Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
File:                     _jHd7yXZbISwAaKsUEewTgYKCsM.mft (raw, json)
Hash identifier:          TioBk5kah+H18LM7ScniWlXt8tTTPpyvGM7zR/Y/cpc=
Subject key identifier:   80:97:E1:F3:23:57:29:19:FF:89:B6:EC:33:1C:11:AE:90:04:13:F8
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Certificate issuer:       /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial:       019E91A657D990AFD42F1D6619B59FF6DFFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
Manifest number:          1944
Signing time:             Thu 04 Jun 2026 08:00:58 +0000
Manifest this update:     Thu 04 Jun 2026 08:00:58 +0000
Manifest next update:     Fri 05 Jun 2026 08:00:58 +0000
Files and hashes:         1: MBje2Kaa62IBDG3vLdQ11jbu-BY.roa (hash: gjY1RtH2j/aQua697MsSq0fqSF6zUpGLdhWZ8DhMdzU=)
                          2: Ww9xlTTYnd90caDgEeVmTVfm-BE.roa (hash: 7JRO1QHni0n7t5LFba599MfSp8my+dFKoYt3fvY4Y8A=)
                          3: _jHd7yXZbISwAaKsUEewTgYKCsM.crl (hash: wQaTfZcht4+jRc7ChLUpNqxDIOiXaH+oJYrocFg+JTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:a6:57:d9:90:af:d4:2f:1d:66:19:b5:9f:f6:df:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
        Validity
            Not Before: Jun  4 08:00:58 2026 GMT
            Not After : Jun  5 08:00:58 2026 GMT
        Subject: CN=8097e1f323572919ff89b6ec331c11ae900413f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b8:b7:64:d5:cd:30:81:18:0c:3b:1c:2c:9a:
                    c8:15:e6:5d:49:ef:d5:ab:d1:85:e1:99:11:0e:20:
                    51:a9:43:57:1c:a1:21:21:d9:59:ef:06:c0:a4:d6:
                    da:44:73:17:cb:94:87:f7:0b:7e:56:74:6a:e2:25:
                    ea:60:67:f8:18:b8:34:aa:7b:f2:d5:27:31:66:4d:
                    c7:4a:b9:82:da:5f:0d:aa:89:15:3b:6c:de:39:d7:
                    de:9f:15:01:7d:3d:93:e9:a7:12:4d:33:41:9d:d7:
                    5d:c3:0c:98:8b:0a:8c:0d:c3:9d:f5:f5:ba:42:0f:
                    24:c4:1c:1d:4d:0c:80:37:be:0e:55:19:e5:84:0a:
                    91:dd:98:80:74:17:ff:49:62:a7:3c:a9:2d:0d:ed:
                    f9:7a:55:41:58:a2:be:aa:c8:46:a9:3d:b2:de:2f:
                    c5:2c:1f:5a:74:2c:0b:f5:d7:d6:2c:d3:6c:23:d3:
                    8a:49:4f:8e:d6:3d:60:c6:ee:66:0d:b9:d8:80:53:
                    d4:24:72:80:c2:41:29:d3:53:78:57:78:3a:93:1f:
                    3a:f0:3f:b9:2e:ee:29:6a:88:58:a8:7f:ea:b3:b5:
                    76:a0:db:4c:b7:18:df:56:93:f7:b5:07:bb:ae:95:
                    b2:44:af:7f:4c:21:7f:0a:c9:4a:5d:fb:61:b6:d6:
                    20:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:97:E1:F3:23:57:29:19:FF:89:B6:EC:33:1C:11:AE:90:04:13:F8
            X509v3 Authority Key Identifier:
                keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f0:6a:36:f6:ff:89:ce:7e:c0:64:7c:bd:91:98:68:b6:71:
         83:69:7a:40:53:f1:3f:3a:03:af:d1:17:d4:9b:e5:38:e7:bd:
         b0:78:b1:a0:b3:b4:9a:c8:e7:2a:6a:b9:53:99:79:09:b7:ed:
         2f:be:6f:c5:a8:35:00:ea:81:5d:c9:ad:5f:29:de:08:43:73:
         70:6a:c5:5f:1f:f3:e9:57:2c:2e:99:81:3c:e9:04:4a:f1:2b:
         11:15:81:3b:98:e4:73:30:43:42:2f:df:53:db:ba:0b:6a:43:
         f4:dc:52:3e:8a:31:31:2a:99:a1:e5:09:15:a3:3b:58:97:12:
         38:d8:f7:f5:f9:3b:fe:e3:a6:6b:a1:54:5e:5e:70:59:03:6e:
         ca:8f:7a:0a:17:cd:9a:4a:99:5a:37:9e:89:c3:04:12:69:f3:
         cb:fc:91:0e:7d:14:d7:42:b6:05:87:a9:77:f6:9a:2b:33:37:
         05:59:a2:ae:76:4d:c8:30:91:63:ce:ca:53:6b:00:1c:22:89:
         68:7c:f3:34:ca:53:76:4c:4b:85:fb:ff:03:12:a6:e0:be:7b:
         5f:22:3f:7d:b0:f2:ec:94:d4:a2:44:1a:ca:40:6b:27:4c:39:
         15:6b:14:39:93:78:23:fe:67:a6:e7:4a:09:42:1e:32:49:f4:
         ec:c7:2d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:24 2026 by rpki-client