Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
File:                     J97R2QxNUraHECO8cSltCKmMTNs.mft (raw, json)
Hash identifier:          y9erumhej4B2adH2RHuSJ/RdnWB3q/8QopT443lTGjM=
Subject key identifier:   C6:57:4E:DD:05:8F:D3:13:69:EC:16:53:38:7D:EA:EB:87:C6:BB:AD
Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
Certificate issuer:       /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Certificate serial:       019E8EA57157840D5BCFE23A2DED889F0592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
Manifest number:          0F02
Signing time:             Wed 03 Jun 2026 18:01:07 +0000
Manifest this update:     Wed 03 Jun 2026 18:01:07 +0000
Manifest next update:     Thu 04 Jun 2026 18:01:07 +0000
Files and hashes:         1: 9eN7qSejmD6NfaFbsmt0-Q4AgoA.roa (hash: EthJtYsvDPJskDLNQI0HAM0yvVrJhOQozB0uYpm7BsE=)
                          2: J97R2QxNUraHECO8cSltCKmMTNs.crl (hash: HaCI9dGvHJhimYNMt3lP6XRPhMOVUCVfHaw+9fj2KxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8e:a5:71:57:84:0d:5b:cf:e2:3a:2d:ed:88:9f:05:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
        Validity
            Not Before: Jun  3 18:01:07 2026 GMT
            Not After : Jun  4 18:01:07 2026 GMT
        Subject: CN=c6574edd058fd31369ec1653387deaeb87c6bbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:37:27:6e:3b:3f:19:c2:4f:23:3f:62:5c:
                    e1:2b:e5:2a:04:60:ae:c5:dd:0f:fd:89:bd:a6:d9:
                    ea:72:cd:0d:0c:04:0c:58:6f:60:12:b0:38:e4:65:
                    b1:26:d0:64:b2:1c:93:e8:27:fd:60:06:87:65:85:
                    73:d8:3e:a7:4a:6a:7e:aa:0c:46:37:ba:4e:c3:3f:
                    f0:21:8b:54:17:af:91:ec:66:64:8d:5a:df:39:6f:
                    39:58:ea:c8:91:63:a9:9c:9f:6d:bb:cc:4a:4a:19:
                    9d:75:66:1b:f1:c2:47:f6:05:2b:38:65:64:dd:46:
                    8d:09:4a:93:fc:61:96:36:57:1b:65:25:35:f1:13:
                    1f:d1:c1:13:e4:c8:8f:4f:55:e3:80:27:97:49:1f:
                    d7:0d:e1:4a:2d:2f:4f:24:1e:3b:16:69:b8:7b:2a:
                    45:b2:b4:43:12:0f:14:52:d2:c7:96:6b:96:72:ea:
                    6f:9c:07:21:1e:8d:d3:94:dc:f5:54:a9:20:8e:85:
                    5b:b8:e2:0d:fe:ba:24:44:2c:6c:7c:ba:65:c5:6c:
                    ea:b6:3e:7a:cb:58:33:0c:f1:bf:e9:2b:f1:6a:fe:
                    83:76:de:8e:14:77:18:6f:f0:dd:92:d9:43:2b:1c:
                    f4:88:85:85:4b:fa:36:fc:47:a5:ff:c4:68:58:db:
                    02:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:57:4E:DD:05:8F:D3:13:69:EC:16:53:38:7D:EA:EB:87:C6:BB:AD
            X509v3 Authority Key Identifier:
                keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:86:1c:f7:80:be:96:6f:be:71:cf:84:b6:01:a4:47:b8:e3:
         21:f0:a8:cb:3d:68:c5:7f:ab:5d:94:44:cb:72:59:82:5d:09:
         6b:f4:59:da:51:65:93:8f:a5:53:f0:67:a1:11:fc:2e:c9:91:
         f2:09:9b:91:b6:1c:7f:80:5f:84:18:5c:67:83:94:4f:ed:c1:
         c2:21:5f:23:32:11:e8:64:05:6d:83:a5:08:f9:e8:ce:ea:b7:
         31:af:c2:b1:c3:61:54:5a:74:86:3f:63:27:9d:b5:c3:e9:de:
         ea:34:c5:3e:15:42:a8:58:a0:ea:98:ed:91:aa:72:71:a2:d4:
         79:48:8f:19:15:e8:67:51:11:ca:27:9c:80:6f:e6:8e:11:06:
         41:67:29:07:d4:47:f6:32:0b:77:62:b0:39:e7:50:b1:2c:0e:
         2e:64:00:36:75:b8:8a:41:08:c5:57:35:f4:af:fe:83:b9:45:
         11:4d:30:0b:91:db:5b:9c:ba:8f:76:50:27:ba:87:72:70:8b:
         49:51:84:0d:dd:a6:23:52:47:b3:d4:78:4b:e1:e2:61:d9:fe:
         0a:18:a7:ec:56:54:66:3f:a0:3a:e1:cb:71:cf:f4:26:76:93:
         b7:df:c3:ba:09:b0:73:ac:8b:16:54:b4:6f:18:40:59:0f:a6:
         97:47:0e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:57:45 2026 by rpki-client