Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File:                     jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier:          G3ubhvhGyMPNJq1uaaKWtxTljChhacjSuHFgHtSKUw0=
Subject key identifier:   DD:03:C3:64:78:AB:C7:A2:25:86:09:BC:F8:9F:23:1F:C5:B0:09:D1
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer:       /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial:       019EC1495C61934B478A02A2256B500B8A92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number:          0E8B
Signing time:             Sat 13 Jun 2026 14:01:10 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:10 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:10 +0000
Files and hashes:         1: L_9BG5xd7E-WvM8wNKg3JhMyHn0.roa (hash: fYhGLFm7hYXm5Z24lpdXxQv/bqEknOrei0vZwgl2Blk=)
                          2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: C1JL0vDseQi4uuaP5Fc9hooFkY8lb9Nflei33eqNWa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:5c:61:93:4b:47:8a:02:a2:25:6b:50:0b:8a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
        Validity
            Not Before: Jun 13 14:01:10 2026 GMT
            Not After : Jun 14 14:01:10 2026 GMT
        Subject: CN=dd03c36478abc7a2258609bcf89f231fc5b009d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:d4:66:c8:45:50:5e:ac:ef:b9:d0:f0:ef:
                    76:86:fc:4f:bb:7e:81:c3:b5:50:a0:62:6e:64:b5:
                    35:2e:af:ee:d7:80:ef:5e:eb:9b:c3:1f:30:ce:ce:
                    62:2c:a7:ce:96:68:98:87:68:1c:2c:7b:79:a2:e5:
                    6d:06:96:83:71:fa:95:c6:d9:82:fc:a3:42:dc:c6:
                    ff:24:5a:c0:b8:9b:f8:64:05:1e:34:ee:18:96:8a:
                    0b:32:be:b7:86:89:0b:c9:fb:79:6c:b9:8e:b1:92:
                    ec:61:31:66:98:bf:0b:4b:aa:bc:e4:78:db:49:f7:
                    0d:47:b9:7e:01:47:d6:45:f3:8b:b0:74:61:c0:ce:
                    68:c6:26:d1:e1:1d:c3:3d:83:19:ea:95:52:f2:e1:
                    24:2e:79:72:76:4c:78:d7:05:2a:64:c8:ba:50:a7:
                    f8:09:b0:3c:dd:67:42:d7:1c:78:4a:42:a9:7b:b0:
                    e0:d3:a6:39:af:43:51:a5:fc:48:42:89:60:22:f5:
                    be:20:ff:ab:33:ef:c9:43:5d:af:6e:45:c2:5c:e3:
                    3d:38:86:1c:65:b7:e0:52:c5:52:ec:30:48:ae:f2:
                    a4:da:91:2a:33:58:8a:77:fa:43:cf:6d:b6:2e:f1:
                    fd:8f:5e:e1:df:5d:2a:9c:ef:14:43:8b:4e:eb:f0:
                    57:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:03:C3:64:78:AB:C7:A2:25:86:09:BC:F8:9F:23:1F:C5:B0:09:D1
            X509v3 Authority Key Identifier:
                keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:2b:2f:3b:0a:b8:4f:57:8f:12:60:be:6a:96:68:10:54:b7:
         c7:8e:f5:22:c1:da:82:0b:5a:2a:13:0d:35:ce:a3:09:1f:41:
         39:0d:cc:cc:48:91:f8:51:ba:a2:37:a5:c4:8c:b6:3b:a8:6f:
         83:46:01:63:b7:0f:a5:fe:a5:4e:a1:91:2b:5d:51:c9:f2:de:
         40:54:e4:2f:7e:25:39:10:aa:71:9f:23:e6:e3:77:7d:ea:0c:
         a6:90:40:57:bb:85:07:44:a9:fa:5f:1b:45:07:26:3c:1c:1e:
         0f:83:b1:56:55:14:c0:f3:9f:0a:1c:d0:8e:a2:88:1e:5f:73:
         6f:b9:c7:a7:c8:76:b7:c4:cb:54:4d:0c:18:cd:f1:86:a2:a6:
         38:f7:d4:04:d8:b7:5d:cc:b2:64:68:02:df:3f:d1:f3:8a:2e:
         82:95:16:2b:88:6c:24:59:bb:59:8f:1f:7f:94:36:60:91:fc:
         44:c2:49:19:16:03:6b:4e:b8:1e:67:f7:c2:b4:6e:e1:05:7e:
         68:6a:cc:8c:b0:7f:86:2a:9f:0e:39:6a:0c:a6:70:97:73:a2:
         8f:c6:c6:40:09:65:57:4f:d9:97:50:7c:24:ea:e5:a1:03:1a:
         24:ed:ec:66:cf:21:ae:b7:0b:f7:b8:d2:f4:56:a3:d4:3d:13:
         ce:8c:09:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:53:35 2026 by rpki-client