Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File:                     JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier:          2Yv41VWvF6p4Ub30gMNVnQGKDhSXL0Uf/HWf47g/cpY=
Subject key identifier:   35:B9:D0:7B:59:89:C3:1F:11:E3:09:28:BE:36:D7:2E:65:75:29:B8
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer:       /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial:       019ED2060482932549C832EE9A9AFEBA5C5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number:          0B1E
Signing time:             Tue 16 Jun 2026 20:01:10 +0000
Manifest this update:     Tue 16 Jun 2026 20:01:10 +0000
Manifest next update:     Wed 17 Jun 2026 20:01:10 +0000
Files and hashes:         1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: /mRJGY9ehDq4sE+Rh4hf32jGf7+7+xcQusZcgtt/rEI=)
                          2: gWon8go1X1etoZ8VVC7MVcrh7rw.roa (hash: +h9DsffeSnMEN/znqbhxvFFiJiaGvYzj2iIhf/egNzg=)
                          3: nePHPrOEtQ2PBdl8CIDH53O4jYo.roa (hash: LtVuUBSEUcTSpEfdLMbOtpgX1qZbM9aciFJAh+jdl4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 20:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d2:06:04:82:93:25:49:c8:32:ee:9a:9a:fe:ba:5c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
        Validity
            Not Before: Jun 16 20:01:10 2026 GMT
            Not After : Jun 17 20:01:10 2026 GMT
        Subject: CN=35b9d07b5989c31f11e30928be36d72e657529b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:e8:6c:0f:95:38:93:07:9e:11:14:ff:22:
                    08:d0:4c:32:44:b8:7a:09:2b:a8:72:10:33:41:79:
                    7b:b8:ea:de:34:1c:49:44:93:75:18:b2:53:e2:08:
                    a5:9c:b5:75:18:3f:28:f5:31:15:c6:1c:e1:72:e2:
                    e7:87:78:a7:40:66:b2:69:b1:fc:d2:b5:90:3f:4c:
                    d1:e4:a8:b1:f6:84:a9:86:3b:57:a5:6d:37:08:14:
                    72:e5:0c:ff:a1:a1:7e:9d:e2:1c:da:2f:f5:c9:33:
                    1a:b0:a3:5f:23:28:73:47:ae:2b:de:88:ec:89:97:
                    03:11:07:79:e5:25:de:bc:bb:69:29:1f:d2:13:b7:
                    6d:ee:45:a6:21:15:31:84:93:89:52:19:35:9a:47:
                    8c:94:9c:dd:71:9e:fa:d1:03:53:ce:43:7b:5e:f7:
                    f2:4f:8f:30:4a:26:79:09:cc:ba:92:dc:67:2c:dc:
                    d2:97:5e:8c:eb:9c:72:d6:bc:be:e3:95:60:75:a1:
                    af:c2:8f:55:02:df:eb:0f:3a:ec:14:dc:a3:d4:28:
                    44:63:e1:1f:78:55:bc:8f:48:2e:06:61:c3:17:9f:
                    39:7e:17:fe:70:0f:a7:a7:4a:1d:5e:ed:be:52:cb:
                    2c:f2:66:a0:42:ee:ec:84:2e:2a:13:ad:87:6a:0e:
                    2a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B9:D0:7B:59:89:C3:1F:11:E3:09:28:BE:36:D7:2E:65:75:29:B8
            X509v3 Authority Key Identifier:
                keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ec:1b:63:98:bd:d8:33:e4:4e:11:7b:67:97:74:54:e0:e9:
         0d:49:5e:a8:4c:2e:02:e7:fb:84:f4:11:1e:7d:02:c0:70:7c:
         16:ad:f2:fc:ec:c0:65:1a:2e:eb:91:7c:82:af:06:aa:0d:91:
         4b:29:3e:f1:98:56:00:88:56:89:18:19:a3:00:a7:ca:5f:26:
         01:cd:b9:e2:28:2c:37:f1:f9:d3:35:c0:c3:dc:54:ac:d6:be:
         b0:eb:1f:44:41:cb:5f:f6:d8:b4:26:d9:68:36:d8:49:39:d7:
         42:29:d7:ba:8c:12:1e:06:cc:fb:7c:bb:bc:20:78:7d:44:07:
         77:f6:7d:cf:48:da:21:d3:e0:84:f8:b9:a6:45:eb:a4:87:a0:
         9d:89:a9:5e:28:f3:c1:47:0c:ba:b6:66:3f:28:5b:96:d5:03:
         30:d6:d8:17:af:44:c6:8d:70:b6:a3:68:4d:79:2a:e2:c8:dd:
         54:62:45:af:02:3a:eb:fe:1d:85:79:66:61:ed:75:3c:3a:34:
         67:25:a5:7b:83:dd:a9:9a:37:0e:7c:4a:88:42:46:6f:e0:d2:
         d6:b9:ae:69:90:62:11:d5:ef:a1:a5:97:0c:f7:1a:b0:7a:af:
         30:a3:0a:84:52:29:0e:c2:07:1a:09:a0:22:98:84:0d:63:75:
         5b:0a:f6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 04:34:41 2026 by rpki-client