Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
File:                     JpildU3unu9vIkViy4I5rIvbBbg.mft (raw, json)
Hash identifier:          IDuK7pJZSKbVqUtZ0bsULGmfTOGz4LbVcC7c1SmmuAs=
Subject key identifier:   B8:57:98:64:A3:02:FE:A9:4E:56:E8:2A:B6:42:B3:FC:0F:AA:E0:03
Authority key identifier: 26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
Certificate issuer:       /CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
Certificate serial:       019F0A74EAB234B807573F1A7FEA939C78B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
Manifest number:          1980
Signing time:             Sat 27 Jun 2026 19:01:02 +0000
Manifest this update:     Sat 27 Jun 2026 19:01:02 +0000
Manifest next update:     Sun 28 Jun 2026 19:01:02 +0000
Files and hashes:         1: 1KySW6Ro-K6j0ocElPKZRtuE5Ao.roa (hash: dWyTpT0UPgzBjyIAGYHP0a0Cm+BwtjLbW4C9xN5de58=)
                          2: JpildU3unu9vIkViy4I5rIvbBbg.crl (hash: GlSMMqi5QZnpznZyV8n2un99Cw33KuiFQLQstZ2GGHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0a:74:ea:b2:34:b8:07:57:3f:1a:7f:ea:93:9c:78:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
        Validity
            Not Before: Jun 27 19:01:02 2026 GMT
            Not After : Jun 28 19:01:02 2026 GMT
        Subject: CN=b8579864a302fea94e56e82ab642b3fc0faae003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:29:db:dc:75:c6:68:0b:a5:eb:df:63:98:00:
                    b3:3e:20:1c:b8:5e:93:bf:3a:80:92:35:91:c7:d0:
                    44:40:01:3e:2b:fa:be:e5:6b:42:81:0f:e2:f7:42:
                    25:f8:0e:d0:54:94:ca:fe:77:30:02:a9:0f:13:2e:
                    bf:51:f1:da:0c:d3:ac:90:45:b8:be:d1:52:ab:5a:
                    0f:2e:8f:4f:d6:bd:cf:9a:b2:50:f4:4a:ba:d3:35:
                    51:24:a3:ef:4c:e8:59:a2:9c:b7:62:31:de:1a:2c:
                    ea:0c:3d:80:c2:8c:9f:ee:f0:6b:ec:d1:a7:b6:e4:
                    b3:1b:62:fa:49:d5:45:46:3c:59:2b:86:f0:12:1d:
                    56:12:7b:91:d0:ec:0a:50:fd:dd:86:e5:94:29:04:
                    79:7e:d7:99:fb:86:d2:85:68:70:e5:07:cc:4f:e4:
                    45:85:19:c7:2b:24:1c:60:f1:17:1d:b4:80:06:22:
                    9f:62:09:a7:c6:3d:f1:0d:8b:87:1a:e4:08:ab:86:
                    1a:72:b2:e6:87:14:f8:aa:94:3b:ce:f9:ce:88:52:
                    ff:23:0d:26:8b:08:bd:61:ae:17:51:c6:f7:6f:dd:
                    45:25:5b:56:15:26:38:97:d8:4d:28:9b:c9:e9:fc:
                    24:a0:0d:6a:90:b7:f4:d7:e4:bc:04:fb:f2:93:6d:
                    3e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:57:98:64:A3:02:FE:A9:4E:56:E8:2A:B6:42:B3:FC:0F:AA:E0:03
            X509v3 Authority Key Identifier:
                keyid:26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:35:ce:43:df:a0:19:fd:9f:27:25:f3:53:1d:4e:42:c3:11:
         79:d1:66:57:9c:fe:e2:36:c0:1b:f5:be:ab:ed:93:09:64:31:
         1d:0f:30:81:30:e0:25:ff:fa:c5:0f:c3:d7:42:c5:30:da:11:
         b0:38:86:6c:12:16:aa:aa:d1:92:87:7b:c3:b8:cd:e3:ff:07:
         6f:3b:16:55:a8:0e:27:41:91:75:6b:28:cc:17:60:31:15:ec:
         cd:92:b4:9c:58:fb:cb:05:9a:05:77:05:44:85:97:b2:72:c0:
         7e:48:b0:07:bc:29:2f:b8:72:4c:3c:53:6d:ca:6e:3f:cd:b1:
         2e:a0:19:2b:fe:d4:93:23:6a:c3:13:37:1b:8d:92:08:b7:85:
         f4:53:a4:74:07:73:0d:a0:55:b0:a2:65:a0:ab:ab:8d:f1:f9:
         97:87:f1:82:b7:81:5d:cc:fa:4a:f5:e8:d4:3e:04:b0:82:a7:
         cf:af:7f:c8:4d:32:5b:2d:1d:5b:d5:f2:7b:4a:aa:80:ad:4c:
         ad:70:ea:02:81:4c:f5:4a:71:c3:91:d4:f9:cb:2b:fe:b1:d3:
         75:7c:f8:8f:09:87:15:84:c4:70:67:2c:81:b6:5e:75:b1:22:
         6a:96:25:d6:8c:28:c1:e1:2a:f7:0d:e7:9f:9d:53:4b:ca:f0:
         c4:7f:44:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 22:50:38 2026 by rpki-client