Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File:                     jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier:          wJQ3pvF6/eIVPdwsTu4uJWawpIWm2v0P9eCJqYtGaAg=
Subject key identifier:   23:1D:33:60:C8:8A:C7:C2:A4:22:0D:81:A3:5A:9E:04:29:DA:91:3F
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer:       /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial:       019EB958DC4E85242B1A6953EF130714F0E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number:          1409
Signing time:             Fri 12 Jun 2026 01:01:08 +0000
Manifest this update:     Fri 12 Jun 2026 01:01:08 +0000
Manifest next update:     Sat 13 Jun 2026 01:01:08 +0000
Files and hashes:         1: 70JHdnkKgsjKCsL3ulG1wQpZGp4.roa (hash: +7UX7nSd4wTkbsTAwwas6oJrJFj4JuJ4qtAQ6S+C8Y8=)
                          2: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: agwsAEe/vroO0aoYoOLSoo5Yuq7kCLVVTrvuRKf5EXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 01:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:dc:4e:85:24:2b:1a:69:53:ef:13:07:14:f0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
        Validity
            Not Before: Jun 12 01:01:08 2026 GMT
            Not After : Jun 13 01:01:08 2026 GMT
        Subject: CN=231d3360c88ac7c2a4220d81a35a9e0429da913f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:da:fd:d5:64:e1:e4:bb:b7:88:be:0d:e7:
                    d2:34:86:75:9a:64:e6:0c:48:78:73:4f:0b:c5:60:
                    7e:5f:86:ef:d1:2f:85:8d:98:a3:4d:e1:33:70:f2:
                    55:65:b3:74:0c:89:ed:02:f4:c8:6d:52:5f:62:dc:
                    7a:3f:a3:66:1d:9e:6d:54:72:2e:d9:62:2b:36:3e:
                    b7:80:bf:e5:c1:01:6e:0e:d7:6b:f1:f4:e7:ff:fa:
                    41:42:43:9a:8a:7b:ae:23:8d:b7:0b:8e:e6:75:60:
                    f5:80:41:8e:65:41:11:e9:05:e4:1a:73:34:2a:ba:
                    13:34:92:5a:6e:f9:8e:ab:97:93:4b:a4:91:a9:93:
                    85:97:39:53:a9:d9:a5:1e:8e:49:a2:92:b7:c0:d3:
                    58:26:bc:1f:86:f1:fe:00:fe:81:6b:33:23:7e:bc:
                    bf:92:3f:f6:8f:dd:b4:b0:bf:12:8c:48:6d:e9:ae:
                    f8:78:6b:77:86:73:21:d6:f2:9d:e4:f6:42:1e:77:
                    65:ee:4e:4f:56:b3:f6:cc:f6:cd:93:a0:46:74:be:
                    88:75:86:a7:b1:fc:8d:cf:1f:7c:95:30:3f:61:cd:
                    11:f1:24:c8:9d:88:7f:b1:7d:35:9b:92:cd:d8:0a:
                    89:c9:25:e1:75:fc:b3:98:e6:1d:65:65:cb:ed:7e:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1D:33:60:C8:8A:C7:C2:A4:22:0D:81:A3:5A:9E:04:29:DA:91:3F
            X509v3 Authority Key Identifier:
                keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e5:83:b4:05:69:ea:60:50:a6:34:96:f8:94:44:1e:2a:89:
         14:71:a7:f1:42:90:5b:f0:3f:86:70:c5:0c:af:99:83:d5:23:
         85:32:41:0c:6a:33:5b:6c:00:3e:79:7e:84:13:5c:78:6f:6c:
         39:16:b8:77:36:60:4c:7c:ab:a7:48:08:11:62:17:12:a7:84:
         27:e4:f5:44:03:42:7e:1e:25:12:f8:63:34:a4:ce:1d:f8:17:
         42:f4:21:7f:fb:c6:e3:29:41:9e:1e:13:41:2d:39:19:bd:c5:
         fb:fb:0a:c7:98:27:b4:93:97:3f:be:f6:d0:74:0b:01:b5:d0:
         b9:bd:2d:b2:17:f6:76:bf:93:f2:9a:91:bd:de:56:86:66:02:
         5c:ca:80:54:66:26:29:61:09:2e:4b:32:c3:73:bc:63:17:56:
         7f:42:4c:63:06:94:45:60:1e:1b:ea:68:18:4c:bc:82:bd:92:
         fe:d1:30:dc:fc:b6:10:59:59:8e:91:ee:34:89:c6:c5:79:53:
         30:27:cd:d1:2f:68:b8:13:4e:8f:a3:da:8b:e0:57:6a:d4:8d:
         b2:75:74:fc:1a:f6:2d:36:a7:3e:b0:f2:e7:76:75:20:48:c9:
         9e:0f:c5:2d:43:7f:f4:c6:d1:62:98:2a:3b:58:56:fa:9e:53:
         ac:c1:6b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:58:40 2026 by rpki-client