Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
File:                     jvxhDOe89HllH9lRjCiJTtHrWoQ.mft (raw, json)
Hash identifier:          fDuwr//tAqdH3EuBvdQve28EdcYN1gPMBUC3a96xAKw=
Subject key identifier:   AA:DC:63:4F:81:E1:8A:84:A5:80:8D:55:36:3C:22:48:EF:E6:D1:7B
Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
Certificate issuer:       /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Certificate serial:       019EC292450AB284B9FD2C6C3814B8AF4D24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
Manifest number:          09B9
Signing time:             Sat 13 Jun 2026 20:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:26 +0000
Files and hashes:         1: jvxhDOe89HllH9lRjCiJTtHrWoQ.crl (hash: hxzXZY6YoqD5pAQbmjhUTEhlsfheNXO+SBh8ADTuAXM=)
                          2: rx7GC_CHfYxl4Ofnp8MOvM23hM8.roa (hash: 81lkujtMvuC5mIlhZHNqQoKSuJAiHrlt9j7cnoTOQdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:45:0a:b2:84:b9:fd:2c:6c:38:14:b8:af:4d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
        Validity
            Not Before: Jun 13 20:00:26 2026 GMT
            Not After : Jun 14 20:00:26 2026 GMT
        Subject: CN=aadc634f81e18a84a5808d55363c2248efe6d17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:8e:84:af:09:d0:a8:b1:a0:25:17:95:cc:
                    e8:66:73:44:58:1c:3a:de:15:92:ff:4b:a5:2f:6d:
                    67:dc:7a:8a:09:48:6a:7c:63:62:56:ae:39:17:06:
                    bb:0d:d4:a7:fe:a9:93:fd:d0:c6:bc:f3:56:e6:30:
                    73:6c:20:8f:b8:59:9d:9f:26:09:13:4a:52:a6:d0:
                    c5:0a:12:61:82:a8:f1:13:0a:75:d9:32:39:93:70:
                    f2:6e:18:fe:98:b2:31:d1:ca:f5:ed:e5:69:9c:04:
                    33:10:61:52:8e:79:8e:3c:64:ca:2e:64:6e:dc:32:
                    5a:28:84:d5:10:82:74:ea:ef:6d:15:77:bf:c8:21:
                    b1:37:3c:5c:40:70:f9:dc:37:03:91:d8:b5:4d:08:
                    d5:3a:7b:84:13:6e:17:9c:dd:8d:97:4b:04:36:e3:
                    42:a9:cb:5d:cb:ad:f7:5d:e5:85:d5:d6:7c:db:f1:
                    0e:ae:0d:b1:52:3b:f3:35:90:c0:00:3d:ce:45:62:
                    bb:19:fa:02:b0:1e:4c:ec:84:4c:cc:36:32:83:d3:
                    de:43:76:7f:11:4b:df:25:be:79:2b:50:ae:30:07:
                    d8:69:e5:02:56:fd:2b:bc:a5:a8:5c:c8:1a:1a:1c:
                    d6:8f:62:67:78:c4:e5:37:8c:b2:9f:9e:0d:44:87:
                    c4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DC:63:4F:81:E1:8A:84:A5:80:8D:55:36:3C:22:48:EF:E6:D1:7B
            X509v3 Authority Key Identifier:
                keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:31:18:dd:e5:6c:52:e7:1c:7b:fd:fe:ca:48:db:72:a3:b5:
         5a:76:53:37:06:70:71:e3:9d:98:46:1b:02:ef:3f:66:ec:8b:
         2a:29:52:88:67:a4:ff:4d:60:15:de:e8:fa:e5:35:59:bd:59:
         53:47:bb:17:8e:68:96:b0:67:85:96:ad:98:37:47:15:1b:20:
         3b:7b:e9:3d:0d:b7:66:b0:09:cb:54:97:3f:bb:f9:88:e0:0e:
         c2:69:2a:79:eb:0e:61:89:a6:c7:cd:ff:a5:4d:0f:6f:bc:bc:
         48:1b:c4:3c:8d:f2:88:a5:b4:50:dc:c9:aa:97:bd:3c:ce:07:
         eb:8b:08:ff:d4:c7:35:a1:d3:c8:c0:11:55:08:96:4d:06:65:
         e3:83:a9:0f:b6:5e:21:dc:84:7b:53:05:42:21:e9:dd:8f:61:
         4d:a8:b6:dd:c1:1b:a2:eb:cf:26:76:37:5e:e1:7b:54:2e:14:
         02:2d:b8:6e:8f:72:62:b3:cb:8b:6d:6d:29:50:b5:92:b7:52:
         69:62:b0:21:61:a3:4a:06:05:64:ac:b8:bb:97:13:cb:4c:7a:
         3f:90:d3:16:09:3f:df:51:0d:a7:aa:aa:46:73:5d:e0:b6:81:
         f7:70:0b:bc:db:2a:fb:81:00:1d:30:88:92:12:23:bd:d2:44:
         98:4c:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:26:07 2026 by rpki-client