Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft
File:                     jg0lcq37cjROrUxTtVe0Dspel6I.mft (raw, json)
Hash identifier:          0aaaodrHUXPKBPvI7Pc6qzp1o9mTfHMW+r1H1q3TjVI=
Subject key identifier:   44:9E:AB:D5:8D:E6:16:25:1D:74:3A:85:58:32:3A:C5:70:A6:98:95
Authority key identifier: 8E:0D:25:72:AD:FB:72:34:4E:AD:4C:53:B5:57:B4:0E:CA:5E:97:A2
Certificate issuer:       /CN=8e0d2572adfb72344ead4c53b557b40eca5e97a2
Certificate serial:       019EC25BF4D7A977339811B64730BC00A13D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jg0lcq37cjROrUxTtVe0Dspel6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft
Manifest number:          43
Signing time:             Sat 13 Jun 2026 19:01:06 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:06 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:06 +0000
Files and hashes:         1: jg0lcq37cjROrUxTtVe0Dspel6I.crl (hash: cg8FvV6fhQadk1qLELY0yclQ11f9XHVDuOKAFWrmpDY=)
                          2: oGvecxChE9PvAr_dJh5s6G_15uM.roa (hash: CJ9Dwla0xxRWMrW9UQklY6shlGWQmLDV86+ixrs3Kxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jg0lcq37cjROrUxTtVe0Dspel6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:f4:d7:a9:77:33:98:11:b6:47:30:bc:00:a1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e0d2572adfb72344ead4c53b557b40eca5e97a2
        Validity
            Not Before: Jun 13 19:01:06 2026 GMT
            Not After : Jun 14 19:01:06 2026 GMT
        Subject: CN=449eabd58de616251d743a8558323ac570a69895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:82:dc:45:8e:dc:0b:2b:9d:31:f9:68:1d:
                    2b:10:c0:16:f7:39:ab:0b:83:32:94:9a:fd:1e:b2:
                    d9:a1:a3:3b:be:6c:30:0e:5f:8a:e5:b8:02:b0:61:
                    bb:ac:1d:5f:1e:c9:7d:61:1d:92:51:39:c2:a8:b3:
                    a2:23:0d:a1:91:ff:d7:35:7e:05:d8:d1:8f:f4:be:
                    17:b7:5a:c2:81:fc:bb:29:f9:84:1d:24:98:82:c2:
                    ea:33:49:f7:81:62:6d:dd:90:0e:21:b5:ee:8e:0b:
                    39:c3:83:56:96:d1:ad:88:ea:08:01:1f:0c:84:73:
                    c0:0d:ea:0d:48:22:f0:20:3f:4f:44:65:48:83:ac:
                    c3:66:43:18:a6:f6:53:5a:fe:25:f3:ed:ec:70:25:
                    37:62:f8:3a:27:7e:fb:bd:52:70:c4:bb:ce:06:f5:
                    71:c1:2e:25:6e:07:3a:f5:bd:0b:50:4a:13:08:3a:
                    de:1e:bd:e1:2a:85:aa:20:35:19:cb:6e:44:a2:32:
                    aa:60:4a:0b:eb:32:b7:67:64:c7:60:a7:f4:e7:e4:
                    de:b6:b9:f2:5e:1a:2b:65:3b:b6:bf:ae:b0:df:3f:
                    2d:b8:ea:2b:7b:69:78:01:c0:90:17:f1:27:d2:94:
                    0c:13:2b:86:82:16:44:88:29:28:35:ec:06:bb:7c:
                    5d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9E:AB:D5:8D:E6:16:25:1D:74:3A:85:58:32:3A:C5:70:A6:98:95
            X509v3 Authority Key Identifier:
                keyid:8E:0D:25:72:AD:FB:72:34:4E:AD:4C:53:B5:57:B4:0E:CA:5E:97:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jg0lcq37cjROrUxTtVe0Dspel6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:3b:b1:43:84:f6:cb:da:47:5f:b0:64:f8:31:f4:61:54:e6:
         2d:54:96:b3:53:86:eb:c5:ff:a9:b1:04:ff:e3:d8:57:16:2f:
         f3:15:49:e6:9e:cc:41:0a:9c:42:b1:af:d7:5e:71:85:7a:29:
         7b:51:2e:8d:2e:1b:24:01:fd:ca:70:59:1a:8f:d0:6e:c2:19:
         4c:e7:00:6f:e4:b4:32:56:c9:e8:1d:a3:51:6a:cb:81:3d:3e:
         cc:e8:74:88:2a:ed:65:88:4c:4b:61:3c:0f:31:a0:70:a0:07:
         41:ae:81:31:6a:eb:d8:83:4a:a7:e3:2b:23:d7:8a:35:9e:91:
         8a:3a:02:b5:f2:5d:4b:5c:27:18:ea:fd:9a:f6:bb:0f:75:da:
         dc:fb:ae:93:14:d1:ea:45:cc:e5:8e:f7:47:c1:6c:dd:6e:b9:
         7c:28:b1:0d:08:fd:3e:56:a5:12:55:b6:7b:10:1f:fd:74:5e:
         a7:50:d1:b6:5c:78:bd:44:c1:10:cb:26:f5:6d:db:ce:f1:06:
         62:f9:4e:10:02:cc:9a:14:f7:5d:5c:33:58:1f:31:2a:32:11:
         f8:23:9b:82:c0:81:92:40:26:d5:e4:f6:81:01:41:90:42:c5:
         36:22:7f:1f:46:14:6c:95:1c:21:ef:27:30:39:b3:d5:10:bc:
         71:61:40:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:00 2026 by rpki-client