Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File:                     JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier:          Y3RZC6DKDJk5zugVp+W8WMWF+gxkyzdhalsDc6/Hrk4=
Subject key identifier:   7D:67:0F:21:86:30:8A:FC:DC:AB:10:FC:CC:F8:5B:85:9B:77:C7:0A
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer:       /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial:       019EC1EE3EC4AFB198212CF5FF99A1DD9D63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number:          0DE0
Signing time:             Sat 13 Jun 2026 17:01:16 +0000
Manifest this update:     Sat 13 Jun 2026 17:01:16 +0000
Manifest next update:     Sun 14 Jun 2026 17:01:16 +0000
Files and hashes:         1: 1-UQfPeP2Hp2kHg0OiYvIdbub_7g.roa (hash: I98ISNyguLUFVm8aiR0qBsZTLT8A2B3NKke2YTAXtF0=)
                          2: FbQ9gg85Y5Qx602ZBVh6YkaLcXs.roa (hash: T391+Idz7L3dve/E2xgopb1fIMnjsWpWTFaXJBaoxCg=)
                          3: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: wax+Zs/4RUyS4mDfKtvNDbWC3D20SwKL6P4AA5Dhz8w=)
                          4: KJfyUjYhSbcTj4BqhcYlT-NV3k0.roa (hash: PTxZGqD0eutJIRMtp0zEf920MlkzT2rTXHG1ErOVkNE=)
                          5: LeJNm1ZK5iVV3SsDbJERcUuUUyU.roa (hash: YZLLMnJFDKGZDywuXIt3IlZ5Tc81OdOTnXuXJJ8sLok=)
                          6: ytIxMg-nFxFDrCls8GXhACBFUSI.roa (hash: GHaVvWlfNGDA8GztLcPLg+D8rXVf6ft0hke/kEcK6uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ee:3e:c4:af:b1:98:21:2c:f5:ff:99:a1:dd:9d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
        Validity
            Not Before: Jun 13 17:01:16 2026 GMT
            Not After : Jun 14 17:01:16 2026 GMT
        Subject: CN=7d670f2186308afcdcab10fcccf85b859b77c70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:73:d4:b9:db:38:ca:79:6f:45:99:41:fe:
                    00:52:8d:c7:8e:f3:67:72:a5:07:7f:7a:e5:7e:47:
                    70:11:3a:1d:93:59:78:11:4d:9a:7c:37:fe:a5:87:
                    ed:40:56:f0:f5:78:05:aa:41:67:f1:97:6a:b5:7d:
                    56:d4:37:50:26:40:40:0f:42:db:81:b5:79:e7:a8:
                    87:d4:72:87:80:c7:69:81:f4:ee:b5:eb:87:fa:41:
                    a4:1f:11:1f:e1:11:09:16:ce:3e:43:4d:0a:af:3f:
                    b6:3c:74:94:fb:05:fb:db:35:20:52:77:db:59:9b:
                    1e:d9:ef:7f:bd:28:dd:7f:4f:32:11:7b:db:4e:11:
                    c1:81:b4:44:49:30:8e:ac:57:03:52:3b:b5:48:8d:
                    ab:ea:44:6b:63:75:8a:40:f3:7e:6e:92:86:4e:ee:
                    d3:01:69:a9:d4:24:a1:45:c8:5a:4c:6f:4d:17:6f:
                    4a:18:99:d5:58:67:20:63:41:d5:ec:a4:e2:2e:89:
                    19:c8:b6:3f:18:ce:5f:e7:fd:79:3a:27:12:58:a9:
                    b5:56:5b:28:94:1f:b8:be:8f:a9:9e:ea:a9:22:1b:
                    4c:23:3d:51:46:26:c8:68:49:a4:23:aa:60:91:83:
                    5f:f1:71:09:2a:d8:c3:df:e1:ef:73:5d:1f:51:74:
                    f6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:67:0F:21:86:30:8A:FC:DC:AB:10:FC:CC:F8:5B:85:9B:77:C7:0A
            X509v3 Authority Key Identifier:
                keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:2d:38:be:2f:e3:07:00:16:7c:57:c2:72:48:ef:0c:12:e4:
         a7:fc:bd:ac:91:97:52:f9:9d:80:d6:62:0b:6b:ae:08:0a:8c:
         11:ed:4d:fa:7b:95:9a:6b:33:31:81:bb:6f:d2:c4:8b:be:d9:
         d0:8d:cd:cd:72:05:20:34:97:e4:a5:53:aa:5e:71:04:21:95:
         77:84:43:d1:8a:01:d3:5a:9b:e7:df:11:63:a5:b9:08:53:e4:
         54:ac:46:cb:ea:51:02:db:46:56:c5:05:b8:b2:99:d3:19:29:
         f6:86:18:9c:11:e7:8c:ad:99:52:74:62:38:49:58:6d:35:26:
         21:7d:cb:51:19:05:d9:22:ba:2e:fe:f2:0b:9a:b4:09:97:04:
         dc:d4:4e:be:87:39:96:98:33:13:29:f6:48:94:83:57:c8:83:
         01:6d:74:00:59:bc:14:17:79:27:4b:c9:38:dc:a1:d9:7f:9a:
         93:39:2d:a8:13:16:17:ea:ae:1c:96:ae:a1:c4:1b:eb:31:58:
         50:b0:0f:de:b0:2e:c3:cf:11:e8:ba:5b:b2:4d:ac:21:e6:f6:
         dc:b6:d1:3c:94:18:04:62:ee:89:0b:31:52:e8:cd:ae:96:ba:
         b2:a0:f1:a8:4c:e2:8a:8c:47:ff:99:0e:17:2e:48:04:7b:8d:
         c6:6e:82:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:32:37 2026 by rpki-client