Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
File:                     jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json)
Hash identifier:          MPLqHLUi/yvG9zBajU1bmYpVrB6SaSfwY/OwTD0QlzA=
Subject key identifier:   64:32:4F:6F:F0:23:82:75:6C:29:A0:7B:D6:49:5E:20:63:D4:5D:3C
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Certificate issuer:       /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial:       019EC33789475FAC7D0AC77C1A34CB1D91A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
Manifest number:          0A47
Signing time:             Sat 13 Jun 2026 23:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:57 +0000
Files and hashes:         1: 6ckN970H7cpuN5SlW3wkVE1-uM4.roa (hash: 4RC2uU6qxyV9bc9Cvszgx0ISOMF1kgJvTGxyXOpdXhI=)
                          2: 6j9AVsDIcLErIkpn3X-eJeF1GGI.roa (hash: ZsMGjImkdIZH7VCwDNjWJbDGVpBmnhjQHnLW0jKIHBo=)
                          3: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: b070ZxWZB3FivGveUye61xPcrSogt6dCsVV361D8+wU=)
                          4: yQpjhvw8i6e9KzrpvjEnSpkHzwc.roa (hash: tuojuZc92088axUvGHKz4onECSlWfJI0kA5M4lGnMdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:89:47:5f:ac:7d:0a:c7:7c:1a:34:cb:1d:91:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
        Validity
            Not Before: Jun 13 23:00:57 2026 GMT
            Not After : Jun 14 23:00:57 2026 GMT
        Subject: CN=64324f6ff02382756c29a07bd6495e2063d45d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:36:25:da:1c:6a:0d:e2:51:fb:a1:e4:d6:
                    d2:df:6e:6e:ee:6e:ed:84:6d:fc:1e:78:f5:64:44:
                    f2:4a:a6:11:78:89:de:fb:fa:59:63:a9:4e:33:b9:
                    f8:f5:7a:db:b2:d6:f5:bb:df:6c:f6:d1:50:90:c0:
                    c3:51:a6:21:7d:23:5f:68:7e:15:96:72:75:36:1e:
                    aa:f3:4d:2e:93:61:47:9a:73:70:7c:40:ac:1a:61:
                    ea:33:fb:53:36:0f:c5:f1:c0:35:39:4f:6c:ef:2f:
                    ce:c6:41:ba:43:73:51:8d:18:33:c8:96:66:db:4f:
                    2b:67:f6:cf:bb:dc:0b:73:a9:8d:00:0c:5c:cd:4f:
                    82:fb:a9:90:64:91:70:ef:8a:73:b0:86:37:2d:e7:
                    a7:4a:ae:52:55:c6:21:17:74:3d:95:53:51:a7:4b:
                    b0:a0:30:02:10:2a:24:f5:40:1c:6c:29:1d:82:47:
                    52:32:66:e3:32:a2:cc:c4:38:eb:3c:68:db:8f:62:
                    4d:47:ee:93:66:df:77:ec:27:63:28:ef:7b:c7:01:
                    cd:5c:e3:4f:cc:db:c0:03:83:93:73:ec:10:8d:be:
                    01:fd:de:c4:85:ae:12:af:bc:82:7e:98:b1:29:86:
                    b5:8b:24:8f:c0:9a:d8:92:67:31:9c:63:6f:8f:4f:
                    ec:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:32:4F:6F:F0:23:82:75:6C:29:A0:7B:D6:49:5E:20:63:D4:5D:3C
            X509v3 Authority Key Identifier:
                keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:95:d5:1f:c2:96:48:4a:ba:d0:54:7f:e5:e6:89:68:1f:93:
         27:77:33:55:ed:ee:cf:1e:37:0a:04:63:38:ea:29:18:aa:19:
         b4:74:98:66:54:fd:89:41:cb:b2:0c:fa:b1:04:71:a2:27:34:
         a6:9c:68:8c:7e:31:65:71:4b:b1:7e:ab:ec:f0:7a:c4:32:ed:
         fe:d4:ef:57:87:a8:a0:77:7c:f8:15:48:5e:6f:2c:93:06:6c:
         29:f2:ad:c9:51:d6:75:90:ed:3d:16:83:19:77:72:5f:2c:c3:
         fa:88:1d:32:10:ad:61:3d:dc:9a:34:34:ae:84:82:5b:cc:0a:
         0d:3f:26:6b:e2:f8:78:59:44:1e:a4:d1:66:66:85:d6:ce:e4:
         ae:c9:0e:70:2f:b5:a6:18:42:d5:f7:c2:81:03:f4:2f:b9:46:
         4b:2f:11:32:aa:29:e4:35:88:57:01:3a:41:e8:51:e8:78:49:
         95:d3:6f:a4:0c:c2:af:58:07:67:ce:61:d0:7d:e9:3d:df:12:
         23:ca:e8:34:c1:4d:76:7c:47:3b:4a:1f:16:79:61:20:3d:7a:
         86:38:cd:a5:d1:fc:1d:e0:a0:d3:93:52:38:5b:6d:53:eb:37:
         fb:ff:bb:9e:67:e1:bb:1a:d1:ac:3f:da:7f:05:78:a5:5d:56:
         e4:bb:fc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:40:40 2026 by rpki-client