Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
File:                     jkFZeSO5geHA1Pyi_9CozcNme30.mft (raw, json)
Hash identifier:          l/yeTYLrPcWt53STKHZsBN/pZ5FIG2TASp64YA/FsVM=
Subject key identifier:   37:02:97:30:E4:2C:90:B2:AF:0F:D5:6A:2E:F6:AE:5E:35:0F:7A:38
Authority key identifier: 8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
Certificate issuer:       /CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Certificate serial:       019EB80EC50896BCF4249F002A363FC1B2B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
Manifest number:          02EB
Signing time:             Thu 11 Jun 2026 19:00:36 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:36 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:36 +0000
Files and hashes:         1: 2QK16_GzCxStUDI0mu8WHffdpn8.roa (hash: GKlCvD0CmH/A+xQlfrKSRNG2sqH4ve1r+aoC47JjAIU=)
                          2: jkFZeSO5geHA1Pyi_9CozcNme30.crl (hash: lPBx+EJsCs8H5CoNiX4g9XvzZtcltoSsWuVs64llYso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0e:c5:08:96:bc:f4:24:9f:00:2a:36:3f:c1:b2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
        Validity
            Not Before: Jun 11 19:00:36 2026 GMT
            Not After : Jun 12 19:00:36 2026 GMT
        Subject: CN=37029730e42c90b2af0fd56a2ef6ae5e350f7a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fb:a5:17:eb:32:bb:7d:40:bd:2d:38:55:a1:
                    9b:22:99:20:86:0f:b9:20:aa:10:f9:87:bd:22:0f:
                    8d:e5:35:6c:b0:70:7e:6a:68:0d:d5:22:92:31:8f:
                    55:54:61:37:c9:5c:72:be:5a:92:79:7c:00:a1:e3:
                    97:89:8c:0b:70:f5:3f:b0:5a:75:37:62:2e:9a:ad:
                    bb:06:1f:01:4d:7c:90:fd:08:e2:2c:5c:3b:93:83:
                    b7:eb:c5:5f:75:7d:7a:2f:0b:20:63:73:ba:ee:c2:
                    a4:cd:bb:44:4d:37:28:d1:06:d8:c6:0b:b0:37:a6:
                    38:7d:13:d3:24:a6:e8:cc:fb:80:ba:d7:8e:61:a8:
                    03:05:90:63:1a:da:0b:23:48:e6:47:ad:f4:b8:7d:
                    27:d2:fa:86:57:ff:b0:77:fe:86:3c:63:8e:80:b3:
                    91:78:d5:52:81:11:6f:f2:b3:52:bb:cd:6f:fa:4f:
                    55:ce:4b:29:b1:4d:d9:c2:70:ae:82:03:a8:de:a9:
                    41:3a:90:c1:59:6a:84:9c:7e:32:b5:e8:5b:a9:4f:
                    12:6b:7e:08:90:9f:dd:3a:d7:60:0b:2e:bc:a4:3b:
                    a0:d7:24:b4:8c:75:a9:41:90:ae:3d:7b:8f:52:5a:
                    a1:a6:38:1a:d7:8f:d9:9b:33:6c:c1:3e:d3:13:67:
                    61:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:02:97:30:E4:2C:90:B2:AF:0F:D5:6A:2E:F6:AE:5E:35:0F:7A:38
            X509v3 Authority Key Identifier:
                keyid:8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:47:cc:f1:ac:9f:71:c6:25:dd:d7:87:73:8e:85:08:9a:cf:
         14:b6:96:be:e4:90:2d:4d:cb:3a:51:b6:0f:9f:39:d0:16:b5:
         48:60:14:18:7c:fb:c8:da:75:23:8e:db:0c:2f:3f:bb:f0:5e:
         94:c2:ee:e2:8e:73:96:60:5c:3c:18:d2:c4:0d:d4:55:00:66:
         e6:d9:01:bc:53:9d:5c:29:1f:b0:5e:c9:1a:3e:2b:3a:4c:ad:
         fe:3e:01:de:75:01:9c:07:94:68:e2:22:5c:54:f0:b2:40:0d:
         e8:af:46:39:84:de:13:95:fa:d7:55:6d:58:0b:db:c1:d6:98:
         be:75:cc:0d:a8:c4:d2:c5:06:3b:47:b6:0f:4a:89:bf:a7:d8:
         86:01:8e:a0:fa:12:16:9d:d4:75:e8:b5:3f:7e:1f:99:d2:7e:
         9c:75:77:a6:6f:88:fa:29:1e:8e:1e:22:ae:6f:3e:39:5f:0d:
         68:91:f7:67:fc:91:bd:33:a3:20:b5:01:34:58:fd:0c:62:06:
         89:81:f4:d1:f9:49:26:ec:7b:a8:53:51:05:36:89:0d:28:d7:
         dc:95:d2:03:b2:7c:e8:26:e3:87:da:89:89:56:03:29:b3:f1:
         cb:ef:99:6d:34:96:69:4a:2d:3f:7b:4f:94:f7:3e:c3:a0:66:
         e2:ed:90:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:38:02 2026 by rpki-client