Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
File:                     jcayOVFjzkewNvrgKnH5SIBL9V8.mft (raw, json)
Hash identifier:          9rTC2vJvFvo742bnDG4inf558gkQXvg4yevrrcf6Bio=
Subject key identifier:   56:39:19:79:A8:2C:9F:46:8E:9E:5C:4E:CA:1D:A3:0D:76:37:2E:68
Authority key identifier: 8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F
Certificate issuer:       /CN=8dc6b2395163ce47b036fae02a71f948804bf55f
Certificate serial:       019EB845BC172B94A9E1369D489E86938061
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
Manifest number:          C1
Signing time:             Thu 11 Jun 2026 20:00:38 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:38 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:38 +0000
Files and hashes:         1: UqSLybQPqtyf12w058GGJrCrwlE.roa (hash: ay496TJzckN/WV79yGM4pv+K/GRv47GhhBgHEduwC9o=)
                          2: jcayOVFjzkewNvrgKnH5SIBL9V8.crl (hash: NEH5klbfiDjz/lzpM3Bsq3Y9QvJ4ANB/iZNRNx5BC8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:bc:17:2b:94:a9:e1:36:9d:48:9e:86:93:80:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc6b2395163ce47b036fae02a71f948804bf55f
        Validity
            Not Before: Jun 11 20:00:38 2026 GMT
            Not After : Jun 12 20:00:38 2026 GMT
        Subject: CN=56391979a82c9f468e9e5c4eca1da30d76372e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d3:9b:34:90:98:4c:75:1f:41:02:0e:51:13:
                    d5:12:ee:07:99:d1:bc:0e:73:08:a8:ed:f0:1a:e1:
                    d5:0e:a3:9c:4f:d5:1e:2e:be:cb:79:ea:0e:14:95:
                    d4:c4:04:3f:37:89:2c:f4:bd:d1:83:fb:e6:b9:db:
                    89:71:74:4a:2f:5f:e5:ca:55:90:5a:d6:a1:df:a5:
                    21:bc:fc:df:3d:14:32:ae:27:af:bd:55:0a:fc:3b:
                    81:07:7a:be:cc:a5:40:ee:6f:95:16:43:3a:4d:1c:
                    29:b1:cc:f0:44:12:6d:83:ac:ba:f8:2c:56:6f:74:
                    ba:85:12:53:46:63:8f:31:d2:42:02:60:4f:98:a1:
                    04:5b:fd:ed:3e:86:30:99:2d:25:05:e7:c0:14:95:
                    4b:46:ee:bc:40:19:a3:a1:a8:09:b9:d4:24:4a:bf:
                    67:38:2c:20:c1:55:45:85:2c:34:dc:42:47:f4:d2:
                    ba:dc:4f:a2:13:70:c0:78:27:d6:66:d5:47:f6:cc:
                    7e:cc:2b:12:91:05:ab:3e:ac:ad:10:5d:cc:a8:6b:
                    77:15:2e:c9:bb:3c:a9:d1:2a:94:50:42:cc:d6:1a:
                    e8:e3:e4:08:93:ef:f0:3a:f7:de:d8:45:a0:a1:56:
                    9d:88:02:ec:2d:4c:2a:61:fe:5d:89:f9:68:9e:8d:
                    a3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:39:19:79:A8:2C:9F:46:8E:9E:5C:4E:CA:1D:A3:0D:76:37:2E:68
            X509v3 Authority Key Identifier:
                keyid:8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:88:4b:f1:c0:07:df:4b:54:9a:a2:bb:f2:a5:74:e1:e0:ca:
         0c:85:2f:33:6a:67:76:57:af:f2:9d:62:00:90:9e:d7:23:69:
         30:72:8e:e2:19:82:a3:2e:3c:05:36:ae:01:0c:2d:64:71:1d:
         f0:ff:d2:d2:56:b5:a5:51:fa:3b:4f:75:88:13:27:e4:a4:18:
         e3:ae:10:22:07:64:2e:63:72:43:0e:19:20:66:c3:99:ad:f0:
         27:a6:ac:47:ca:3f:32:61:a6:30:10:46:5d:b5:5f:b2:1a:1a:
         50:8c:6c:00:65:de:65:94:cb:52:8f:47:66:c1:b3:96:15:60:
         1e:e3:92:8b:8b:35:a4:53:49:50:d1:f5:be:24:af:8a:8a:c7:
         ef:3f:b2:49:dc:cc:12:22:a8:32:74:57:8d:81:72:6b:51:e0:
         db:75:c4:ad:24:f3:2e:6e:67:d9:f2:52:46:bf:bc:c0:a8:ed:
         02:fa:86:1f:3e:74:51:a1:fa:d5:a0:da:6c:62:4e:1b:1e:e9:
         5b:c5:de:ee:d8:b8:76:45:66:c8:43:cb:78:db:ac:ec:a9:6e:
         ff:ff:3d:36:e2:03:5e:fb:84:2c:21:33:23:c3:4c:85:61:5f:
         e6:91:6a:f7:4f:f7:e0:6a:5e:59:d7:b9:46:f1:02:cf:a2:8a:
         1d:a2:f1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:27 2026 by rpki-client