Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File:                     jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier:          cPYC7W1+83X15gowVEFgvsR+IkJ+0GesxrYyM/2FWzQ=
Subject key identifier:   48:86:38:D1:EB:38:8B:30:75:45:3A:FB:7D:F8:7C:45:D5:54:41:88
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer:       /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial:       019EC0369D2E0610468F74DE08322F83BA87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number:          153F
Signing time:             Sat 13 Jun 2026 09:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 09:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 09:01:05 +0000
Files and hashes:         1: 0yWPvFtMAYIcTAg5JfApwnsaFGI.roa (hash: 1p9eIfwmhKokMGTrk5iOiVMk3FImaB8EaoWESHMvCLQ=)
                          2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: S49k3CM2t5T6j2VzaK2SmBjWjEokLuvhF8IOaJwJSio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:9d:2e:06:10:46:8f:74:de:08:32:2f:83:ba:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
        Validity
            Not Before: Jun 13 09:01:05 2026 GMT
            Not After : Jun 14 09:01:05 2026 GMT
        Subject: CN=488638d1eb388b3075453afb7df87c45d5544188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4b:c4:bb:74:29:57:72:da:32:cb:f6:d6:ec:
                    14:b0:f4:5e:3f:72:45:0f:ad:7e:80:b3:43:8b:3f:
                    d6:19:35:d7:55:2d:97:57:82:e6:c2:48:b0:15:53:
                    ce:5b:e7:c7:c1:5f:29:25:ba:01:62:14:60:9a:cd:
                    05:66:a7:dd:f6:29:63:e7:1f:c7:d3:08:d8:01:7e:
                    ad:7a:c3:27:51:64:8c:f4:c7:42:5c:6a:f7:96:44:
                    61:f6:83:e9:1e:10:71:a9:72:4f:63:08:ab:c3:8d:
                    2c:34:f6:bc:e5:c1:ed:fe:34:0e:73:74:20:f4:f7:
                    ff:9d:2f:86:5c:8b:22:0b:a3:cf:d8:2b:a9:22:71:
                    1f:66:6b:69:2e:b7:83:32:75:8b:b6:78:a6:17:68:
                    45:52:7d:46:56:64:98:71:4f:63:ce:aa:26:88:19:
                    63:17:82:1c:5e:ae:0e:99:78:b7:e3:49:0d:98:46:
                    a5:69:47:07:f0:8d:b6:56:94:db:7d:19:2d:bb:82:
                    fa:3b:b7:53:3c:59:d5:1f:32:75:20:4c:9a:08:15:
                    3c:06:e3:76:63:ce:3b:cb:08:23:6e:ad:fb:e2:6e:
                    d8:46:6d:ec:a9:30:5c:bd:44:79:5a:2c:5c:7b:6b:
                    6d:62:9c:59:fc:a8:00:ff:36:12:36:23:ef:6f:64:
                    07:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:86:38:D1:EB:38:8B:30:75:45:3A:FB:7D:F8:7C:45:D5:54:41:88
            X509v3 Authority Key Identifier:
                keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:9a:1e:c7:7b:b0:77:12:db:b0:af:40:4c:e5:0c:fd:57:f0:
         b5:bc:4a:e5:1a:8c:cc:4e:da:4c:f3:f0:b8:4f:70:4f:37:22:
         41:15:db:36:54:e1:79:bb:b5:64:6a:42:18:2d:f4:e4:68:0e:
         e0:a5:d6:2d:9e:6b:da:15:53:58:f1:0a:e5:ef:fd:95:fe:5a:
         c2:c8:7d:77:09:e1:9a:23:ca:4c:93:11:6b:3f:1e:c4:5a:d7:
         2a:58:43:d1:41:d0:ba:f2:83:a9:a3:68:63:b4:98:10:d2:79:
         43:3d:8c:c3:1e:e1:86:f2:4a:2e:95:db:1e:e1:c4:73:c2:e0:
         5b:f5:1d:8a:3e:d6:fc:43:dc:c5:82:c7:86:7a:e9:6f:79:8f:
         b1:b8:7e:e0:2c:bc:2d:50:e8:40:d7:8d:f9:d9:dc:30:0f:5c:
         8c:09:a4:d7:66:59:d8:1e:26:a6:bc:de:ab:79:ef:b2:f1:c7:
         6f:a9:44:92:1f:0c:f7:68:ee:93:68:d0:a3:4d:aa:6f:1a:39:
         78:8a:5c:ab:76:93:38:80:ff:65:56:94:01:c1:ba:7d:61:1e:
         02:7d:d9:0b:46:20:19:e2:67:28:a7:77:30:99:36:b9:5a:14:
         46:62:6b:8f:4b:0d:68:c7:6e:31:03:ca:63:df:df:e9:c3:81:
         5f:d5:2c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:09:46 2026 by rpki-client