Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File:                     jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier:          ol8t3UD7uDK89WcRnLefqJM/6TeARgeImELHDjr8AVE=
Subject key identifier:   A3:43:57:FF:C5:D6:3E:4A:E6:A8:13:48:B0:14:87:EF:78:72:AB:94
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer:       /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial:       019E90931F8578842D978218D8BA6D803797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number:          0E3F
Signing time:             Thu 04 Jun 2026 03:00:21 +0000
Manifest this update:     Thu 04 Jun 2026 03:00:21 +0000
Manifest next update:     Fri 05 Jun 2026 03:00:21 +0000
Files and hashes:         1: KyIkZp5v8qniJmGJJW64WpulkNA.roa (hash: 1AsKxqyIstssG9Pu2llDF8+d4jVczV5NqO2oa4GLJAk=)
                          2: bMwuPcwxqY9GWDGFGxnpBignWiw.roa (hash: 6jn0f3vV9KnwoCtSt2OI78m/Tno09+LsXBuJK2Ylj8E=)
                          3: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: GZd/KT/z1C0bxa1Ygwl9604MWRp9rVxsW0uZN8xdWtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 03:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:90:93:1f:85:78:84:2d:97:82:18:d8:ba:6d:80:37:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
        Validity
            Not Before: Jun  4 03:00:21 2026 GMT
            Not After : Jun  5 03:00:21 2026 GMT
        Subject: CN=a34357ffc5d63e4ae6a81348b01487ef7872ab94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bf:c3:76:5c:28:c6:37:b6:29:11:16:6c:f3:
                    ad:76:5b:7d:da:33:66:0e:de:f6:c5:0c:b0:f2:02:
                    ec:93:ba:83:ec:0b:44:b1:a6:30:3f:89:44:d0:d3:
                    85:8d:c9:e0:7a:db:c4:71:c2:04:f5:47:57:45:78:
                    8a:f8:c3:79:98:26:cf:17:bf:b1:ef:31:df:d9:e3:
                    4a:35:8e:ac:70:a0:c1:9d:0e:6e:e3:ec:6e:a9:15:
                    08:4b:dc:91:74:c8:90:ae:3b:e8:a5:de:5f:38:d0:
                    19:97:05:f7:22:05:eb:f5:8c:f0:90:d9:2e:bd:e6:
                    01:dd:1f:f9:49:da:26:83:44:f7:db:be:28:79:0d:
                    41:ae:a2:ce:64:30:52:e7:a7:92:da:71:2b:f3:83:
                    f2:61:eb:1c:50:b0:6b:c5:de:e3:fa:5c:9d:8c:bb:
                    0a:73:4c:9d:b9:bf:85:e3:90:cf:9c:b2:3f:83:3a:
                    f5:42:b4:20:b8:1c:97:11:be:e3:23:38:48:f2:cb:
                    6f:fb:f9:95:29:68:ff:75:86:7d:89:ef:65:a9:f9:
                    9f:a7:04:62:d0:aa:d2:04:47:af:16:41:cb:e2:56:
                    4f:35:c5:5f:da:5e:30:83:45:82:ed:89:e3:2a:7d:
                    10:1c:53:10:f7:ea:99:a1:3f:12:71:02:16:68:ca:
                    39:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:43:57:FF:C5:D6:3E:4A:E6:A8:13:48:B0:14:87:EF:78:72:AB:94
            X509v3 Authority Key Identifier:
                keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:fc:d0:56:0a:4f:06:74:92:82:12:a4:02:cf:e1:87:09:1a:
         4c:41:23:cc:86:9a:97:68:3b:69:44:a5:2c:42:4c:d0:84:d3:
         e9:09:2a:bc:81:23:f8:64:7d:c7:dc:47:7f:d7:07:01:5b:71:
         70:89:fd:96:77:5c:d5:99:ea:6f:01:b5:c4:bf:7c:f6:98:c1:
         5f:70:9c:0b:97:19:f8:ab:cb:7e:48:31:04:1f:5c:09:3f:b7:
         82:a2:20:b3:67:51:d2:32:98:c8:02:da:19:e4:53:d5:59:0a:
         7e:66:69:fd:43:3a:59:1e:7f:59:85:51:f9:00:92:d2:b4:bf:
         d7:59:3b:5b:7e:d2:9f:da:27:ab:c6:6e:fc:af:cc:9e:cc:62:
         67:df:7f:20:0e:a2:0e:cd:11:dc:63:c8:85:57:96:96:10:ab:
         f4:5e:e7:ba:ef:ff:92:99:bd:12:9d:d9:09:7a:70:c9:b8:14:
         ac:db:90:a8:a5:d6:d5:f9:ed:de:19:94:cc:d2:6e:fb:34:3a:
         65:bc:25:c8:aa:67:e8:8f:42:04:3f:c2:0d:2f:d5:76:ef:36:
         18:25:ea:49:ac:1d:f0:c9:85:f8:4d:df:69:75:f9:f7:9c:32:
         44:c1:7b:22:7c:8e:81:24:9a:d9:c5:f4:88:19:9e:77:c6:61:
         1c:f9:74:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:18:54 2026 by rpki-client