Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
File:                     jq3tC4P6TjHOCghA60KbqKnxjjk.mft (raw, json)
Hash identifier:          7E4ETqXuFlUmlBfpdwck8EsU5fwhNA3bEFqz+pYNGNU=
Subject key identifier:   81:73:1A:C1:3B:47:E1:0F:8E:1C:AD:AF:3F:F4:E5:37:E5:20:2F:FC
Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
Certificate issuer:       /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Certificate serial:       019EDDD352F47B63F00295727CBE94880010
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
Manifest number:          097F
Signing time:             Fri 19 Jun 2026 03:01:14 +0000
Manifest this update:     Fri 19 Jun 2026 03:01:14 +0000
Manifest next update:     Sat 20 Jun 2026 03:01:14 +0000
Files and hashes:         1: 85sPILvfxxYSx0PE9yJsSFH1JMc.roa (hash: HdGYxNl2eXzYYHOql2MVArt3IpiWdgiSHbgNANVrjdI=)
                          2: jq3tC4P6TjHOCghA60KbqKnxjjk.crl (hash: JfBn4lGYlVrYaq96ebvlwrHZbfD7eDEZACG7NdcXMk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dd:d3:52:f4:7b:63:f0:02:95:72:7c:be:94:88:00:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
        Validity
            Not Before: Jun 19 03:01:14 2026 GMT
            Not After : Jun 20 03:01:14 2026 GMT
        Subject: CN=81731ac13b47e10f8e1cadaf3ff4e537e5202ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:95:2f:74:95:74:db:2f:f0:c7:38:8d:2e:
                    32:6f:b3:50:67:f3:de:bc:cc:f5:8b:36:cc:fc:0b:
                    e7:c6:50:ca:5b:ae:12:8b:49:2b:8f:f5:48:d6:f5:
                    33:6e:6f:4c:7e:fa:9a:3e:30:6c:0b:d3:6c:f6:59:
                    4a:04:58:5d:45:39:a9:0c:27:44:21:83:37:cf:bd:
                    52:f2:90:12:66:86:fe:93:72:6b:1d:41:48:a1:42:
                    13:89:65:67:72:02:5c:94:79:48:de:8f:c6:b5:f1:
                    5b:9a:58:fe:27:ab:92:61:21:6a:c9:a3:b2:99:38:
                    5b:19:cb:c9:99:d5:cd:e3:27:86:8c:87:7a:0a:61:
                    1d:f5:bb:a7:97:b4:65:86:48:ed:b6:9e:e7:7f:5d:
                    c5:f3:5c:aa:34:6c:ba:a4:ee:38:72:10:67:fb:a7:
                    59:94:54:41:13:0f:3a:d7:17:14:7c:5e:cb:eb:a1:
                    9b:73:52:5e:66:c3:dc:88:cb:c3:ef:b7:00:1d:55:
                    0f:27:da:88:10:e1:f4:f6:bb:71:6c:00:28:0f:44:
                    e8:c9:8f:64:88:7b:1a:bb:00:50:5b:00:14:5a:ee:
                    ac:d8:42:da:7d:d6:f7:68:1e:0d:58:ef:71:7a:7a:
                    e1:22:3d:b1:c4:f9:04:63:33:07:ea:0f:87:9a:5f:
                    66:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:73:1A:C1:3B:47:E1:0F:8E:1C:AD:AF:3F:F4:E5:37:E5:20:2F:FC
            X509v3 Authority Key Identifier:
                keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6a:5d:0c:72:28:4a:60:29:24:85:1f:a6:d2:b3:76:ed:8b:
         ff:38:0b:2b:07:0b:0d:d7:8a:d6:0a:7b:90:d5:5c:fc:aa:00:
         89:97:77:33:92:7b:43:d0:5e:5e:ec:ca:c7:87:32:89:c2:e1:
         18:90:f4:50:ee:90:91:c6:2a:ee:95:89:6b:0d:e9:6e:52:89:
         52:bc:44:a0:65:a9:ee:49:a2:fc:f8:e3:d9:9c:4b:58:68:2e:
         00:14:1c:ad:f3:15:b8:8b:74:b2:a0:04:d3:3a:c5:d3:c3:aa:
         61:92:f2:43:9e:85:2c:83:16:ab:88:ce:bf:73:8b:92:3e:4e:
         e2:b7:f9:21:64:42:bb:12:1c:22:55:ad:9c:7b:3b:9c:f2:d2:
         b2:26:04:70:e1:30:9a:4f:19:3e:0b:4c:82:be:5b:ee:22:ea:
         62:d7:2a:21:c5:a6:41:24:c0:d4:75:61:cc:53:79:cc:15:48:
         7d:1d:03:b2:ad:f8:da:5b:91:72:3c:be:e9:9d:07:fe:e3:49:
         b9:11:cd:f3:00:52:71:00:34:df:d4:54:10:aa:48:89:41:33:
         b3:d9:bd:40:ed:54:09:cc:60:e3:16:81:8a:50:dc:44:8a:be:
         61:80:42:77:c5:9f:d1:82:d3:41:42:6c:a9:6f:cd:c2:70:52:
         3a:41:7b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 08:21:11 2026 by rpki-client