Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
File:                     jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft (raw, json)
Hash identifier:          wCdxyIEPt2OYBui3c7Q7rxRmoG5EcaMIb4FAaT63n74=
Subject key identifier:   AA:26:D3:E0:88:76:0D:74:D5:E5:F5:A2:25:D1:B8:D3:ED:B3:52:37
Authority key identifier: 8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F
Certificate issuer:       /CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
Certificate serial:       019EB958CDE8658CE0A4C7137398DCBA900E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
Manifest number:          078D
Signing time:             Fri 12 Jun 2026 01:01:05 +0000
Manifest this update:     Fri 12 Jun 2026 01:01:05 +0000
Manifest next update:     Sat 13 Jun 2026 01:01:05 +0000
Files and hashes:         1: jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl (hash: pUc1R3gsFNVtkL814rSykdaHzFmSipmcEtZNujsKvNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:cd:e8:65:8c:e0:a4:c7:13:73:98:dc:ba:90:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
        Validity
            Not Before: Jun 12 01:01:05 2026 GMT
            Not After : Jun 13 01:01:05 2026 GMT
        Subject: CN=aa26d3e088760d74d5e5f5a225d1b8d3edb35237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:19:04:26:2d:04:3a:86:2e:a0:b8:ec:e2:4f:
                    a5:3e:75:02:72:e8:16:49:97:04:7b:3b:3b:87:23:
                    04:f2:06:38:87:8a:03:42:71:21:0a:f1:aa:06:d3:
                    dc:d9:41:cc:ab:fd:b1:c6:ff:23:d3:25:3d:2e:fb:
                    06:da:2e:f1:c0:ec:33:36:ec:36:55:d4:43:2b:84:
                    79:93:0f:5c:58:b9:0e:44:5e:eb:80:c2:31:2e:5d:
                    f8:34:9a:94:ef:8e:ff:0d:11:6a:e5:84:b3:e9:7c:
                    70:2d:dc:13:9d:1b:bc:77:9a:66:31:16:4a:e9:30:
                    29:ea:88:21:d2:df:a2:ef:be:d1:49:d7:d1:f4:66:
                    15:0c:9f:58:6f:41:bb:ac:08:2d:d5:0d:14:dc:69:
                    b0:cf:eb:f4:43:06:91:14:1f:3c:35:7b:58:b9:91:
                    19:5d:0a:47:1a:f9:35:cd:0d:6b:e0:21:67:71:b2:
                    bc:02:07:c4:a5:94:e7:4f:0c:e2:25:52:ab:45:43:
                    a4:1f:7e:f2:fa:41:c5:46:0d:73:93:5e:cd:b3:b0:
                    69:ac:93:60:6d:5f:29:f9:c7:9d:a0:7e:25:e6:0b:
                    ad:55:15:ec:f6:ea:9d:47:7b:b3:14:7e:89:3a:59:
                    4a:c9:8b:ac:6e:d2:81:8d:5d:41:4e:b7:ee:19:ab:
                    93:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:26:D3:E0:88:76:0D:74:D5:E5:F5:A2:25:D1:B8:D3:ED:B3:52:37
            X509v3 Authority Key Identifier:
                keyid:8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:66:b4:5d:92:f3:5b:94:95:67:87:05:e0:86:f1:5f:9e:f2:
         7d:5f:e7:1f:c3:6a:67:7d:c3:9b:35:58:9e:84:f2:5e:e9:05:
         ad:cb:48:45:0a:6a:2c:8e:80:6f:63:21:5c:f4:45:ac:5c:73:
         53:a3:ed:ac:53:be:b4:c4:c0:f4:24:94:7c:3f:06:33:ec:fe:
         79:a9:c1:77:21:6a:9e:c2:ef:62:68:43:fd:42:d9:8d:39:64:
         d6:34:3e:2b:eb:28:86:04:c8:5a:76:2e:6b:64:98:94:a6:a9:
         19:54:45:55:22:d6:54:0e:7a:b0:35:bb:34:58:95:ba:54:9e:
         a1:29:9a:7a:1a:4a:64:4b:0e:31:a0:4e:23:0b:fa:4a:30:46:
         9b:f6:68:03:d2:d0:59:af:11:0e:62:5c:ab:7c:2a:7a:e7:5d:
         bb:b2:64:7f:9d:ff:04:10:89:fa:86:62:97:c9:6d:60:e6:57:
         40:5f:9d:ec:95:5f:38:10:f0:2a:52:30:52:8d:08:3e:b2:4f:
         41:87:cb:fd:35:c9:3d:42:50:dd:ab:b9:9d:ae:37:7d:9d:e7:
         d9:b8:91:5d:e7:fd:4c:9d:d5:a4:36:45:75:76:56:62:15:f7:
         3d:ff:1e:95:9c:86:25:13:c2:01:94:9d:6f:0c:70:44:23:68:
         d7:c1:8e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:55:19 2026 by rpki-client