Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
File:                     0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json)
Hash identifier:          jHavnu8C4Pj3DMraBgqcSYO8KiSpdBX0TDVuv+IO6uY=
Subject key identifier:   39:90:1F:7C:B2:E7:0E:A7:72:15:71:F9:75:DF:FC:D3:DC:EA:49:0A
Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
Certificate issuer:       /CN=d234798e0712f155292d3211f7c447223ccd49ac
Certificate serial:       019EBF5A277B25EDBC29D67161D3828E2EE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
Manifest number:          167A
Signing time:             Sat 13 Jun 2026 05:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:16 +0000
Files and hashes:         1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: PtWSJfVRtB1CSPofBYIPJyEo9oJNnLRyPmwjTfS/9gQ=)
                          2: RjK8oLQkpJRzAeEdXg6vAbqYOYY.roa (hash: Mnx3rs/opPeBY8JJ1GG9XmHg+1e4VxaebybsYn1/rbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:27:7b:25:ed:bc:29:d6:71:61:d3:82:8e:2e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac
        Validity
            Not Before: Jun 13 05:00:16 2026 GMT
            Not After : Jun 14 05:00:16 2026 GMT
        Subject: CN=39901f7cb2e70ea7721571f975dffcd3dcea490a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:e0:48:c3:f9:5d:2a:06:c8:8b:bd:a4:82:
                    eb:fd:09:fc:ef:64:3e:50:ea:90:24:86:60:09:8c:
                    46:69:26:25:b1:fb:3e:6d:33:a7:d4:f6:ec:c7:f4:
                    5a:ab:e3:21:d3:14:1f:85:59:6b:7c:0c:75:3d:d8:
                    84:1e:8a:8c:76:b8:bf:5a:bf:cf:54:75:07:e5:15:
                    38:33:31:71:4a:0f:de:56:18:06:5d:b1:86:1c:20:
                    10:5b:96:cd:6c:4d:7d:4a:1f:98:5d:e4:06:6f:fb:
                    23:4b:7b:d9:9b:a6:31:61:bd:54:02:27:c5:4f:92:
                    e3:61:bf:02:4f:9f:04:02:28:f0:db:90:08:80:b9:
                    44:9e:d8:6d:f3:30:51:99:d6:3b:98:d6:91:cf:c8:
                    ee:b3:f6:ed:1a:3c:17:e9:40:a2:00:be:08:3b:a6:
                    d8:eb:e2:01:63:76:3c:6e:fd:bb:6f:fc:15:ab:cf:
                    3b:fc:7a:2b:9a:2c:a3:a4:b4:79:52:d6:5b:45:fe:
                    49:03:c1:ea:bd:7b:9f:e2:28:af:f5:25:a8:b5:50:
                    a1:74:80:d4:28:30:e6:51:1a:81:1d:bc:72:4f:ef:
                    2d:ee:80:4d:e1:d4:d4:09:46:00:4b:49:de:6b:df:
                    dc:dc:d9:86:7f:76:74:d9:92:fd:49:c4:d1:2b:92:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:90:1F:7C:B2:E7:0E:A7:72:15:71:F9:75:DF:FC:D3:DC:EA:49:0A
            X509v3 Authority Key Identifier:
                keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:85:c5:a6:51:05:d9:60:ee:04:fb:60:41:ca:23:d4:4d:ae:
         9a:78:4d:ee:b4:4a:60:60:bb:e7:d6:6b:0d:0b:c4:cb:c1:c6:
         34:40:9d:3b:dc:f3:74:4d:f6:fc:77:e9:aa:a2:0d:a2:55:5b:
         d5:4f:35:5a:8e:5b:42:7c:dc:91:bd:19:45:47:75:04:7e:e1:
         b0:63:c0:47:30:6b:1e:8d:43:79:d3:d5:0c:7f:32:cb:f6:eb:
         3b:dc:3e:ab:4b:41:6a:55:cf:7f:1e:72:cb:0a:f6:15:15:70:
         a1:70:62:57:09:9d:76:98:f9:9b:81:fc:e0:15:97:84:7b:e7:
         d0:07:7b:e3:ed:cf:6c:e5:11:4d:74:97:41:99:ff:e0:da:62:
         f7:c2:6a:43:19:c9:d9:92:ca:da:f9:04:20:c4:e6:41:a6:3c:
         9c:c2:01:e6:96:f3:3c:ab:ed:4a:2e:09:98:70:82:de:1e:bf:
         83:43:3e:fc:87:73:90:1c:72:8c:8e:50:42:f1:2d:19:1c:80:
         d9:c6:4b:1b:80:0b:a5:ff:ab:f9:a7:51:9e:b2:f2:09:da:69:
         7a:cb:94:48:31:65:29:e0:73:0b:31:bf:8e:52:f1:8b:0c:2e:
         7f:3b:54:d4:14:e2:60:86:d2:ec:d5:74:05:fe:eb:ee:7d:5b:
         67:c7:ba:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/Wid7Je28KdZxYdOCji7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzQ3OThlMDcxMmYxNTUyOTJkMzIxMWY3YzQ0NzIyM2Nj
ZDQ5YWMwHhcNMjYwNjEzMDUwMDE2WhcNMjYwNjE0MDUwMDE2WjAzMTEwLwYDVQQD
EygzOTkwMWY3Y2IyZTcwZWE3NzIxNTcxZjk3NWRmZmNkM2RjZWE0OTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhfgSMP5XSoGyIu9pILr/Qn872Q+
UOqQJIZgCYxGaSYlsfs+bTOn1Pbsx/Raq+Mh0xQfhVlrfAx1PdiEHoqMdri/Wr/P
VHUH5RU4MzFxSg/eVhgGXbGGHCAQW5bNbE19Sh+YXeQGb/sjS3vZm6YxYb1UAifF
T5LjYb8CT58EAijw25AIgLlEntht8zBRmdY7mNaRz8jus/btGjwX6UCiAL4IO6bY
6+IBY3Y8bv27b/wVq887/HormiyjpLR5UtZbRf5JA8HqvXuf4iiv9SWotVChdIDU
KDDmURqBHbxyT+8t7oBN4dTUCUYAS0nea9/c3NmGf3Z02ZL9ScTRK5JUzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmQH3yy5w6nchVx+XXf/NPc6kkKMB8GA1UdIwQY
MBaAFNI0eY4HEvFVKS0yEffERyI8zUmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYzlkZGMtMzE5MS00NGIzLTg4YmEt
ODJmN2I5OWM1NDY3LzEvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYzlkZGMtMzE5MS00NGIzLTg4YmEtODJmN2I5OWM1NDY3
LzEvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoXFplEF
2WDuBPtgQcoj1E2umnhN7rRKYGC759ZrDQvEy8HGNECdO9zzdE32/HfpqqINolVb
1U81Wo5bQnzckb0ZRUd1BH7hsGPARzBrHo1DedPVDH8yy/brO9w+q0tBalXPfx5y
ywr2FRVwoXBiVwmddpj5m4H84BWXhHvn0Ad74+3PbOURTXSXQZn/4Npi98JqQxnJ
2ZLK2vkEIMTmQaY8nMIB5pbzPKvtSi4JmHCC3h6/g0M+/IdzkBxyjI5QQvEtGRyA
2cZLG4ALpf+r+adRnrLyCdppesuUSDFlKeBzCzG/jlLxiwwufztU1BTiYIbS7NV0
Bf7r7n1bZ8e63Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:34:31 2026 by rpki-client