Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
File:                     itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json)
Hash identifier:          UL7v1hw/8RpnIYdHpUIhziCpY5pPvQNA/+qiEyW2nu8=
Subject key identifier:   58:74:DA:0D:93:E7:CF:7E:B8:45:3B:C5:60:F6:ED:B8:2D:FA:EC:AB
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Certificate issuer:       /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial:       019EC149545C634C409A7F275E58E91EC10C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
Manifest number:          1960
Signing time:             Sat 13 Jun 2026 14:01:08 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:08 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:08 +0000
Files and hashes:         1: KpyePpi0BQOtPpSVVikAIl2skgo.roa (hash: Ukwdvn9MeAWiIbUvrqdNT9WEFPzcoAHZi8Gv9MxSNAs=)
                          2: _OkMfangRHHR3pkyqVAWkqY7mag.roa (hash: 4q+Nhgpids6AoAL8lqsvtN3qpgNozHDLR3s1mrSSncQ=)
                          3: a3zHXiytnxR6C7Yya8cqACPMcyc.roa (hash: T1Jty2//hchc0LCzlubxKMABR/tRMsPUV0k73TQ7gFM=)
                          4: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: thBKa0luaCcimSRxw73zqA+doCvyJf0QCSFQHLMVsUg=)
                          5: m3UYalXj1FlItkx4Rfdvy-zoe3E.roa (hash: fRgZKtug12cWuESnK4ZE4YhyfFuUNO2BSLzpL2F6bjY=)
                          6: qwWdo-9lTcBvLCHf4H2oZNKYs8g.roa (hash: molpqRNT26EZTf8c40L3ZxZs9DbMAoqcJ+gd6HHZ1w4=)
                          7: x-EfdPPH41fBBpjZ7XVWx9BVt_s.roa (hash: GJIuPJGUowMmXdPxeaXLT8tgyWA+GgGHmT3ek3XlWMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:54:5c:63:4c:40:9a:7f:27:5e:58:e9:1e:c1:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
        Validity
            Not Before: Jun 13 14:01:08 2026 GMT
            Not After : Jun 14 14:01:08 2026 GMT
        Subject: CN=5874da0d93e7cf7eb8453bc560f6edb82dfaecab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a0:28:81:09:52:20:03:1b:9c:e4:6a:5f:08:
                    b7:dc:eb:50:25:d8:63:45:be:2b:ab:88:b1:65:4e:
                    7e:ba:78:c3:96:b0:5a:30:dc:9e:b0:c5:6d:7d:dc:
                    40:63:f2:8d:9e:83:3e:5d:62:9a:95:23:b8:fd:a9:
                    f9:84:42:cd:d3:64:f0:39:68:a8:d0:d5:91:7e:ee:
                    86:6a:e5:43:14:85:99:12:b1:61:46:c1:39:17:2e:
                    00:91:1d:6a:28:8a:47:8e:4c:87:bd:29:45:9b:02:
                    f2:08:d4:03:9e:3e:5d:7b:d0:e7:1c:3d:53:d9:47:
                    bc:d5:96:5f:2c:27:79:70:29:48:ab:89:bd:8d:10:
                    71:99:d8:80:8c:1c:85:24:3e:35:81:7f:46:21:48:
                    fe:5b:83:82:f0:e3:bf:15:7f:bb:39:9b:ef:6b:57:
                    b9:d0:79:e1:ce:41:d7:a2:9b:e7:02:9a:45:d7:39:
                    cc:8b:7b:c4:43:23:dd:04:f3:5a:2c:8d:0e:de:8f:
                    90:73:28:6c:78:fa:c6:55:e3:27:eb:b2:3b:4d:7e:
                    cf:28:29:df:ee:91:3b:99:f7:d4:64:24:23:f1:6d:
                    eb:e5:c8:59:c3:ca:87:18:80:e9:3d:f0:f2:fc:cd:
                    5d:fd:2f:ef:49:a2:a8:3f:50:78:86:1f:f0:ca:9a:
                    9b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:74:DA:0D:93:E7:CF:7E:B8:45:3B:C5:60:F6:ED:B8:2D:FA:EC:AB
            X509v3 Authority Key Identifier:
                keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:46:1c:42:80:7f:f5:8b:6b:bf:5f:05:e5:ea:31:11:72:9f:
         65:29:de:a7:fe:c6:16:69:f3:a8:f6:0a:63:5f:6e:14:27:e0:
         14:0d:cf:e8:d8:72:70:6e:6b:e9:18:a3:9f:a4:56:b8:e2:00:
         ac:ba:a2:18:e4:35:5e:55:91:c1:71:d6:29:c3:88:af:ff:e9:
         0a:da:f4:bc:c8:c2:a9:31:14:9a:fa:7f:68:44:9d:9a:6d:7f:
         c6:21:ec:ea:72:1f:ac:e6:be:9b:5d:71:e7:a8:4d:fd:e3:c5:
         4f:23:44:9d:72:df:be:dd:b6:78:54:f5:18:e9:dd:e3:43:2e:
         1e:c0:98:fa:8e:02:94:c5:54:d1:68:cf:6f:3d:ba:b0:35:a9:
         af:ca:f9:4e:ec:bc:13:22:96:6c:43:b2:46:a2:3b:8d:0a:2c:
         d4:bb:55:d6:42:e7:6b:04:e8:e9:1c:c3:ec:b2:f9:40:7d:ce:
         54:f6:b4:9f:0d:e6:b0:78:0a:74:27:d2:f7:8b:d3:4e:39:9e:
         4f:87:ab:7f:60:95:2e:06:eb:9e:10:4f:7f:2c:86:7f:5f:89:
         ae:df:f2:ae:6b:7f:16:60:2e:7a:fe:74:ad:02:83:20:a5:b1:
         3d:7f:ba:c9:7d:45:5e:b3:9a:a9:ea:86:7f:e0:dc:b2:87:85:
         82:7f:91:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:22:36 2026 by rpki-client