Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
File:                     JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft (raw, json)
Hash identifier:          z0b8JNmf1k+e7vr+IpByYsa3ghMJt9ARpArIGdQpjQ8=
Subject key identifier:   08:40:A1:A8:8D:75:86:F0:43:83:FA:FD:85:01:18:74:7E:A0:FD:69
Authority key identifier: 26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B
Certificate issuer:       /CN=26251cf7d8d6d057dc64715ba836299df39fd85b
Certificate serial:       019EB8455A6469AFD308BB655CF2E9F679F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
Manifest number:          02BB
Signing time:             Thu 11 Jun 2026 20:00:13 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:13 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:13 +0000
Files and hashes:         1: JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl (hash: 86FbDG0rKDYjXBH3aL286P6W9H8l7PaLSjmiG66ALdY=)
                          2: fX-rHvxMS7rGe-P0kdh6qBCV0kw.roa (hash: YxEpHCuxMU6/BR/ByERCcyICEyXZ5/Zrc7JTg1hXiro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:5a:64:69:af:d3:08:bb:65:5c:f2:e9:f6:79:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26251cf7d8d6d057dc64715ba836299df39fd85b
        Validity
            Not Before: Jun 11 20:00:13 2026 GMT
            Not After : Jun 12 20:00:13 2026 GMT
        Subject: CN=0840a1a88d7586f04383fafd850118747ea0fd69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ef:18:6d:1e:ea:27:b7:80:5b:a6:88:79:84:
                    c6:e8:47:34:29:84:4e:33:4b:85:9e:4c:fe:2f:03:
                    74:6e:06:b1:d1:ac:05:73:ad:58:fb:64:5b:4a:4e:
                    9e:41:2a:d9:57:3d:b6:1b:22:03:98:90:36:c4:5f:
                    0c:e5:c5:ea:c1:bc:9e:9a:00:bc:70:87:97:69:ee:
                    de:1a:2b:71:0e:4d:19:dc:7e:1f:93:e0:d5:e9:b1:
                    70:24:42:51:9a:37:ad:11:de:9c:4a:c2:4e:b5:02:
                    2a:43:eb:ac:cf:62:1c:2c:f9:09:f4:51:5b:ec:68:
                    e4:bb:70:ea:8a:bf:14:33:bf:07:fc:3e:fb:00:e2:
                    08:e4:41:28:c3:08:ea:cc:fd:eb:86:7f:fd:e8:40:
                    fd:60:d2:34:e3:47:3e:ae:1c:ee:fe:c0:e2:80:ff:
                    4a:4f:28:6c:3e:35:46:40:e9:55:5e:3e:0c:30:51:
                    2a:c6:5b:0d:ae:92:29:de:70:12:55:9f:7d:a2:d3:
                    e4:e8:43:1c:8a:bf:bc:88:f8:f8:4d:64:a6:a6:29:
                    dc:09:83:f5:93:0e:9f:7a:e8:3d:c1:51:4f:3b:4a:
                    37:e2:2e:b9:e7:cc:80:78:44:4c:2d:e2:f5:a1:97:
                    59:ea:d7:86:0f:63:36:58:71:e7:9f:a5:06:46:53:
                    ee:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:40:A1:A8:8D:75:86:F0:43:83:FA:FD:85:01:18:74:7E:A0:FD:69
            X509v3 Authority Key Identifier:
                keyid:26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:95:a9:f5:95:fc:b8:88:ea:e7:44:45:64:d1:b7:a9:0c:a9:
         80:9a:e7:35:6c:c1:e7:27:85:e9:63:a2:31:d8:fe:e5:e3:d9:
         ad:97:71:ea:72:d7:25:94:9c:27:f3:e1:eb:46:1b:ea:69:02:
         6f:c1:09:c9:68:be:af:59:6c:cf:ee:67:0c:22:22:e5:0b:d9:
         a6:b7:d0:01:a2:e0:95:db:60:a6:30:0a:c6:f8:f1:81:4f:c5:
         28:eb:34:60:f6:15:6a:c8:e9:52:19:ff:fc:82:da:dd:e9:14:
         9f:eb:9b:b2:05:f8:b4:7e:bb:e2:be:3e:30:7d:cf:12:0e:47:
         4f:ad:35:00:03:65:2c:b8:97:af:73:b4:b3:b6:d4:ed:bd:e4:
         ff:f7:5d:bf:ec:11:21:5d:d7:0d:4f:b7:52:27:de:fd:27:69:
         6c:d1:40:35:f8:90:69:eb:b9:43:79:23:15:4f:d7:8e:5f:7a:
         2e:5b:88:8d:12:bc:1d:86:d0:bc:e6:ae:15:21:ba:60:fe:56:
         eb:f9:83:37:aa:ca:08:ca:c9:a4:f5:f1:fb:1c:86:98:a8:11:
         9e:82:fe:fa:9e:d4:17:ca:a5:db:aa:4e:17:58:ae:ba:10:4f:
         ae:a6:03:3f:d4:c3:b2:2d:09:64:c9:a3:7a:02:4b:41:a9:da:
         bb:40:41:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64RVpkaa/TCLtlXPLp9nn0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MjUxY2Y3ZDhkNmQwNTdkYzY0NzE1YmE4MzYyOTlkZjM5
ZmQ4NWIwHhcNMjYwNjExMjAwMDEzWhcNMjYwNjEyMjAwMDEzWjAzMTEwLwYDVQQD
EygwODQwYTFhODhkNzU4NmYwNDM4M2ZhZmQ4NTAxMTg3NDdlYTBmZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO8YbR7qJ7eAW6aIeYTG6Ec0KYRO
M0uFnkz+LwN0bgax0awFc61Y+2RbSk6eQSrZVz22GyIDmJA2xF8M5cXqwbyemgC8
cIeXae7eGitxDk0Z3H4fk+DV6bFwJEJRmjetEd6cSsJOtQIqQ+usz2IcLPkJ9FFb
7Gjku3Dqir8UM78H/D77AOII5EEowwjqzP3rhn/96ED9YNI040c+rhzu/sDigP9K
TyhsPjVGQOlVXj4MMFEqxlsNrpIp3nASVZ99otPk6EMcir+8iPj4TWSmpincCYP1
kw6feug9wVFPO0o34i6558yAeERMLeL1oZdZ6teGD2M2WHHnn6UGRlPu/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhAoaiNdYbwQ4P6/YUBGHR+oP1pMB8GA1UdIwQY
MBaAFCYlHPfY1tBX3GRxW6g2KZ3zn9hbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80OGI1MmMtYTA0NS00MDlmLTk4MWIt
OTUyMDU0OWQ3ZmQxLzEvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80OGI1MmMtYTA0NS00MDlmLTk4MWItOTUyMDU0OWQ3ZmQx
LzEvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpWp9ZX8
uIjq50RFZNG3qQypgJrnNWzB5yeF6WOiMdj+5ePZrZdx6nLXJZScJ/Ph60Yb6mkC
b8EJyWi+r1lsz+5nDCIi5QvZprfQAaLgldtgpjAKxvjxgU/FKOs0YPYVasjpUhn/
/ILa3ekUn+ubsgX4tH674r4+MH3PEg5HT601AANlLLiXr3O0s7bU7b3k//ddv+wR
IV3XDU+3Uife/SdpbNFANfiQaeu5Q3kjFU/Xjl96LluIjRK8HYbQvOauFSG6YP5W
6/mDN6rKCMrJpPXx+xyGmKgRnoL++p7UF8ql26pOF1iuuhBPrqYDP9TDsi0JZMmj
egJLQanau0BBTA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:58:21 2026 by rpki-client