Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.mft
File:                     jO8UbYXAmqWWh_1jFbEyccHCkq0.mft (raw, json)
Hash identifier:          H4vZZ1vTSBnpdEhCTS7U5/s+7TDUF3UgJHulcjAF81U=
Subject key identifier:   5D:6A:F4:10:65:96:10:4E:98:60:FC:86:E9:1E:19:EA:B2:8A:E1:2C
Authority key identifier: 8C:EF:14:6D:85:C0:9A:A5:96:87:FD:63:15:B1:32:71:C1:C2:92:AD
Certificate issuer:       /CN=8cef146d85c09aa59687fd6315b13271c1c292ad
Certificate serial:       019F1377F8F83C46230A1E789849556B60CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jO8UbYXAmqWWh_1jFbEyccHCkq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.mft
Manifest number:          AE
Signing time:             Mon 29 Jun 2026 13:00:57 +0000
Manifest this update:     Mon 29 Jun 2026 13:00:57 +0000
Manifest next update:     Tue 30 Jun 2026 13:00:57 +0000
Files and hashes:         1: HgmkuPKwqjol9mbHZ8ataf1SvcE.roa (hash: gyDBFFZDQxXXn08l/MiA7FrLtA8MM9zX3POriEuaaw8=)
                          2: Nb8A-vgy3w6OmSHNpfdTE4Sq0lc.roa (hash: i/BzMuMNpx2QMA0UsLDLIIFwuC9xx8eEb11QlO+afMY=)
                          3: jO8UbYXAmqWWh_1jFbEyccHCkq0.crl (hash: Fj7y5/v0KXhWqiw54dzj8gs9aPJNqDsBHkWzyLumRXQ=)
                          4: qTJDb5bZcI57GfkMCiidBBuCxcM.roa (hash: hotESPxS+NRDdQrT1wDQOkWWo9YVaPiGSYJ82rAj5o4=)
                          5: qYIKLfHuJxr1i8P2u9bA8lPvwGE.roa (hash: JbOJYy4NzS52IJRZP9iw9SIM5tlGcIMYzweBPamZKZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jO8UbYXAmqWWh_1jFbEyccHCkq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:77:f8:f8:3c:46:23:0a:1e:78:98:49:55:6b:60:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cef146d85c09aa59687fd6315b13271c1c292ad
        Validity
            Not Before: Jun 29 13:00:57 2026 GMT
            Not After : Jun 30 13:00:57 2026 GMT
        Subject: CN=5d6af4106596104e9860fc86e91e19eab28ae12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6a:fb:ec:05:3d:b2:e3:1c:b1:0e:35:63:67:
                    48:0c:91:a0:a8:db:96:a4:39:fd:9a:f5:32:c2:20:
                    18:7f:93:41:a8:e7:2c:89:cf:c5:1e:89:04:07:dc:
                    31:29:cf:46:51:25:8e:23:c4:43:40:3c:73:b8:80:
                    7e:78:ba:36:6d:f1:1e:30:15:28:a6:7d:d1:fa:14:
                    b5:9c:13:84:32:e8:29:62:75:fa:c8:51:ef:35:36:
                    2d:3f:a4:c6:22:bf:ec:ee:2a:e2:11:e3:f6:88:29:
                    2f:c3:9a:12:58:6a:b4:78:8e:53:9b:2a:87:b7:12:
                    be:11:47:5d:a3:41:01:72:2c:d1:fe:97:6c:9e:05:
                    5c:c2:32:b0:b3:e8:62:a3:db:6c:d3:2f:40:24:f8:
                    6c:a0:40:66:12:25:ed:ac:78:b0:cc:e7:24:17:d5:
                    7b:d2:e7:f6:c9:54:50:f7:87:c2:0e:da:89:9a:d4:
                    e1:17:82:f8:cf:00:08:4c:3f:25:ee:91:2b:30:74:
                    2e:c0:9a:cf:96:b1:f2:16:61:fb:6b:1c:03:2c:e7:
                    f6:9c:cb:df:46:9a:e4:c6:e6:9e:74:7d:dd:30:7a:
                    bb:19:64:bd:0c:67:60:7f:6b:25:48:f4:3a:88:e2:
                    b3:91:88:c7:b1:9a:6e:34:ec:94:59:b4:50:61:c0:
                    0e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6A:F4:10:65:96:10:4E:98:60:FC:86:E9:1E:19:EA:B2:8A:E1:2C
            X509v3 Authority Key Identifier:
                keyid:8C:EF:14:6D:85:C0:9A:A5:96:87:FD:63:15:B1:32:71:C1:C2:92:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO8UbYXAmqWWh_1jFbEyccHCkq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:36:1a:cd:8d:59:95:c1:9b:05:99:52:84:c0:13:9a:a4:83:
         f1:9a:b7:30:36:0e:cb:e4:86:5e:9d:82:f5:57:3d:65:df:98:
         18:1a:d2:77:95:d0:b8:99:5d:e0:93:23:ab:e9:c4:2f:38:cd:
         5f:ff:51:d4:ce:f4:95:3b:45:eb:1c:dd:ba:a9:f5:60:73:c3:
         e2:2a:ee:6d:95:fe:01:6d:88:ab:36:d7:f2:eb:75:7f:10:0a:
         a3:e0:6d:47:f0:fa:b0:1b:9e:6f:3c:46:c4:58:4a:f3:ec:bd:
         83:f1:33:27:ff:31:f6:bf:fe:85:14:db:cf:44:94:15:47:6e:
         65:18:be:7a:cc:f5:dc:12:be:5a:e0:5e:23:81:ae:eb:27:fe:
         5e:ef:a3:6b:0f:e2:39:3e:d9:af:45:68:bb:f9:ff:e7:3e:d9:
         97:c6:98:db:6e:af:27:ec:6f:c0:f6:32:a6:70:67:d8:96:64:
         65:68:13:30:63:9f:00:e1:c4:c6:d0:4e:30:ff:9b:41:2d:19:
         88:cc:d5:7e:6a:91:53:2d:a7:d1:87:48:a1:27:17:d5:a0:8c:
         2c:e0:b6:d4:d1:0a:e7:8b:d6:f6:3e:41:ba:70:6a:42:5e:9a:
         fd:f1:3f:35:c6:66:a8:b9:2b:25:03:63:74:9d:0d:f6:68:88:
         9b:b8:c6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:41:49 2026 by rpki-client