:7d:1c:7b:4e:6a:be:d7:ea:
                    93:e9:01:45:e6:a7:b5:de:34:17:87:29:e8:10:3a:
                    14:36:b1:7d:12:92:69:bb:2a:b1:41:9f:f0:fc:c9:
                    2f:8c:d7:86:3d:45:e8:d5:f4:ab:31:3e:16:f3:6a:
                    e8:ee:b8:d4:b6:b1:3e:54:a0:de:36:d8:8b:74:d5:
                    37:40:b0:8d:48:61:36:3e:7a:c7:59:05:0d:f7:cf:
                    4f:37:c0:44:12:d7:af:aa:6b:05:f0:bd:f8:25:36:
                    98:1d:0f:75:e4:73:c9:31:87:6d:5b:1b:81:af:a2:
                    7d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FF:08:ED:67:D2:F5:7B:BB:01:0B:49:7F:4B:A6:0D:78:AC:4B:55
            X509v3 Authority Key Identifier:
                keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d6:dc:1e:fb:97:2d:64:d0:b3:72:b8:be:96:c2:6d:20:00:
         5e:cc:55:db:2d:f6:bf:a9:59:61:f6:e4:11:61:ae:10:0d:c3:
         61:1e:4a:08:46:0b:27:b6:98:ed:ac:4d:b7:b0:12:8a:2d:a7:
         62:a1:de:50:6f:74:10:f6:fd:08:c8:73:4a:e5:c4:ad:5c:d6:
         12:64:bc:3b:72:a3:3f:45:a8:fb:97:8d:ab:d8:4e:e6:2a:a7:
         f4:94:37:36:98:14:c4:ac:18:d6:3a:0e:4c:25:e4:50:b0:75:
         d8:fd:b9:c9:02:22:3a:76:ff:a9:31:f9:2f:b9:8b:1f:ee:61:
         32:5a:72:5f:87:1c:77:17:0a:b9:1e:e1:a7:5f:fa:18:eb:c5:
         ce:c7:eb:0c:c2:43:1f:90:55:e2:03:48:36:35:2c:d7:68:3b:
         b4:9d:1e:24:86:e6:91:f2:b9:82:d5:c9:db:9b:6a:93:1c:d1:
         5d:e7:9c:fe:21:98:1d:d3:40:f8:8f:33:2c:2f:f2:5c:24:6a:
         d8:23:a1:85:e5:7f:32:7c:3a:a2:46:49:f8:8a:8b:c1:22:f2:
         ef:c5:07:cd:9a:9b:d4:e8:f4:7c:a7:7f:64:b5:ea:d6:b2:c3:
         be:43:7c:39:a4:25:5a:20:fc:18:46:77:64:a8:bd:46:c8:56:
         bb:81:8b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:17:18 2026 by rpki-client