Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
File:                     jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft (raw, json)
Hash identifier:          4TgfXd1C7WdnsF41XXHELjYm/nr4FWZuZUieAEUCgZY=
Subject key identifier:   4F:54:CA:C1:37:CA:21:89:B2:B4:01:50:24:EB:50:EA:0E:D0:0B:33
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Certificate issuer:       /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial:       019EB98FA8AACDFBEC3CEEDD48E0F7D45100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
Manifest number:          123F
Signing time:             Fri 12 Jun 2026 02:01:00 +0000
Manifest this update:     Fri 12 Jun 2026 02:01:00 +0000
Manifest next update:     Sat 13 Jun 2026 02:01:00 +0000
Files and hashes:         1: 2dl-f-UK6z-wcsJEmLBo_kTVQA0.roa (hash: E+Lj08rzgs1LC3v6bo+hL91M0+iDXn1Q2UMdAOL8ihg=)
                          2: BcaKc_qpZcw6gUkkrXQbt6m-3Nw.roa (hash: FCBImm07RTNhqFegiiS82dUG+xaTXFVxce08GQ6qTS0=)
                          3: MxVivBucAENp2PAscr5joXqh_oY.roa (hash: qdH6vqEjmsgzasuWWeKuMXOT/SGrMj1v+Oi8w3/Eecw=)
                          4: PPTpKN0G94Qk3SCfG74G6E4gLdw.roa (hash: IpDfPDw0GzTAcezF6u+iyqtASEo3jItEu1XZDEJz9Yk=)
                          5: jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl (hash: hFZYrjBZdlarJdTuicryhwTNa1+cUq/JZsdDa4FvNx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:a8:aa:cd:fb:ec:3c:ee:dd:48:e0:f7:d4:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
        Validity
            Not Before: Jun 12 02:01:00 2026 GMT
            Not After : Jun 13 02:01:00 2026 GMT
        Subject: CN=4f54cac137ca2189b2b4015024eb50ea0ed00b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:86:51:d5:de:81:b6:82:19:b0:f4:f6:b0:58:
                    f6:7b:c9:1e:c5:a4:81:73:b3:3e:80:50:90:1e:54:
                    10:17:6e:bd:d6:73:24:7d:6d:d6:da:24:18:5b:6e:
                    bf:26:9d:0f:6f:80:3d:56:aa:89:ae:3d:37:59:26:
                    f7:28:f6:c8:6a:ce:92:6e:59:88:ea:7e:59:b2:e5:
                    19:c2:e0:82:60:9d:d2:6a:f5:cb:0c:fc:1b:e5:4e:
                    6e:40:1d:90:48:75:df:50:00:f1:e1:f3:79:93:9b:
                    d6:14:72:00:c2:0e:a0:17:11:af:37:3c:fc:49:35:
                    15:0d:84:c3:d7:2c:32:7f:71:8e:33:00:3c:ad:af:
                    50:73:ae:c4:e4:15:e1:df:6b:49:c3:49:8e:d9:5b:
                    ef:91:4b:73:a5:a2:10:49:a3:bf:4d:4c:b1:81:b5:
                    11:55:71:2d:86:bf:c6:9b:8b:b6:1e:55:36:f6:f8:
                    17:41:60:d1:ae:6b:e8:3c:df:2e:25:12:2f:23:65:
                    cc:17:1f:71:2e:e2:bb:9a:e8:59:78:66:f6:5f:13:
                    2b:6c:c2:0a:b4:b9:60:35:d8:00:7e:80:53:3c:6a:
                    54:e3:de:67:3c:14:36:56:6c:7c:b0:c9:5c:a0:eb:
                    38:bc:2d:42:e7:68:14:90:cd:90:23:fe:af:79:66:
                    98:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:54:CA:C1:37:CA:21:89:B2:B4:01:50:24:EB:50:EA:0E:D0:0B:33
            X509v3 Authority Key Identifier:
                keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:0f:3c:3e:7b:d9:ec:1f:20:9f:e6:ce:8e:d7:d9:9a:02:c9:
         6b:f0:f4:55:00:7c:9f:20:33:23:98:80:fe:fc:e9:ca:1f:69:
         9c:15:c6:bb:95:9f:78:de:4c:ea:9c:e0:73:db:aa:ff:85:77:
         c5:b7:cd:f4:aa:d4:43:f8:f5:3e:7d:cd:df:19:24:54:e8:84:
         de:ac:ef:24:4b:19:fb:0e:b6:ed:0e:b7:4a:2d:c3:cc:9f:b4:
         b6:c2:c6:c5:78:da:45:61:ce:94:6c:e5:ec:77:fe:ad:94:22:
         4c:80:57:b8:ec:2a:ad:ce:70:9c:b7:ce:bd:9e:8c:e0:19:25:
         68:66:24:b3:f8:c1:a7:d4:59:ba:ee:b2:71:72:9c:3c:24:d6:
         2f:64:c2:f9:7a:77:6b:4f:2f:3a:2a:4a:76:e7:c3:5e:ab:d7:
         dd:30:18:29:27:40:8c:fc:eb:03:8c:90:5d:68:31:6b:30:5e:
         67:47:f7:a7:4d:dd:1f:63:53:0a:74:71:8a:17:fb:a9:55:bc:
         14:d2:8f:bc:65:b9:98:68:96:a9:40:24:de:42:30:22:ea:d5:
         32:6f:1b:fa:51:33:0d:b7:88:13:40:db:b2:14:0b:34:1a:7e:
         a5:c5:27:a6:1f:ed:4d:3e:13:6f:53:51:18:32:84:34:3f:dc:
         39:35:1d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:38 2026 by rpki-client