Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
File:                     J0hJVnNlSeqzsG4jqricpZk6gHY.mft (raw, json)
Hash identifier:          6A5Ah7JUJSxEdwvu5xETvbscixtYwFXJD8vVLZUBFY4=
Subject key identifier:   40:07:7E:C5:14:C1:7A:58:D2:63:1E:A2:56:09:E0:D7:AC:07:AA:9A
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Certificate issuer:       /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial:       019E9093DC9299BA256FA633DF0ECA412E1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
Manifest number:          1547
Signing time:             Thu 04 Jun 2026 03:01:09 +0000
Manifest this update:     Thu 04 Jun 2026 03:01:09 +0000
Manifest next update:     Fri 05 Jun 2026 03:01:09 +0000
Files and hashes:         1: IGGsOWInx7GDiTu-4uOnz6TKF_4.roa (hash: hCa0gQemcviWEbgPvunZmS38fuAZ96Xy3vU8q4L13BQ=)
                          2: J0hJVnNlSeqzsG4jqricpZk6gHY.crl (hash: uBe2wzzyWHG57IHasc+ck7AZyk8y6+UKcit9wXfccoA=)
                          3: i1XEOqcKBZSos8XulivRUlJPsiQ.roa (hash: +AnbBQ6xlhmmq8oeU75OadeT8SHBJxGCIHBGP6tLW5s=)
                          4: jxIzweNGbwp67oAJPrxn65prYVA.roa (hash: qci5dm1heyJtkWX1qezUrzv1Lx1lqWj4xvftYho9n2c=)
                          5: oRmOzlxkjaKvIFitB3DoJI9OFPY.roa (hash: YHu28evWYm6LA/MihdvRJT4qUDYpq3RC/bhLC2lzCms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 03:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:90:93:dc:92:99:ba:25:6f:a6:33:df:0e:ca:41:2e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
        Validity
            Not Before: Jun  4 03:01:09 2026 GMT
            Not After : Jun  5 03:01:09 2026 GMT
        Subject: CN=40077ec514c17a58d2631ea25609e0d7ac07aa9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b0:94:e5:55:11:36:77:f2:59:4e:7c:ef:c7:
                    76:26:22:43:c9:24:23:12:4f:92:d0:66:27:29:c7:
                    2b:04:c3:f9:c7:b9:7e:3e:84:1c:9d:20:2a:79:4b:
                    45:0a:bf:87:07:42:80:e6:2d:87:af:f0:34:61:88:
                    cc:80:5a:7b:05:f8:af:24:1d:be:6c:f1:ef:36:9e:
                    7c:df:68:f3:84:cc:65:51:ae:d6:1d:f7:c0:a7:0d:
                    44:7b:66:cd:f9:95:37:9a:51:a5:8d:7f:2e:38:2d:
                    86:01:33:f7:d4:bb:d4:5e:b2:ba:64:ba:5d:e9:f4:
                    5b:02:ab:c7:f1:33:d2:93:09:0e:73:30:dd:f8:9e:
                    72:c8:9a:c4:76:e8:4a:6b:31:75:20:5a:0b:78:ee:
                    f9:75:94:c3:2d:b0:49:f1:58:12:89:04:bc:f7:b5:
                    03:d4:c8:84:27:6b:8a:7a:0e:a1:d3:8b:5b:b1:66:
                    9a:15:c3:f9:57:09:ed:78:64:ec:30:d1:f5:0d:52:
                    71:82:81:d5:87:09:01:00:c4:72:66:a6:49:75:70:
                    89:bb:72:06:3c:ce:16:8b:23:25:e0:b5:5c:ec:0f:
                    c1:1d:83:94:91:41:4e:7c:87:ad:1c:10:95:8f:94:
                    9f:a8:f1:10:7f:d1:67:08:12:48:8e:80:18:df:86:
                    67:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:07:7E:C5:14:C1:7A:58:D2:63:1E:A2:56:09:E0:D7:AC:07:AA:9A
            X509v3 Authority Key Identifier:
                keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d4:2a:5f:b0:5b:65:86:8c:9c:dd:64:70:25:4d:9a:e9:12:
         c3:91:65:a0:11:34:31:6b:61:45:5e:37:dc:61:c8:a9:a5:0e:
         da:6a:c0:81:c9:d4:93:f7:dd:67:1e:02:97:b4:c1:97:2c:23:
         14:3e:03:9d:0a:d4:10:0d:82:ba:91:c0:2d:7d:1a:b0:51:d0:
         41:0c:f3:9b:27:5a:e2:0e:99:11:7b:f1:a2:41:3b:23:ab:8c:
         8f:5a:da:42:c9:5d:c3:a9:c7:0c:96:d2:df:11:6e:2a:51:a2:
         f2:8a:82:07:0e:56:1d:71:1c:af:40:53:e6:30:33:20:5b:8d:
         21:17:6c:95:32:8a:09:9b:d1:bb:1c:c8:74:7e:e0:04:7d:a6:
         77:b9:50:9c:1d:c5:75:fd:6e:81:d9:38:ea:9a:ef:a1:3f:27:
         3d:63:2d:f0:5c:5c:11:22:14:ce:cb:ae:ff:71:eb:fc:28:60:
         ed:69:a9:1e:61:4c:28:27:22:7c:3c:e9:e5:3d:63:ca:d4:32:
         2b:64:99:90:4e:3f:15:4c:bb:c8:95:eb:94:5e:87:da:e2:1c:
         ae:e8:7b:80:2b:85:0b:04:4c:ed:59:db:94:be:41:9e:85:69:
         52:51:71:09:2f:bc:db:d0:67:86:ac:6d:67:a9:b8:a0:f4:f5:
         a2:c4:36:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:13 2026 by rpki-client