Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
File:                     jntpkn3SG7nhRV-ojtiO0kfHGNo.mft (raw, json)
Hash identifier:          IXxWF4CmKY6Vk6i+K6ILJ+UtyYNRz1/I8ERvfdtx4m0=
Subject key identifier:   9B:D3:5F:B2:EF:57:93:AD:2A:28:39:41:99:A9:79:FC:3F:AF:E8:C8
Authority key identifier: 8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
Certificate issuer:       /CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Certificate serial:       019EB732F2F5C42FA69BD4460ED4F21D561C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
Manifest number:          16C4
Signing time:             Thu 11 Jun 2026 15:00:29 +0000
Manifest this update:     Thu 11 Jun 2026 15:00:29 +0000
Manifest next update:     Fri 12 Jun 2026 15:00:29 +0000
Files and hashes:         1: O01TpHeHqBiUeJused6g5bROXeI.roa (hash: lprGNMtGbZUy/qu3fbQs2Y1Q7vEBDCNvAujKwUnYorA=)
                          2: jntpkn3SG7nhRV-ojtiO0kfHGNo.crl (hash: YiNZdbin5jQ26Qas0zkBEyS2xoxbR9Vy3T1AizcMrNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:32:f2:f5:c4:2f:a6:9b:d4:46:0e:d4:f2:1d:56:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
        Validity
            Not Before: Jun 11 15:00:29 2026 GMT
            Not After : Jun 12 15:00:29 2026 GMT
        Subject: CN=9bd35fb2ef5793ad2a28394199a979fc3fafe8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:b7:9c:60:fb:3e:99:ea:9d:dc:7e:d3:e8:
                    ff:fc:fa:5b:e4:57:17:bb:55:0f:64:db:08:81:1b:
                    25:79:fc:1e:69:3a:45:d4:19:66:d1:59:9b:ea:95:
                    75:a4:48:ae:20:d9:30:46:89:9d:e3:df:3f:42:fd:
                    2c:03:41:3f:f9:16:6a:37:25:4a:b9:31:38:70:d9:
                    7a:40:8f:80:be:ec:61:ef:92:6b:0f:bf:1b:b4:7f:
                    a8:72:0f:d5:4f:26:d8:1c:82:55:e3:fe:43:3f:3c:
                    4e:bb:d7:79:c1:d7:e0:27:88:dc:bc:d7:b8:20:0f:
                    ee:cd:c3:cc:89:44:14:c5:76:b3:fb:56:5a:db:32:
                    da:9f:ee:31:fe:6f:90:39:80:c1:a1:10:c8:24:9d:
                    29:7a:fe:f1:b6:21:21:21:86:92:ad:31:e7:39:39:
                    5c:93:d5:2d:4d:c1:74:c6:e2:af:f8:d6:2c:fa:70:
                    01:5c:84:bc:91:20:97:ff:02:c4:ce:dd:3b:28:ba:
                    fc:a4:e9:eb:62:bd:94:8c:81:28:43:e4:cc:cf:d6:
                    84:0c:72:65:56:9b:b1:f5:c9:f4:58:0d:83:4f:ac:
                    ff:1f:66:22:91:bc:6b:e6:fb:8f:a2:b0:b5:b6:d5:
                    d8:32:58:7a:51:13:04:98:27:47:23:64:c9:c4:cd:
                    1d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D3:5F:B2:EF:57:93:AD:2A:28:39:41:99:A9:79:FC:3F:AF:E8:C8
            X509v3 Authority Key Identifier:
                keyid:8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:0a:f1:24:74:d7:da:c4:1b:8b:f6:28:72:35:50:d5:96:a4:
         74:d9:3d:92:e0:7c:4b:f7:ae:c1:de:3f:3d:59:23:c6:29:24:
         2b:26:5a:b9:60:f5:cf:ad:b7:45:2b:3f:e4:b9:1a:7b:e9:89:
         3d:a7:a3:10:9c:a0:b0:63:84:9b:30:fe:96:4e:78:18:39:8a:
         d3:cc:21:c3:07:2a:6e:1c:72:2b:f8:05:54:fd:8c:30:9f:3b:
         e3:84:55:1e:9f:22:21:ab:cd:fb:d5:c5:1b:cd:2d:02:28:ca:
         45:3b:de:ff:12:71:96:bb:7e:2c:23:fc:0d:f2:4c:63:9d:86:
         f6:71:21:40:9c:7c:71:c7:16:30:77:4a:91:36:42:f1:8c:03:
         b3:10:bc:d9:97:c6:57:00:5d:36:7a:d8:f9:05:e4:42:9e:77:
         67:12:9d:9b:af:16:26:38:1f:de:3a:66:12:5c:38:62:3b:5b:
         09:8a:91:1d:3a:df:48:e9:30:5d:31:c8:3c:83:4e:59:2d:80:
         54:73:9f:e4:fa:e5:49:f8:47:ac:31:f8:b8:1d:5c:1b:14:04:
         5f:9e:c2:09:f0:20:1c:db:1b:d9:14:a3:26:df:32:c4:2b:7f:
         fc:be:79:71:79:cf:f6:99:c8:dc:d7:51:e4:a5:2f:89:2d:3c:
         de:31:30:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:14:26 2026 by rpki-client