Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
File:                     jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json)
Hash identifier:          etFosqPOpIb2gn7SrJnFBIHR4sNQsGTUeV/FXk0HQcQ=
Subject key identifier:   D0:CD:B8:F9:90:54:84:E3:AE:C0:21:91:4D:EB:99:56:2F:90:E6:7B
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Certificate issuer:       /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial:       019EC06E5254D7446C5E0A2143C82CB77112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
Manifest number:          169D
Signing time:             Sat 13 Jun 2026 10:01:55 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:55 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:55 +0000
Files and hashes:         1: 17ZzXQIgaPFFjeqMhwt3zOxvx1s.roa (hash: 86lU48qvlXKv6saptuHXqJOZusprYtOpfN/ZmUTRc2c=)
                          2: EozSJCiP9Cygcyge5GyOuN1Brck.roa (hash: FC5zsNMnxd0ekJD3hWuMDKKtr4NZV7IGmew1wZKk3hk=)
                          3: SJ04ay6mMnNqXRQ46nJIK4oxSlw.asa (hash: 2SJn970nGzja/+MwrBnP0LJ7l6DR9foN++GvgJnVlAw=)
                          4: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: onBmTVBlzrgWAEsh2DSdC2hChEj222v3Rs/019o51HM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6e:52:54:d7:44:6c:5e:0a:21:43:c8:2c:b7:71:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
        Validity
            Not Before: Jun 13 10:01:55 2026 GMT
            Not After : Jun 14 10:01:55 2026 GMT
        Subject: CN=d0cdb8f9905484e3aec021914deb99562f90e67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:e9:84:43:47:38:a2:8f:1a:9d:93:6a:81:
                    61:c3:7e:b4:4b:2e:09:09:ab:1d:3f:47:d2:d1:54:
                    11:f0:a3:94:bc:33:93:13:54:6a:ae:ba:d0:5c:1c:
                    ba:6f:19:92:06:f6:be:18:7a:3b:6c:e7:ac:1d:78:
                    1c:cf:30:79:e8:d1:d3:fc:d7:27:15:ff:74:17:be:
                    ca:43:d7:06:ca:4d:ae:b3:9d:2f:51:cb:70:f5:8e:
                    57:86:a6:53:56:22:74:e7:77:6b:a0:b6:f6:3e:64:
                    02:72:38:21:6a:a6:99:b5:c4:61:f0:66:96:34:cc:
                    99:6d:b0:5b:e9:07:7b:c8:0a:bf:2c:9c:63:bd:0c:
                    0d:e2:df:cb:72:c1:d6:ee:11:ba:06:81:3c:ea:cf:
                    e5:2e:33:08:fe:d8:16:4c:8a:5a:80:48:ca:bc:d8:
                    24:a3:70:42:bf:f2:3b:19:23:fe:03:b5:bb:50:b1:
                    9d:db:c8:a1:98:ab:99:55:4a:97:51:a2:ae:bb:8e:
                    d3:a3:20:b3:35:98:17:30:fb:10:af:6a:00:54:1e:
                    6c:9e:fc:db:cd:bb:61:b2:af:c4:8d:84:f8:7a:77:
                    2a:58:89:0b:cb:a3:74:47:01:8d:8d:58:47:72:0f:
                    61:ed:21:1f:fd:ef:34:7d:71:35:f3:01:af:98:cb:
                    f4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CD:B8:F9:90:54:84:E3:AE:C0:21:91:4D:EB:99:56:2F:90:E6:7B
            X509v3 Authority Key Identifier:
                keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:de:d0:ff:f0:02:63:d3:a4:6a:c0:6e:cd:31:8b:3f:e9:4c:
         be:98:9e:cb:89:2e:35:12:d1:ab:cd:cb:19:0f:6a:4a:f7:3e:
         34:c4:78:bf:3d:63:f5:07:dc:51:37:ee:03:7c:eb:8e:3f:31:
         8c:94:49:3b:91:41:50:b4:cb:e7:06:03:b1:af:87:b5:4d:a5:
         00:b4:a6:0e:06:cc:56:f9:33:89:8f:76:10:cd:25:69:69:10:
         a1:a1:29:aa:17:8b:52:c4:8e:89:a3:1b:1f:ef:dc:50:b1:d2:
         cc:d6:07:aa:19:f9:dd:87:c0:99:09:c7:0d:d8:a1:8b:7b:a2:
         96:06:73:c7:3b:f8:8b:af:13:2b:9b:c9:25:4c:13:17:e9:73:
         bf:92:b5:7e:8a:99:f4:c5:08:e0:a7:b2:6c:64:23:94:1e:dd:
         90:b2:51:2f:27:af:7b:58:ee:a6:29:18:de:71:da:2c:fd:f3:
         15:f3:85:03:e1:63:d2:96:14:7b:6e:ea:0d:b0:59:b8:26:59:
         fd:2a:fd:05:5f:fc:e6:0b:9a:64:cc:38:81:7f:50:27:15:ce:
         49:07:f3:56:6e:42:0d:41:a1:4d:ed:92:34:84:ce:56:34:f8:
         90:be:a1:2f:e8:00:bd:7e:e5:52:d2:be:f2:70:dd:88:63:d0:
         6c:64:78:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:36:36 2026 by rpki-client