Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
File:                     jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft (raw, json)
Hash identifier:          sgufiQvcT0QdoaQ3RgdK7Ipk13xWSTZ9KHeAwn8zMFw=
Subject key identifier:   D9:60:02:FC:A0:7D:4E:37:2A:60:8B:3C:D3:4B:92:93:6F:F3:05:79
Authority key identifier: 8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E
Certificate issuer:       /CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
Certificate serial:       019F111BEE4D6DD892119493D8ECD279970F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
Manifest number:          0251
Signing time:             Mon 29 Jun 2026 02:01:10 +0000
Manifest this update:     Mon 29 Jun 2026 02:01:10 +0000
Manifest next update:     Tue 30 Jun 2026 02:01:10 +0000
Files and hashes:         1: 8sncQGN_dofXozDeejTadUl8wRs.roa (hash: SW1+/cf3HtR0IB+S11zpo2LhAnvKL4afLlJ8vSGUHZ4=)
                          2: UtXzH5Oi0AulZFx0l8qig6QKaPg.roa (hash: 1qkvw5zb1r9z9CjOBe9UqDsw7BNtoAEFm0cGx+TLWUU=)
                          3: jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl (hash: XXCOwvf8LZn+9aOjDr2dJuLD6JnVh2KhRQkbTCIDp44=)
                          4: qTnj_y_Wd49wsAXE39s8dZ0CQvA.asa (hash: Pe+G1o42QcpD2g0wE/O5joEX35Ku4HHh+kf6CsJnEYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:1b:ee:4d:6d:d8:92:11:94:93:d8:ec:d2:79:97:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
        Validity
            Not Before: Jun 29 02:01:10 2026 GMT
            Not After : Jun 30 02:01:10 2026 GMT
        Subject: CN=d96002fca07d4e372a608b3cd34b92936ff30579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:27:4f:58:80:7f:31:18:d7:68:9f:aa:31:
                    43:95:1b:01:fd:ed:95:fa:53:0c:6d:1e:43:f8:2b:
                    27:38:a7:d8:9b:bf:df:88:05:20:1b:62:ca:3b:cd:
                    cb:0a:e4:38:29:da:82:f2:92:2e:b9:69:cc:23:72:
                    f5:6f:1e:f5:7e:28:d3:bd:51:97:0f:c6:69:6c:00:
                    f3:4b:8e:91:a8:be:64:10:48:c8:e4:25:e5:8b:fa:
                    ca:3b:2b:11:2e:3a:3c:0c:e1:d2:e2:4e:0e:94:9d:
                    17:ea:ac:08:59:d8:61:d9:c3:11:e3:eb:a3:6c:8c:
                    82:aa:46:41:9e:25:74:7f:06:4e:e1:5c:44:ad:62:
                    f2:52:08:0e:07:12:e2:f0:1d:2e:07:d6:99:88:3f:
                    d0:7b:60:11:63:ac:53:c2:81:0b:48:41:a2:e3:1f:
                    e6:33:1f:0e:c6:76:46:38:67:1f:91:44:e5:17:72:
                    c1:bb:a7:f2:44:74:b9:de:18:f7:49:74:5b:13:34:
                    3b:77:32:44:3f:77:ef:46:e6:3f:bf:19:98:b9:2b:
                    9d:99:af:ad:a0:b8:04:2f:89:01:20:eb:19:f6:7d:
                    04:30:f2:2a:39:6c:b8:45:82:97:e7:bd:43:e2:59:
                    3d:bf:ed:79:b1:f9:30:e0:f2:7c:73:1e:90:0d:3e:
                    ef:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:60:02:FC:A0:7D:4E:37:2A:60:8B:3C:D3:4B:92:93:6F:F3:05:79
            X509v3 Authority Key Identifier:
                keyid:8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ce:43:7d:47:63:45:8e:fa:ea:1d:13:a8:93:ea:00:5e:b4:
         b4:96:78:08:98:79:e7:95:f9:79:a0:e3:f7:3f:27:bf:78:99:
         c6:32:63:60:2a:f2:e8:ca:20:f5:dd:79:6c:dc:75:e5:67:40:
         95:93:27:83:2d:af:89:78:c0:37:6a:53:cb:0c:06:6b:15:e3:
         57:25:6a:09:aa:90:ee:51:77:2b:08:53:c2:46:db:57:5f:3b:
         42:c4:5e:76:1e:25:31:a9:4b:a7:f6:5e:5b:32:8f:09:9a:c4:
         5a:e4:36:30:82:67:28:3c:c2:88:9c:fd:08:75:d2:7b:f6:f8:
         23:bf:9f:74:34:d0:f5:a5:ab:07:8f:f5:80:bf:e5:cb:aa:60:
         63:4e:b6:77:f5:3a:bc:7d:c6:4e:9e:58:72:15:63:6e:d2:39:
         a9:f6:ff:0c:48:7a:13:a9:67:d9:a5:2f:9b:b6:f3:f9:d8:96:
         36:a6:e4:43:cc:4f:22:ce:cd:20:3f:fb:dc:0a:ff:98:22:57:
         38:76:b9:ea:28:7d:38:34:da:14:06:35:89:08:6c:de:a8:b5:
         a1:a3:74:7f:be:f7:a7:36:81:d0:c0:10:5d:b1:60:cc:e1:7e:
         06:e8:d4:52:09:58:c5:88:76:8d:1a:c7:f8:eb:0e:39:3f:f0:
         0d:e4:3b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:01 2026 by rpki-client