Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
File:                     JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft (raw, json)
Hash identifier:          hI2+1m8EPmJpl0DdR5frMxEpof8Mys98915w0Y7lU/0=
Subject key identifier:   61:99:D9:22:A9:0C:8E:90:CF:78:B1:41:E8:94:C5:AB:63:A3:D4:2E
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Certificate issuer:       /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial:       019E7D0C754CA36EDD26A2AAA1098EB24537
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
Manifest number:          15EF
Signing time:             Sun 31 May 2026 08:00:28 +0000
Manifest this update:     Sun 31 May 2026 08:00:28 +0000
Manifest next update:     Mon 01 Jun 2026 08:00:28 +0000
Files and hashes:         1: 6vOB_0kXFWOVeiswTba6ofOe3mU.roa (hash: G//GVAi7wgZlWL5aVcz26sd32lr8++Cd1gJc7XKITXk=)
                          2: Cqg-JLEFS3E3SQW_nbJXY_G0YvQ.roa (hash: DReEkN/hfTnnC9nhnsHSBiwG7Yl2oVS+UgMhg+IV99A=)
                          3: Jm2SNeqHZIz2ovLrQw9-PaeR5fw.roa (hash: 1b9MEAq3rxpcmlWoQbWnEniHetzdqv2h7VzBROMD4dA=)
                          4: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl (hash: Ex80KayZK/XNC3TtShfHrJfrKhmzSJ+7qoraefD2Vv4=)
                          5: K5rhtCQez3UrTdf0FosqAmDCYa0.roa (hash: IQvbhZSaJLy8W0x8oiGtpYn5Yz5K/bEM7HiYoMzUocg=)
                          6: WVLTQr1-K-aLKLtSSfyrC4NsyC8.roa (hash: OIwtFNjzelXJFPdqGmasyx/BT4Vju2a4sVYVymTpVmo=)
                          7: afsk4joDpHnoJv62lZtjXF1VD34.roa (hash: 1O4prDUnlN0kF0HrU0LRJ6fiYKcIRVrdQ3x8VBal8ls=)
                          8: eBHffMc_OQgLVRhR9CGd779MAbw.roa (hash: qhXCq6p6fkTw8jwxWPhjXqKYMhPmkunhkqWsFwzUDmY=)
                          9: hiOQSBdS2DRbOgKFoMoP7iKhKPs.roa (hash: j5f0I5DLadnNwscMqYSYZ5CP+jl5XYXJweeFVga4Wow=)
                          10: xzHa0sSob7avUhmZAKHArZaPoGs.roa (hash: T9wW3p6GuWmjcvanTN/1Iwt9mSVZHM51FI5kv5kY1Z4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jun 2026 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:7d:0c:75:4c:a3:6e:dd:26:a2:aa:a1:09:8e:b2:45:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
        Validity
            Not Before: May 31 08:00:28 2026 GMT
            Not After : Jun  1 08:00:28 2026 GMT
        Subject: CN=6199d922a90c8e90cf78b141e894c5ab63a3d42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b3:bc:01:18:32:e3:95:78:d2:12:55:82:92:
                    a0:f3:c3:46:5d:a7:c7:fd:10:d4:a6:c7:49:58:33:
                    36:3b:ea:a3:77:97:dd:31:b0:e0:d9:b0:34:8c:21:
                    92:5c:5c:ee:be:c4:03:ac:95:10:80:a1:ed:dc:6f:
                    cb:15:5d:48:ed:5a:1d:32:76:33:d1:fc:4a:11:4a:
                    61:51:10:cc:7b:8d:72:4a:25:5c:3c:c1:b6:15:d4:
                    07:26:ea:a1:50:9e:ef:33:83:37:a0:62:46:74:8b:
                    f9:ec:89:7b:aa:a7:aa:86:3b:d6:7b:b9:81:28:4e:
                    a5:5b:fa:38:9f:f9:dd:59:a2:cc:d4:c1:ce:f7:fa:
                    f6:34:66:32:c7:f4:c2:c5:83:d8:7c:0e:78:46:09:
                    60:25:7e:cd:21:b0:25:77:04:b4:4c:68:9c:25:d2:
                    af:f8:47:8d:94:8b:9f:6a:69:3f:1a:a1:e6:4f:d5:
                    1d:6e:8e:cb:5e:76:55:49:11:8e:f3:21:1a:50:95:
                    33:df:9b:5d:3b:0a:3e:3a:6c:e7:62:6a:a2:7b:4a:
                    a6:e7:88:ea:e4:ba:5e:82:4f:7a:8a:59:e4:8f:ed:
                    f6:8c:26:b4:2f:b5:5e:92:12:7a:1b:99:99:e0:b1:
                    22:74:3d:c4:24:02:02:15:29:17:bb:1a:13:f5:83:
                    40:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:99:D9:22:A9:0C:8E:90:CF:78:B1:41:E8:94:C5:AB:63:A3:D4:2E
            X509v3 Authority Key Identifier:
                keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:65:8a:78:a0:fd:f8:de:b1:cf:50:df:f1:ba:4e:e2:a5:5d:
         53:4b:ac:3d:0d:9d:98:c7:a9:0c:8d:c9:c7:13:95:82:a4:2e:
         f5:bd:f8:86:a9:50:7d:11:85:be:6c:8a:34:f8:ed:29:33:f4:
         1e:24:e9:59:42:15:08:30:98:ce:8b:25:9f:a5:1f:8d:73:d2:
         3f:ef:e4:a6:8e:a8:83:33:39:5f:00:5a:ad:95:51:4f:7d:eb:
         8e:a6:51:b3:4b:d5:44:cc:1f:72:b5:7b:f5:d7:1a:55:a8:9e:
         fb:42:c4:3d:52:3f:fe:52:dd:b1:ac:9c:66:78:e7:2c:45:56:
         f4:78:6d:83:cc:97:ff:ff:38:c3:fb:75:e3:21:7d:36:3a:40:
         16:ae:27:67:35:49:3f:e3:1b:3e:98:18:9b:7b:97:cf:38:5c:
         5c:b1:62:f5:5d:03:d3:ab:62:79:47:50:d6:38:36:a0:e7:70:
         a8:e4:d0:cc:42:5c:6e:6c:4c:d7:64:1e:46:6a:fa:6c:74:08:
         7b:a4:6f:df:d1:98:95:62:96:98:e2:cc:ca:4b:99:99:d2:01:
         14:98:49:97:ed:39:9c:b0:9c:e0:9b:5e:4a:01:f8:47:e8:a4:
         49:15:4d:d0:04:fd:90:8e:1d:3e:ce:5f:54:f7:e5:a3:22:d0:
         05:77:e6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 13:03:24 2026 by rpki-client