Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
File:                     JKmv_35_6wbhjeksJzVjuYAzMWs.mft (raw, json)
Hash identifier:          Uc+OrI/OTFnvZB8xwDSilqQnYjGzWENP+ThbDs2whfw=
Subject key identifier:   9C:14:25:F7:EA:A9:AC:85:7D:E6:90:F9:19:D9:8C:09:28:A8:EB:95
Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
Certificate issuer:       /CN=24a9afff7e7feb06e18de92c273563b98033316b
Certificate serial:       019EB92218B063F4E32135B9236B73B6A300
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
Manifest number:          0442
Signing time:             Fri 12 Jun 2026 00:01:19 +0000
Manifest this update:     Fri 12 Jun 2026 00:01:19 +0000
Manifest next update:     Sat 13 Jun 2026 00:01:19 +0000
Files and hashes:         1: JKmv_35_6wbhjeksJzVjuYAzMWs.crl (hash: maNERU0hEzl3y/ywH6razNCEs4lg8RCgZsyXNIpLG8Q=)
                          2: OcGLgpdPjEji6rhRKA3ndoUPng8.roa (hash: uMbYxwC7JX58tZin/DJJELLb9OvFN38e9zDdfuZgxac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:22:18:b0:63:f4:e3:21:35:b9:23:6b:73:b6:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b
        Validity
            Not Before: Jun 12 00:01:19 2026 GMT
            Not After : Jun 13 00:01:19 2026 GMT
        Subject: CN=9c1425f7eaa9ac857de690f919d98c0928a8eb95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:06:f6:fd:de:38:9d:81:a0:7a:94:43:da:31:
                    6f:6d:c4:5e:ef:dc:34:a0:7d:33:8f:97:43:64:0c:
                    c6:e3:4f:9b:83:48:82:57:66:62:1f:5d:aa:fe:2e:
                    83:4c:97:27:f9:0f:17:b6:05:1b:99:aa:4a:25:0e:
                    92:f6:ae:0a:62:ff:9e:21:e9:fc:e2:a2:28:82:ec:
                    82:ed:5c:5a:cc:21:52:ff:fd:2b:68:3b:44:91:78:
                    8f:e6:d5:07:f2:39:25:6e:ad:56:a4:5c:3f:88:aa:
                    21:5a:08:18:39:83:1f:27:6a:6a:87:d8:25:82:3c:
                    04:75:55:f5:60:56:6e:b6:f9:d4:ca:93:85:36:d3:
                    b4:6b:7f:36:d2:e5:6a:db:4b:8b:fa:f1:9c:72:6b:
                    c9:67:a3:b2:a2:cf:16:b5:c9:8d:44:54:9c:6b:a5:
                    93:43:fb:da:86:93:1b:4f:f5:e4:6a:2b:e7:9c:2b:
                    68:99:2a:f4:bc:1d:41:ef:41:21:76:44:cf:2c:c0:
                    94:25:d1:30:77:3c:27:1e:82:4c:30:03:c0:24:42:
                    d3:51:4a:82:80:b3:ea:1f:ff:0d:3d:17:59:63:bf:
                    85:9a:de:b7:04:bd:df:71:84:57:73:3b:43:e9:16:
                    ce:9c:e5:6f:54:21:ab:64:66:64:4c:08:10:e7:f9:
                    13:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:14:25:F7:EA:A9:AC:85:7D:E6:90:F9:19:D9:8C:09:28:A8:EB:95
            X509v3 Authority Key Identifier:
                keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7a:9c:4a:30:e4:63:05:20:cb:4e:26:e9:4e:e6:b8:d7:7b:
         91:aa:ef:83:34:29:31:b7:8f:a9:dd:55:d5:fc:26:d2:f4:8a:
         77:ef:13:f1:2b:32:53:c8:30:4e:58:46:a2:52:41:ff:ec:34:
         0a:ad:ff:1c:61:d0:ab:7c:5d:65:a1:e3:8b:0c:ed:69:94:5d:
         6f:27:a4:62:53:83:f8:56:17:75:fe:1e:b2:55:1a:82:22:cd:
         8e:78:a8:bc:85:7a:26:24:c3:73:a8:3c:8b:4e:b1:27:06:e4:
         d3:88:f8:dd:2f:d9:a6:b0:94:eb:9f:96:ce:c3:a6:bd:6f:e6:
         e6:5b:f3:f1:f4:20:61:ba:4c:a6:b0:68:99:22:1c:67:33:e3:
         c2:89:79:cf:5a:c3:d0:43:ba:6e:79:6d:ad:b2:63:17:5d:31:
         c7:48:ff:47:04:49:ec:95:9e:1c:65:c4:cc:13:5b:6d:5f:73:
         a9:dd:9b:83:df:c0:81:fc:26:b6:69:50:e3:29:0d:88:9b:a2:
         bc:e5:31:a8:d5:a4:74:b7:ce:81:31:45:0c:85:f4:0a:d6:03:
         e6:ff:26:63:ec:46:b5:1a:43:73:fa:69:8c:dd:24:2c:59:e7:
         fe:57:c7:fa:b2:21:ac:3d:df:da:2a:92:78:7c:ed:ef:74:e1:
         e4:c1:70:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:44:50 2026 by rpki-client