Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
File:                     Jm8xrRcB38ohu_SmXgfyXBzyssg.mft (raw, json)
Hash identifier:          oOqGDP7tihRCeId0MjvAD3pxy9RZJnvI/bvPkLPvkIM=
Subject key identifier:   07:0C:A2:5F:BD:5D:36:74:DC:FA:DE:B6:9A:E4:A6:D6:EA:E7:BF:FE
Authority key identifier: 26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8
Certificate issuer:       /CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
Certificate serial:       019F190CA61087ECAAE5592B605215183FE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
Manifest number:          0A05
Signing time:             Tue 30 Jun 2026 15:01:26 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:26 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:26 +0000
Files and hashes:         1: Jm8xrRcB38ohu_SmXgfyXBzyssg.crl (hash: ESQ+M/HjaLr8JWd1vugBGezwNyHXRRJPgNDcCnaUrKs=)
                          2: bZ2MoSlfcA_Bg7BrRKE2leLFknc.roa (hash: mlGeYAkzIiaMQu2uNg0bx5zSdfDctbxIGGNO6WnD0zI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:a6:10:87:ec:aa:e5:59:2b:60:52:15:18:3f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
        Validity
            Not Before: Jun 30 15:01:26 2026 GMT
            Not After : Jul  1 15:01:26 2026 GMT
        Subject: CN=070ca25fbd5d3674dcfadeb69ae4a6d6eae7bffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:16:19:2f:4d:7a:83:c7:8e:8e:1d:6b:33:
                    66:f2:b3:2d:65:97:30:91:44:e9:2b:86:10:d3:ba:
                    d0:5d:ff:d8:04:65:e4:9d:4a:4a:97:f3:bd:84:7a:
                    08:1e:ff:17:3e:da:89:56:97:58:24:3d:65:bb:66:
                    e0:37:4c:73:c7:b8:b0:8d:60:11:cb:53:64:e0:37:
                    92:74:5d:5f:8f:82:8a:5a:72:c8:4d:bb:52:08:17:
                    aa:a0:f4:68:ba:0f:fd:d9:a5:33:e4:eb:fe:71:26:
                    6c:42:76:ba:d9:70:c7:40:75:98:4d:99:d5:cb:ed:
                    ce:c2:aa:d1:37:b2:4b:3c:5c:a5:ef:2d:80:d8:be:
                    4a:7a:84:9f:36:82:87:f1:40:8b:3a:9e:45:d4:25:
                    d0:5e:10:d6:3e:bb:42:fb:c1:ad:b2:97:aa:7a:59:
                    d1:6e:37:10:ef:b7:ed:7e:4e:4c:6f:9d:85:34:82:
                    ec:a1:c4:4a:4d:c4:66:26:f7:a0:ec:00:77:d1:e2:
                    f7:82:94:40:4c:4b:9a:a1:3f:3b:06:e3:e2:50:15:
                    a3:c6:11:7b:84:42:d1:55:c6:a6:f7:b6:76:86:a3:
                    6f:51:fc:82:b9:85:36:81:4e:80:ea:af:42:2e:04:
                    d2:45:43:e8:e3:4c:54:2f:9d:8a:de:01:3a:e2:61:
                    86:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0C:A2:5F:BD:5D:36:74:DC:FA:DE:B6:9A:E4:A6:D6:EA:E7:BF:FE
            X509v3 Authority Key Identifier:
                keyid:26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:85:43:cb:e8:0f:c6:00:73:d3:c2:52:dc:fd:84:d5:d5:87:
         b8:5d:aa:42:73:57:a9:fc:29:f4:ca:2e:76:73:6d:a7:0f:ed:
         b9:05:d0:a6:6c:ae:b2:18:49:5c:a2:18:b8:78:7b:3d:e4:8d:
         dc:2d:0f:4b:d4:88:dd:18:c3:1e:34:d8:e4:c3:df:98:e2:86:
         3d:c1:1f:06:89:8c:3e:04:ed:a7:93:f6:cf:ca:2b:4e:63:96:
         9b:0d:27:ad:3b:32:6b:b6:16:bc:0f:16:21:9f:bb:59:e5:e6:
         9a:95:1c:b9:3f:72:f1:20:d6:08:d0:00:0a:55:77:d9:fa:53:
         91:f4:93:1f:c1:58:13:5a:3d:cc:cd:f8:65:ef:fa:fd:9d:c2:
         75:16:2d:52:b7:5a:02:cf:a4:c1:8d:da:8f:79:76:e8:6a:c6:
         75:a2:c9:ea:1a:63:5a:d5:34:88:ff:83:6b:dd:3b:2e:a8:53:
         9e:7e:a3:36:32:4c:19:c2:62:31:43:49:e4:54:14:c9:bc:8a:
         b6:bb:26:ad:3b:db:96:07:7a:b3:71:62:33:91:1b:ad:13:a0:
         71:b7:61:5c:ce:e2:2b:3f:aa:1c:66:cd:7f:06:b4:1a:63:c1:
         00:e2:ec:cc:93:95:c2:4a:30:48:6e:3c:10:a6:a9:87:1e:4b:
         ec:5f:31:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:19:15 2026 by rpki-client