Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
File:                     kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json)
Hash identifier:          pqLuklSiaOyM9qp0bGD9PhnsRXjhO9FmdyWomrC3G1Q=
Subject key identifier:   01:C3:E4:69:08:BA:F0:75:0E:36:19:06:48:48:7B:75:9F:B5:70:B6
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Certificate issuer:       /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial:       019EBDD9930C5FA730BC3A6EB320A9637D60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
Manifest number:          195C
Signing time:             Fri 12 Jun 2026 22:00:13 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:13 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:13 +0000
Files and hashes:         1: JhmecN5URCtv1yBIbMEV6e9g8Co.roa (hash: pl/+LhQub+A0lSXtk6Diu/3nX3HjGeeg4r2Cz4f+9V4=)
                          2: SgvNtEPjeS4PQsDsrJuu4hkfOtY.asa (hash: COU0yqjHmkzsF5ND+gIgB3KnAyucghgqR4Ewe3DYMIQ=)
                          3: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: NeAuibQt/h2nRpylRI877dEPbia1uInhBI3EMXR89RA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:d9:93:0c:5f:a7:30:bc:3a:6e:b3:20:a9:63:7d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
        Validity
            Not Before: Jun 12 22:00:13 2026 GMT
            Not After : Jun 13 22:00:13 2026 GMT
        Subject: CN=01c3e46908baf0750e36190648487b759fb570b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:d8:d2:ee:25:b7:9c:3e:30:56:da:00:e5:
                    e5:ec:a7:38:18:e6:3a:0a:22:33:f9:ee:5b:77:53:
                    d4:9c:b3:70:a9:9e:8a:58:8b:75:ff:d5:4c:d0:d0:
                    48:e6:47:f0:0d:7b:af:c5:1d:4f:7f:d8:6b:a4:cb:
                    4f:61:85:42:bd:5b:9f:9e:c4:1b:72:97:20:97:e8:
                    d1:69:7c:4e:17:16:92:04:65:d9:b5:19:38:47:f5:
                    f4:2d:d8:ac:82:cc:33:c9:35:68:0c:35:8a:4f:1e:
                    06:33:21:c4:be:a9:f1:5d:9a:ed:ca:b2:c7:49:7b:
                    8b:11:bd:b2:28:d5:70:36:2c:b5:f6:31:46:4e:53:
                    2f:71:a3:72:56:64:c4:a3:9a:36:5c:f8:76:4a:9f:
                    98:1f:33:a8:38:65:8e:3a:ac:4b:ce:b1:9c:5a:35:
                    43:ae:94:a3:59:d1:7b:f3:3a:d2:5e:27:16:96:54:
                    7a:f0:d5:6b:02:a2:e9:aa:64:9e:cb:a6:78:91:35:
                    40:dd:5b:fe:ab:7c:ea:f9:b9:dd:6d:ba:66:3a:69:
                    b5:42:fd:fa:aa:34:22:05:c1:48:42:90:89:31:c8:
                    25:6f:19:ca:4c:53:a7:ee:f7:3e:3b:da:7a:cb:2c:
                    1c:a1:3c:d9:ab:b8:21:78:5c:73:f3:41:8c:20:f5:
                    91:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C3:E4:69:08:BA:F0:75:0E:36:19:06:48:48:7B:75:9F:B5:70:B6
            X509v3 Authority Key Identifier:
                keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8c:12:a7:5c:44:7f:1a:62:ea:78:45:85:22:5c:59:71:16:
         e2:e0:8e:6a:7d:b9:61:52:2c:a4:01:0a:11:e0:1d:d6:e9:6f:
         f0:d8:8d:64:d2:74:ba:1c:24:b8:c3:74:f8:29:ed:05:b6:7d:
         d7:80:95:7e:54:c1:88:f5:7c:2b:c4:aa:48:ab:40:af:e7:86:
         ef:61:39:b8:9d:38:df:81:b4:bc:cd:83:87:8d:a5:eb:dd:de:
         02:8e:d3:d7:04:7d:e3:65:07:a2:c6:53:b9:9e:c4:12:e4:44:
         29:ce:8f:d0:d6:c8:ea:ba:3a:f4:6b:56:b4:e7:a0:40:45:d2:
         09:71:58:ff:c5:5a:56:76:54:08:d3:37:b4:20:bf:a0:14:13:
         5c:f3:45:81:9a:74:2f:a0:4e:e9:65:4c:d8:36:f9:a6:24:4d:
         d9:7f:bf:68:0f:28:a6:3b:02:39:6b:65:99:12:9c:b3:c3:7d:
         82:ab:d7:ba:8e:2c:49:64:ac:1f:85:2b:95:99:26:d2:91:62:
         f7:fd:41:c5:0c:5e:96:44:f8:0f:a1:79:fd:b2:18:f5:87:c8:
         ac:40:cb:ba:51:81:91:4a:6d:ac:cb:a3:5c:39:c5:03:97:b3:
         64:4a:94:4b:e8:a7:e1:57:b0:32:63:76:9c:c1:6f:b1:04:3b:
         4f:27:0c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:28:05 2026 by rpki-client