Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.mft
File:                     Jk4B1P2QJjaB6cvWeD7IsKYebr4.mft (raw, json)
Hash identifier:          cwf9AwafbyUkon5puOIMGcCfrUIuOCfTiMNxdhdx7ls=
Subject key identifier:   E9:26:3C:EA:86:74:62:BE:25:28:3D:9B:11:A9:83:35:13:77:FE:F8
Authority key identifier: 26:4E:01:D4:FD:90:26:36:81:E9:CB:D6:78:3E:C8:B0:A6:1E:6E:BE
Certificate issuer:       /CN=264e01d4fd90263681e9cbd6783ec8b0a61e6ebe
Certificate serial:       019FF3EB40196BE6AF42DA20669C21FED1CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jk4B1P2QJjaB6cvWeD7IsKYebr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.mft
Manifest number:          73
Signing time:             Wed 12 Aug 2026 03:01:48 +0000
Manifest this update:     Wed 12 Aug 2026 03:01:48 +0000
Manifest next update:     Thu 13 Aug 2026 03:01:48 +0000
Files and hashes:         1: Jk4B1P2QJjaB6cvWeD7IsKYebr4.crl (hash: KCPeThxwkKkbZB3MxQfb7chB5CAxnrj2Jeedw8ljc1c=)
                          2: gvef48JXo1j7ZIIHvaaFbWy4pN8.roa (hash: 60oMLYPg6N0/DunwA9zatVT67Q2Jj0J5vjnOjDO2jPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jk4B1P2QJjaB6cvWeD7IsKYebr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 03:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f3:eb:40:19:6b:e6:af:42:da:20:66:9c:21:fe:d1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=264e01d4fd90263681e9cbd6783ec8b0a61e6ebe
        Validity
            Not Before: Aug 12 03:01:48 2026 GMT
            Not After : Aug 13 03:01:48 2026 GMT
        Subject: CN=e9263cea867462be25283d9b11a983351377fef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7a:c0:e1:6f:dd:56:85:ed:36:2e:e0:12:d1:
                    0b:9a:09:a3:90:4a:85:38:d0:6d:92:97:f8:ff:50:
                    bf:4f:e4:2a:65:85:a2:1c:60:5a:d5:79:b2:44:a0:
                    a1:92:2d:b7:fb:0b:83:06:79:ab:03:2d:20:58:37:
                    29:40:70:81:2f:44:a1:f6:93:c9:5a:29:89:7a:ea:
                    61:7b:96:06:ec:c4:ae:6f:5e:4b:24:3a:fe:54:de:
                    17:b0:b2:f8:95:51:34:38:95:a0:b7:a8:30:21:2d:
                    61:99:fd:31:fc:42:93:1a:33:e5:f0:66:88:5d:35:
                    7e:8e:3c:be:8f:e4:27:e7:c8:24:67:66:88:1d:67:
                    f3:ab:59:cc:e6:e8:ca:29:dc:ee:f0:40:96:3d:5f:
                    19:c4:48:fc:70:7f:ea:57:2e:84:84:ed:ef:a9:66:
                    6f:b1:9d:66:87:b2:ff:a9:e3:51:cc:29:ce:d2:86:
                    fa:f2:83:8b:6c:9f:29:32:0c:13:13:35:2f:34:74:
                    0c:33:c2:60:42:ff:f4:50:57:71:a9:2a:83:0a:65:
                    b2:1c:70:ed:18:1e:ef:57:8b:a5:b4:41:a6:bf:2c:
                    e6:8c:04:f1:61:1b:4f:af:d6:26:0a:ad:9c:6c:80:
                    bd:bc:a9:38:3b:fd:42:33:fb:ef:f5:10:78:d0:51:
                    ce:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:26:3C:EA:86:74:62:BE:25:28:3D:9B:11:A9:83:35:13:77:FE:F8
            X509v3 Authority Key Identifier:
                keyid:26:4E:01:D4:FD:90:26:36:81:E9:CB:D6:78:3E:C8:B0:A6:1E:6E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk4B1P2QJjaB6cvWeD7IsKYebr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c1:f0:58:5e:0d:f6:70:b0:7c:14:d8:fd:9f:2e:30:ae:57:
         b2:a1:59:c3:f3:f3:4d:1a:f7:3a:d0:7b:77:2a:1b:78:8c:ec:
         ba:b2:4e:92:14:14:51:30:c8:58:dd:04:b2:bb:cb:96:fd:d4:
         d9:4f:93:e4:2b:49:78:22:c0:f7:94:14:f7:88:16:2a:bd:ed:
         c2:10:f7:d1:08:79:47:a8:45:31:df:2d:9f:92:3c:99:97:ef:
         35:60:f8:30:22:fd:c1:a7:58:7a:c6:ce:95:b1:42:80:07:36:
         83:4b:0e:de:aa:5c:d5:39:87:5b:c3:2c:a6:3d:47:4c:ed:60:
         50:6e:25:00:59:bf:ed:e1:d5:93:28:3f:3d:11:b6:05:22:e8:
         74:c2:31:12:c3:c0:c6:5e:b8:f7:8b:42:67:4f:74:ac:83:91:
         96:42:5f:07:c0:70:0f:f4:6d:76:03:b7:94:d0:04:14:5b:c9:
         0f:41:32:3a:60:e7:e5:e0:4e:e8:c6:df:46:45:9a:f2:ab:5b:
         22:4d:e1:1e:7f:8d:2a:50:c2:df:15:ad:5d:1a:f2:60:bd:59:
         05:64:57:2c:3d:2a:71:9e:9c:03:ae:1c:f3:d5:9b:81:db:e5:
         be:f9:55:08:38:4f:f5:91:3b:5b:93:fe:3a:10:03:97:69:a8:
         91:de:de:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 09:44:01 2026 by rpki-client