Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
File:                     Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft (raw, json)
Hash identifier:          Nw+f1G4CP6u1uHVAmt6oXZiZ0XVYoCGj20+g1kVVf0Q=
Subject key identifier:   CA:10:BB:E7:4D:CC:98:85:CC:71:6D:41:E4:E6:E2:70:53:BF:D7:2A
Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9
Certificate issuer:       /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
Certificate serial:       019E89484045771C7380429159CFEAD55096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
Manifest number:          01E9
Signing time:             Tue 02 Jun 2026 17:01:14 +0000
Manifest this update:     Tue 02 Jun 2026 17:01:14 +0000
Manifest next update:     Wed 03 Jun 2026 17:01:14 +0000
Files and hashes:         1: 8y88NJXHcEaqu4Abu5SxQh3fBpU.roa (hash: 6HPf79kWBhuWHiKXiOUnzlg4Ue3tB5koJ57WYMqtooc=)
                          2: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl (hash: 5OMRdaOH5CNsdSU41uTF/WWLmpYOBeaA9pVZJmUXr+c=)
                          3: HKTlRw8pt_iSm4V-aB_WcaJhAik.roa (hash: izWUq7YDBbXVXG63e6scfhb3dS4aYrShuifxGXTpeTs=)
                          4: LzrcKdtCnOcxwIXVys_RJ_TInLA.roa (hash: JYdZ7o0wOdwaNmYpHnApBEmPtzpUEbCrs8EkVkMmwb4=)
                          5: My-XsHw-pAeUCYdehCsmsl-d7DU.roa (hash: 88o/CECVw6Fg0CLNL8t4XNZPZxB1Y0nAWpPz410mWEk=)
                          6: P3DASKxbE4fNritsmNWOMr9fVp0.roa (hash: DabSiAhHMwaun/6BHPgQfV102dWvYK6dGo7VorlbJIQ=)
                          7: RoKhjHsA9qOTHog4qN5z9txoamQ.roa (hash: ffD+5mZjZ2zd3k6xobjIkH+QrnFvq8Or1nfW/j3huI4=)
                          8: SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa (hash: f3p21kqHYSx/CLW5cyZ2rz+TlyE7p3OQ1h/qoLM+/48=)
                          9: V6lGWiZ2jVo3s83BAWD9qzymG-M.roa (hash: TLHE6l2I0+s4AtxUSASTme+TbF4LWy7iWY+zHitON20=)
                          10: a4GMWnIJEb_DA9hg7kZuU5djAwg.roa (hash: mAW/nKgJWneFae6fS+zpLW6EH88W2cg/D2IILYB+gRM=)
                          11: bxNBlAIvzk_SF6ousanXCbANVpw.roa (hash: sT0TW9MJeQmOwJN59HN/7UMdZQOgq90ndExP5oEy1to=)
                          12: exKYPmby1hJwGmW-7_VqhM0XyAk.roa (hash: VAtQNF8T7tXYmX8AGBe402Tsxlv/qc9k3qGYwuDKq5s=)
                          13: koHuyp402Ngn3ka12oQGaA_PmT0.roa (hash: KFMe1cCTEIRgnL4lA3Z4q+ep3emiO8kdLzhuu9Ua/54=)
                          14: w-XfPqILteG9KHOxrgUZfeVhJuA.roa (hash: b2kqdmupyMow51gQQ6EiC8dJFvG8R5VrVALmITaAfS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 15:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:89:48:40:45:77:1c:73:80:42:91:59:cf:ea:d5:50:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
        Validity
            Not Before: Jun  2 17:01:14 2026 GMT
            Not After : Jun  3 17:01:14 2026 GMT
        Subject: CN=ca10bbe74dcc9885cc716d41e4e6e27053bfd72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d1:69:4a:d7:e1:79:4a:b3:5d:e4:b7:20:a8:
                    4c:89:a4:02:e3:d5:a2:30:6e:e7:27:57:ca:e7:f0:
                    fc:78:e3:8b:dc:97:54:f3:98:83:01:8c:5e:25:86:
                    99:28:0a:59:47:35:76:82:0a:82:af:c4:b0:41:3b:
                    fd:bd:be:8d:fc:88:04:c7:71:e1:19:3e:d5:b5:ae:
                    87:70:eb:c6:7d:f6:5b:ff:4e:8a:0c:c3:97:a1:6e:
                    e0:1c:ef:84:34:c9:d0:2e:15:44:5a:93:d8:75:59:
                    26:c2:fd:be:c9:d4:cb:f7:d6:00:7e:34:df:de:b3:
                    ee:8b:c4:57:5c:30:70:2e:34:62:b5:22:58:bd:e1:
                    7b:5d:fe:90:32:61:49:e7:6a:56:a1:15:dc:aa:32:
                    4f:94:52:3c:6f:91:4a:db:d4:f6:29:0b:91:4c:2a:
                    44:27:3e:2d:74:bb:b7:1b:87:cf:3a:fa:ff:dc:35:
                    e6:b0:92:b6:fc:34:71:fc:a2:99:5b:0a:b4:f7:27:
                    b0:82:ed:86:09:0a:5a:b9:f2:0c:ad:f9:db:63:47:
                    06:e9:37:45:5f:10:12:db:b9:d2:27:46:9a:8a:9a:
                    66:75:40:2d:c3:dc:3d:b0:b6:0a:43:21:57:b2:a2:
                    11:94:87:dd:d0:b0:ff:29:4c:1a:75:ff:d8:6c:f7:
                    46:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:10:BB:E7:4D:CC:98:85:CC:71:6D:41:E4:E6:E2:70:53:BF:D7:2A
            X509v3 Authority Key Identifier:
                keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:fc:a2:50:2f:5a:60:27:22:5e:06:dd:4f:24:45:8b:33:fa:
         07:fc:09:66:ca:95:d8:4e:ce:4f:53:f4:dc:c1:d7:88:dd:a0:
         f6:b2:f9:94:24:d8:76:6e:86:57:ac:2f:22:42:cd:a9:81:e8:
         ce:59:9f:6b:05:37:07:83:d3:99:97:ae:89:34:02:6c:67:4e:
         b9:16:80:95:aa:84:ad:35:cc:92:b7:3f:11:02:83:b4:96:72:
         92:bc:ea:51:03:a3:56:55:99:98:33:8c:f3:fd:26:75:58:9f:
         9a:c5:20:bc:69:0b:2d:1e:26:37:29:fb:ed:29:10:44:05:f1:
         f1:95:c4:e0:f2:c5:95:1d:37:75:26:30:9e:4b:42:a5:36:4d:
         41:a0:b2:4b:79:51:5f:2b:45:89:81:67:ba:70:1c:b9:90:a9:
         df:3e:73:0f:df:a8:0d:a0:46:e7:3b:05:91:1f:43:88:c1:a3:
         cc:2d:b7:ae:29:c5:63:64:8c:4e:28:24:56:83:61:0d:e6:fb:
         9b:38:a6:61:f9:25:df:f1:66:68:0e:be:5e:f8:73:14:aa:7f:
         06:55:5a:78:d2:33:e1:cb:e9:0e:02:55:ac:a5:3c:f4:5f:14:
         12:30:9e:14:22:72:34:96:a5:7d:30:9e:60:03:70:74:79:be:
         e2:dc:e5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:08:53 2026 by rpki-client