Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
File:                     JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json)
Hash identifier:          WHBIs+Jp/9uBww/0oMEiM3t5q+O9my2xwV9BJhaQrz8=
Subject key identifier:   6C:59:03:8A:7C:A8:DE:E7:32:7B:7B:3B:1E:3F:72:8D:EE:9F:65:01
Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
Certificate issuer:       /CN=266547208206ad54474c69fccbedc24aa56a62c2
Certificate serial:       019EB732F6BA353CC6D5FD7B8388B79CB8F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
Manifest number:          0E4D
Signing time:             Thu 11 Jun 2026 15:00:30 +0000
Manifest this update:     Thu 11 Jun 2026 15:00:30 +0000
Manifest next update:     Fri 12 Jun 2026 15:00:30 +0000
Files and hashes:         1: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: VuQm6tMWDErZMWzE3gztHmOSRAWo0XLghNtpEsyhFHc=)
                          2: ZOxgWvCSe4fh3G-hS8UAvVzCxPQ.roa (hash: lLIc6IlVo/BfK1oQIkM/V9OuWrsKXh4yLdug5PFaT64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:32:f6:ba:35:3c:c6:d5:fd:7b:83:88:b7:9c:b8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2
        Validity
            Not Before: Jun 11 15:00:30 2026 GMT
            Not After : Jun 12 15:00:30 2026 GMT
        Subject: CN=6c59038a7ca8dee7327b7b3b1e3f728dee9f6501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:74:9c:e2:3d:a0:c8:35:fa:8f:43:d7:d4:f0:
                    9c:51:55:f8:64:0a:93:7f:de:c5:c6:03:aa:e3:c2:
                    8a:ae:6a:32:54:35:f6:99:c8:7d:2e:93:fd:e3:38:
                    6c:04:a7:98:fd:fe:cf:25:f7:c8:e9:8c:ce:13:3b:
                    17:4c:41:c2:32:29:ac:69:20:07:05:ff:3e:75:d2:
                    e4:21:0b:54:a3:36:81:90:d8:68:ca:88:c3:00:fa:
                    7b:bf:57:a7:56:d4:4b:68:d0:fc:79:c4:33:d2:28:
                    e7:97:dd:47:96:f6:3e:64:90:6b:ac:fc:5b:72:9f:
                    a8:6d:8a:71:f6:f4:56:0b:d8:8c:23:af:f8:5f:d9:
                    90:89:e9:8d:44:27:20:14:fd:ca:43:6f:1e:96:06:
                    14:0a:6c:85:66:90:75:bb:90:d2:b1:cc:95:4f:69:
                    f2:ab:98:5b:65:28:ac:6c:c0:46:b3:2b:2b:d2:7a:
                    6b:8f:b1:f8:bd:d4:54:6d:13:9b:17:56:f9:f7:16:
                    9f:7a:7d:cd:01:03:54:5f:a5:18:ed:e8:85:c0:0f:
                    ac:fe:08:98:c6:ea:8b:a8:63:ce:d7:66:c0:38:2f:
                    f3:99:e4:68:ca:5e:3e:c2:4b:28:25:8b:b5:a6:22:
                    32:71:19:76:e8:39:13:aa:fa:68:0d:40:55:10:8a:
                    95:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:59:03:8A:7C:A8:DE:E7:32:7B:7B:3B:1E:3F:72:8D:EE:9F:65:01
            X509v3 Authority Key Identifier:
                keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:3f:8e:d8:92:34:0c:70:dc:fe:81:bf:b5:d5:44:d4:d8:f8:
         dd:c9:b1:6b:b1:a7:ac:bf:5c:af:d6:e2:54:6f:9e:f9:41:f0:
         2f:d7:8d:c4:1b:87:fb:ff:a9:a5:9f:61:f9:f4:0b:61:cc:5f:
         67:69:70:0f:6d:45:a4:e6:fc:b9:34:82:73:55:ee:f5:0d:45:
         cb:5e:3e:ee:16:ab:6b:11:9a:cf:0b:fb:9a:2e:c2:0b:13:49:
         35:e7:2f:16:a5:fe:72:87:8e:47:14:1a:44:b2:dc:12:ce:dc:
         44:6f:ae:22:4d:a3:06:34:0e:6d:25:c9:db:1d:6f:da:2d:a9:
         80:fa:ce:ca:32:42:44:4d:0d:e4:ec:39:56:cb:dd:c2:e2:28:
         c4:bc:f2:62:34:e6:c0:29:dd:e2:52:9a:d5:8f:a0:94:23:75:
         aa:10:03:d9:09:b5:87:88:32:af:ec:14:e3:46:a6:eb:77:7b:
         3f:ff:1e:c8:83:87:c5:50:2c:3d:05:58:e9:71:ce:ca:4e:a0:
         6f:5b:a1:b3:f1:af:d6:c9:f2:28:a6:8f:2c:89:68:e6:42:75:
         49:af:bb:39:79:54:f0:86:77:a3:c8:0a:78:a7:ba:34:67:f2:
         bf:8a:98:57:14:f2:da:34:46:5d:37:32:17:6f:6e:20:f9:d1:
         e9:06:e6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:26:15 2026 by rpki-client