Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
File:                     jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft (raw, json)
Hash identifier:          Lgbbb4fRFgheR6h7pZIlYSVUaPS51MUom8IEc0GtUsE=
Subject key identifier:   5A:47:EC:2E:A9:A8:D2:44:9E:8B:82:B8:52:8F:7D:25:D7:6A:BD:E0
Authority key identifier: 8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
Certificate issuer:       /CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Certificate serial:       019F13AE9B211BD3D997C2BE15F38C2A5DCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
Manifest number:          1985
Signing time:             Mon 29 Jun 2026 14:00:37 +0000
Manifest this update:     Mon 29 Jun 2026 14:00:37 +0000
Manifest next update:     Tue 30 Jun 2026 14:00:37 +0000
Files and hashes:         1: 0DnLoCEjuk9LA09NU-Pj6xztVUg.roa (hash: eavdDhCPv5oKejhQ3E73neB1uw2GLpbCsVavoHAgMTA=)
                          2: 6kx7RSGU2eDdKnON8ulnwP0DoEM.roa (hash: mBB9XF7/IVEobcs0wBYP2r9M7bnVaTZmf6dDGW+5sqI=)
                          3: S79Gb1Wgs93M_TFXtKZ_MxtZ8rY.roa (hash: iXSwMrT+vGCWBRxTBdKA3OOmkhNM967qgIOHYI7fwnY=)
                          4: jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl (hash: GKrFC7xi7xcH7plkMA+TioL4fbLxo8cS3oNVJ4reYSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 13:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:ae:9b:21:1b:d3:d9:97:c2:be:15:f3:8c:2a:5d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
        Validity
            Not Before: Jun 29 14:00:37 2026 GMT
            Not After : Jun 30 14:00:37 2026 GMT
        Subject: CN=5a47ec2ea9a8d2449e8b82b8528f7d25d76abde0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:80:0f:10:e6:f8:18:35:26:6f:bd:8d:88:cc:
                    ed:d4:3f:25:36:b2:e6:ed:d7:ba:0b:15:3c:95:73:
                    37:f6:c1:46:cd:34:61:2d:2c:e1:9c:5f:6e:e2:d5:
                    6f:db:2f:8f:06:2b:7a:2f:81:65:d9:4e:19:cf:98:
                    03:6d:23:1e:9a:3e:d8:7e:08:fc:63:fc:f2:b2:f4:
                    b1:1b:da:9b:51:80:b4:7a:f9:e0:11:91:5e:cb:c4:
                    2d:b2:4f:71:c3:7d:66:83:ad:52:61:f6:fa:a0:f6:
                    98:41:9f:71:e4:fc:60:f5:f4:36:85:8e:59:0d:8d:
                    83:8e:93:db:ec:86:80:4e:0f:13:de:16:c0:02:ba:
                    94:6b:fe:48:21:2d:6a:2f:df:ec:10:e0:c4:12:8a:
                    cc:ba:3f:87:71:2f:fc:5f:26:83:a0:d1:ad:f0:e7:
                    08:be:61:e6:87:a8:34:2b:7b:80:5e:76:5c:b0:f0:
                    66:f7:5d:43:c2:d3:02:35:6f:28:1e:80:a7:01:80:
                    75:dc:29:4e:a9:21:3f:b6:0c:24:0c:5f:1d:03:b2:
                    37:da:fd:88:6a:83:56:b3:1d:cf:b4:65:2f:e5:74:
                    44:b8:9d:16:31:4b:8d:c1:ae:ad:ea:95:13:2d:40:
                    11:e4:46:bb:b9:85:7c:3d:fe:8e:29:09:47:21:73:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:47:EC:2E:A9:A8:D2:44:9E:8B:82:B8:52:8F:7D:25:D7:6A:BD:E0
            X509v3 Authority Key Identifier:
                keyid:8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:23:67:c9:63:72:fa:d5:7d:60:ab:d1:3e:9f:db:f8:d4:b5:
         b7:dc:e7:b4:22:88:4a:61:fa:95:95:b9:7a:79:b8:e4:63:ba:
         ae:17:ab:f6:c7:50:44:1a:2a:da:d8:85:9c:71:f7:ed:5e:73:
         fb:3f:e6:d7:cf:d9:6f:fa:4b:b5:22:76:36:45:1e:59:77:64:
         27:80:05:99:fe:06:a5:5e:3f:8a:00:25:fb:52:00:13:93:5c:
         03:a0:a8:f7:60:2b:98:2f:99:86:53:28:2a:48:18:f2:72:41:
         f0:ce:62:f8:04:27:fb:08:c7:8f:f4:43:54:52:9f:6f:4f:f9:
         73:c8:be:30:e8:76:c8:3f:5c:40:c6:c1:96:09:f0:7c:fd:5c:
         54:ad:01:3e:5e:3d:64:95:cf:3e:25:6f:98:37:ed:f9:e5:49:
         84:3c:30:54:75:ef:b2:6b:b3:d5:dc:cb:63:15:33:2c:8e:8a:
         f8:03:68:ba:67:f7:9e:d7:6e:27:51:0b:00:a9:80:1b:88:4a:
         d6:ff:5b:d3:1d:e6:50:49:5b:81:7c:6f:2c:18:45:68:d3:37:
         c7:38:b3:89:dc:b8:c4:0a:ed:c3:e1:3a:1f:05:6f:4a:df:4f:
         f6:60:a6:3b:8a:31:00:ab:e1:68:ae:7f:57:c6:c8:c6:3a:75:
         14:3c:a0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:45:17 2026 by rpki-client