Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
File:                     jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json)
Hash identifier:          VAIJt9IMe3KyCrqojAcRkBEnM8Ebi0joL4kFU5wXVek=
Subject key identifier:   7D:98:9C:EA:C9:9F:34:B1:9F:0E:D3:9F:EC:2F:72:3E:92:AE:BC:AB
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Certificate issuer:       /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial:       019EBE801B2B7CDDA3818BC3F240A23166D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
Manifest number:          169C
Signing time:             Sat 13 Jun 2026 01:02:06 +0000
Manifest this update:     Sat 13 Jun 2026 01:02:06 +0000
Manifest next update:     Sun 14 Jun 2026 01:02:06 +0000
Files and hashes:         1: 17ZzXQIgaPFFjeqMhwt3zOxvx1s.roa (hash: 86lU48qvlXKv6saptuHXqJOZusprYtOpfN/ZmUTRc2c=)
                          2: EozSJCiP9Cygcyge5GyOuN1Brck.roa (hash: FC5zsNMnxd0ekJD3hWuMDKKtr4NZV7IGmew1wZKk3hk=)
                          3: SJ04ay6mMnNqXRQ46nJIK4oxSlw.asa (hash: 2SJn970nGzja/+MwrBnP0LJ7l6DR9foN++GvgJnVlAw=)
                          4: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: 7/P3Pj27Pt5t6SoCwEZL/MBrwBa7gZKkK2G8DztF8bY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:80:1b:2b:7c:dd:a3:81:8b:c3:f2:40:a2:31:66:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
        Validity
            Not Before: Jun 13 01:02:06 2026 GMT
            Not After : Jun 14 01:02:06 2026 GMT
        Subject: CN=7d989ceac99f34b19f0ed39fec2f723e92aebcab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:79:ea:99:fb:11:43:f0:a7:96:23:3b:35:
                    82:76:70:9a:23:2b:9d:21:60:1a:b2:18:1b:ff:5d:
                    41:bc:94:b6:08:be:4a:76:51:6d:be:32:4a:70:fb:
                    af:d8:2f:d3:62:57:ac:a6:d7:de:be:91:06:27:40:
                    86:2c:fc:df:0b:9f:6f:f7:24:f6:20:6d:c8:42:70:
                    e4:f9:ca:2a:3e:0a:94:a1:b0:46:68:eb:49:b1:87:
                    44:67:8e:52:71:8d:12:69:75:6c:ff:58:ce:2a:9d:
                    30:63:bf:4b:e9:a2:1c:ce:59:b8:2e:78:b1:66:5b:
                    5d:f9:dc:66:27:2a:45:99:4e:7b:d8:af:b2:dc:27:
                    1e:18:f3:e7:dc:27:2a:8f:8d:b7:10:5e:9a:61:14:
                    64:8d:9f:08:8c:cd:8f:f2:74:30:cc:94:7e:b2:4d:
                    5b:ef:44:d2:19:51:c3:e5:5e:97:5d:3b:a5:7f:0c:
                    54:a8:1f:c1:03:4b:a8:d7:f2:23:cf:d1:32:ff:08:
                    8a:b7:45:f0:7f:df:64:a6:3f:36:2d:5a:c3:18:83:
                    16:9a:a9:6e:fc:2f:bc:b0:f7:56:2e:8e:b6:1c:87:
                    17:06:4d:f8:58:4c:13:4d:30:47:be:9d:37:dc:1d:
                    5b:17:9b:67:d0:2f:5b:d4:55:5a:3f:fa:77:ce:21:
                    6f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:98:9C:EA:C9:9F:34:B1:9F:0E:D3:9F:EC:2F:72:3E:92:AE:BC:AB
            X509v3 Authority Key Identifier:
                keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:b2:91:9f:36:3c:d1:33:4b:25:0d:5e:3c:3c:6f:22:f5:b3:
         d9:0e:68:b5:71:95:cb:6c:3f:52:95:81:0d:28:97:c8:e5:63:
         29:ad:23:a0:dc:86:35:c1:3b:60:77:2f:b4:2d:5e:84:25:1f:
         c1:5e:b2:d9:1a:42:63:28:b9:4f:5c:12:ea:66:83:9a:ea:b2:
         77:0b:74:57:89:d9:97:79:3d:20:62:ce:ad:c9:39:c7:72:3b:
         b6:e3:46:c0:f6:2f:9b:22:09:91:fb:51:43:03:88:85:7f:4a:
         a1:36:ae:d3:49:e0:e1:92:c6:2e:65:8b:6d:ad:2c:15:f3:0d:
         7b:c5:86:fc:3a:45:49:3e:46:e7:91:ba:88:dd:90:8d:17:d8:
         18:54:17:a6:d9:1b:c0:fa:a2:79:24:3d:1e:50:dd:e4:a6:48:
         43:78:b6:54:51:cc:a1:7f:b7:2b:94:75:ba:8a:6d:70:37:91:
         67:d4:f6:e3:02:8b:39:50:29:dd:80:1d:85:24:cd:c3:86:5c:
         e8:4f:76:b3:ec:48:f3:24:99:11:49:1d:db:02:c2:72:cf:6a:
         52:19:2d:71:f0:3a:f3:f0:98:cf:4c:cf:47:c8:ff:c9:42:4e:
         24:f4:bf:7f:7e:13:80:3b:f0:1b:b4:5a:f5:42:1a:f2:41:44:
         02:df:11:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:25:48 2026 by rpki-client