Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File:                     pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier:          hd7PttBGqGagJbg218twCza1gFB+93ThuS9qvHo+brg=
Subject key identifier:   C8:6A:52:A6:0A:06:C4:62:11:3E:15:1E:3C:8B:4A:FB:94:0D:30:65
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer:       /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial:       019E9B1789FE8B668A9C7170DE6F8715AF58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number:          195F
Signing time:             Sat 06 Jun 2026 04:01:11 +0000
Manifest this update:     Sat 06 Jun 2026 04:01:11 +0000
Manifest next update:     Sun 07 Jun 2026 04:01:11 +0000
Files and hashes:         1: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: nRRfb9cXuR2iBobENB93IOUmbFR1SvPH3q+iGV2HybQ=)
                          2: r1BhnEtrGRHSnduVeLfXI1g7D8E.roa (hash: rXhnnWAjarg7mZ42xlNMXXH5o5Am7aLxQUdcs4vzEJg=)
                          3: zS0wzQLKSW80VXv0ZOoMSI3tvJ0.roa (hash: 2I/sSelw5VmBQuf5YaJq9EbH4rTmj1lcBC5rreXqiWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:17:89:fe:8b:66:8a:9c:71:70:de:6f:87:15:af:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
        Validity
            Not Before: Jun  6 04:01:11 2026 GMT
            Not After : Jun  7 04:01:11 2026 GMT
        Subject: CN=c86a52a60a06c462113e151e3c8b4afb940d3065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:d8:7e:a8:5a:56:76:24:14:7d:c8:ce:c2:
                    83:0b:c9:56:4a:a8:01:60:1c:c9:6b:63:fd:a0:7e:
                    cf:a0:15:a3:b1:50:dc:75:4b:04:17:62:fb:04:0f:
                    3a:d1:98:2f:80:e2:73:6e:ca:8a:01:f2:da:1b:81:
                    38:fb:14:69:13:ee:28:aa:b0:31:80:e6:44:e3:36:
                    b8:73:c4:d7:cb:7c:b6:c1:a8:78:60:5c:30:97:66:
                    84:52:d7:88:e1:b5:78:c3:d6:bb:7e:f3:b0:2f:6f:
                    28:2c:ef:29:8c:ed:4b:cc:78:8c:a0:8f:e1:85:ed:
                    bd:4d:cb:e1:46:29:09:07:d9:30:48:92:46:c6:b8:
                    27:df:43:f4:74:46:c7:18:92:5b:c5:1b:0f:f1:b6:
                    5b:d3:ab:fa:60:fa:ee:95:9d:47:0c:87:f9:d2:8d:
                    88:65:77:d9:d6:b7:b6:74:8f:04:d7:24:0e:d3:54:
                    fc:ff:e9:93:68:b0:24:7e:aa:58:f3:a2:b4:58:56:
                    60:4d:33:49:54:e5:09:1d:24:ec:85:67:ca:eb:d8:
                    17:c9:95:91:e7:35:79:21:9f:b6:4f:15:af:01:0a:
                    45:4a:5e:9b:31:e0:61:84:32:d6:eb:0c:88:21:f7:
                    e8:dd:5d:60:00:62:33:4e:68:25:94:40:9e:d0:05:
                    cf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6A:52:A6:0A:06:C4:62:11:3E:15:1E:3C:8B:4A:FB:94:0D:30:65
            X509v3 Authority Key Identifier:
                keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:77:24:89:72:89:2e:5f:ba:d7:39:7c:96:cd:16:51:f2:31:
         11:a9:1d:1e:3c:04:05:dd:5d:96:06:6a:b4:e4:99:19:2a:43:
         5c:7e:dc:ef:3e:d2:4d:ac:5c:1a:f7:5e:48:f3:ec:d1:57:dc:
         9e:59:26:2a:20:46:8a:b5:bb:89:de:00:dc:a8:5f:e1:b8:d2:
         0f:79:95:ef:ca:af:14:36:1f:73:8a:2a:06:64:76:4f:43:fc:
         16:c3:f0:0c:d2:94:23:6f:c6:6f:d5:d5:de:04:41:77:4b:5f:
         ff:6d:fc:4f:8f:13:9c:9d:d5:19:06:42:1a:14:b9:c0:04:99:
         ca:29:a8:8c:6e:07:e6:8d:06:c2:bd:83:fe:40:50:40:15:54:
         09:6a:94:e4:f1:9c:d6:d8:1d:52:2f:ee:4a:1e:45:4f:c9:37:
         70:3a:30:47:f1:e9:3b:ea:06:b0:8d:c9:0b:df:9a:00:07:a9:
         f9:2b:72:99:29:b2:24:b4:bf:4b:ec:8b:51:1c:df:3a:f8:04:
         10:6b:8c:7e:1a:29:e6:f3:59:36:59:3f:55:bf:81:80:c7:e3:
         f3:12:02:d6:62:2f:f3:0b:ca:81:73:59:a0:97:60:6b:5b:92:
         a7:fc:36:29:ba:d5:4e:21:04:e9:9a:21:fb:60:e3:1c:80:d6:
         8b:e1:7f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:17:32 2026 by rpki-client