Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
File:                     jrM9OZ3Q9flhftTkcOa9ydELeiA.mft (raw, json)
Hash identifier:          7f2G0cNfVfDrJvD7Y0y7bE7TVUCeCVHsvert1Q48boo=
Subject key identifier:   CF:D4:83:D4:91:6B:D7:0D:1F:89:1C:E4:87:BE:35:67:F9:20:1E:19
Authority key identifier: 8E:B3:3D:39:9D:D0:F5:F9:61:7E:D4:E4:70:E6:BD:C9:D1:0B:7A:20
Certificate issuer:       /CN=8eb33d399dd0f5f9617ed4e470e6bdc9d10b7a20
Certificate serial:       019E2A39682C6FCEEA611CAE12EF5B5CBBD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
Manifest number:          9F
Signing time:             Fri 15 May 2026 06:01:05 +0000
Manifest this update:     Fri 15 May 2026 06:01:05 +0000
Manifest next update:     Sat 16 May 2026 06:01:05 +0000
Files and hashes:         1: _Wy5a31X0fWVI5kzqNmJQQC4UbU.roa (hash: 9Bcaw7GkeT0B0JGjnO2Z6JkUkn/KrawL89AtsYKJKU0=)
                          2: jrM9OZ3Q9flhftTkcOa9ydELeiA.crl (hash: 3E58elt9HJzPjclhMJSyQriqC07ULgtbgwra4i/2wao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:39:68:2c:6f:ce:ea:61:1c:ae:12:ef:5b:5c:bb:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb33d399dd0f5f9617ed4e470e6bdc9d10b7a20
        Validity
            Not Before: May 15 06:01:05 2026 GMT
            Not After : May 16 06:01:05 2026 GMT
        Subject: CN=cfd483d4916bd70d1f891ce487be3567f9201e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:28:62:0b:b8:4c:80:75:32:aa:13:0f:bd:
                    f9:91:ef:18:93:47:89:0c:c6:06:76:27:2a:b5:5d:
                    55:63:d4:40:59:39:5f:ad:d0:9e:30:83:ee:c4:00:
                    52:cf:6b:d5:6a:5c:cb:a2:69:0a:f5:9e:a7:08:f8:
                    1a:bc:cd:21:fb:95:10:1b:cd:d0:c0:24:82:5d:49:
                    b5:d5:1e:40:80:21:24:37:44:2a:5b:13:1f:02:61:
                    be:85:9e:06:cf:aa:57:ce:3f:2b:9b:ed:ba:bd:83:
                    27:d1:4d:5b:a8:4d:b3:97:ba:f2:75:49:32:a8:1a:
                    76:6f:07:94:8f:2b:ee:ba:82:c0:c4:4f:6c:cf:e9:
                    3e:08:a0:e2:0c:39:f4:51:9f:ae:77:e1:5d:83:5b:
                    d3:6b:17:84:2f:17:5e:c4:9d:0e:1e:f4:26:6f:52:
                    53:59:da:ef:f3:fe:75:cd:0b:07:1f:ca:25:5d:33:
                    2e:61:7c:ea:20:ef:ad:39:36:21:2f:a7:51:3a:72:
                    b1:c1:81:13:ac:fa:35:df:1f:d3:bd:f2:74:70:93:
                    02:36:f5:42:3f:af:92:95:97:1b:1b:00:2d:13:14:
                    17:81:2e:14:bf:d3:e1:b5:06:23:eb:b5:aa:60:75:
                    7c:3e:12:fe:42:31:30:97:20:fe:c3:52:cd:96:a8:
                    75:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D4:83:D4:91:6B:D7:0D:1F:89:1C:E4:87:BE:35:67:F9:20:1E:19
            X509v3 Authority Key Identifier:
                keyid:8E:B3:3D:39:9D:D0:F5:F9:61:7E:D4:E4:70:E6:BD:C9:D1:0B:7A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f5:5f:20:aa:1a:27:d4:6c:dc:30:93:1f:ed:69:a0:64:bf:
         36:bc:3c:49:42:84:a7:2e:9a:55:12:8e:ad:21:95:a9:02:8d:
         4a:78:b3:1c:67:4b:f1:84:22:cd:41:a7:5f:43:49:89:f5:39:
         bd:ef:64:51:e9:59:46:02:87:91:37:2a:b4:5a:d3:f0:6f:03:
         32:dc:4d:ec:9e:c9:00:23:7b:d0:df:36:d5:e1:00:17:7a:cf:
         f6:f0:56:fb:ab:de:f9:ee:58:93:fa:a3:8b:60:7c:a2:2b:0c:
         24:4f:76:b9:7c:68:a3:e6:4a:16:70:56:21:65:03:c4:af:ba:
         23:df:19:83:5d:28:4e:88:78:9e:c6:3f:dd:ae:99:9e:85:94:
         36:a7:4d:6a:c7:eb:2e:2b:a1:5d:84:3b:12:5f:29:21:df:72:
         29:49:c6:d4:c6:d7:2e:61:b4:67:34:e4:80:98:58:79:8d:42:
         e1:2d:a5:41:f9:ef:56:08:e9:b3:40:41:5e:e8:9c:fb:6f:7b:
         75:f1:23:91:f8:fc:19:d1:9e:d0:7e:90:ec:75:3f:b0:86:f5:
         4b:3a:8d:20:87:00:21:c6:09:31:6c:82:d0:61:e5:29:ce:e6:
         27:b6:de:76:57:70:b9:7d:de:af:38:47:1d:fc:ec:1e:7b:d5:
         6b:a1:5c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 15:20:46 2026 by rpki-client