Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
File:                     jAYAQO86CCOqlz8NBZKx3agI94I.mft (raw, json)
Hash identifier:          CHB4L6t+rS7jPG2wrqEblfOlXYZ1JLSPbixDpJjI6hg=
Subject key identifier:   D3:95:45:D1:D6:E5:B8:52:D1:9D:B0:18:49:3E:D3:D9:47:B8:44:9B
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Certificate issuer:       /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial:       019F189E8858DAB01E9967CB77E436F67214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
Manifest number:          198C
Signing time:             Tue 30 Jun 2026 13:01:10 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:10 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:10 +0000
Files and hashes:         1: 0ZSPMOhVl_CYEffmgJIA-ZebrN8.roa (hash: 9FNLm9UezI9LWG0EYY6elTehFhNHqrh8PSFbqazgLkI=)
                          2: aIB-U74XOsh4LFFeV56dHmApdhA.roa (hash: n4BldvZSrWCDo/is34Mdq/Joj399xGxxHCi8O5qGXUc=)
                          3: jAYAQO86CCOqlz8NBZKx3agI94I.crl (hash: IFkpj++sHTxO914na7vXdtP8kwHVrtXhyTEBZVaKn2k=)
                          4: jrMavM7T5lh5Vt_GhvE7PBRjMs8.roa (hash: USL2VyfF57jrtGEUdroIYIf6KJtLy3Xo1q4FTmoA1+c=)
                          5: kft59b0FPyvt41ZJ7c7rkDRzMdo.roa (hash: rnkG/kK1GbP5ThmnLvK6djMuJiao91onEPjk3GN8OV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:88:58:da:b0:1e:99:67:cb:77:e4:36:f6:72:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
        Validity
            Not Before: Jun 30 13:01:10 2026 GMT
            Not After : Jul  1 13:01:10 2026 GMT
        Subject: CN=d39545d1d6e5b852d19db018493ed3d947b8449b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:af:b3:5b:58:83:fd:f3:a7:bd:bb:98:bd:19:
                    52:55:d2:d8:87:9e:3c:ff:5f:cc:76:b5:9b:7c:c6:
                    92:b3:36:98:98:77:8a:f4:01:3e:4f:c0:f6:51:5f:
                    a8:8d:ad:45:18:92:fd:d0:06:cc:ac:fb:63:11:55:
                    46:fe:61:ba:de:f9:d4:a2:c6:d5:15:ca:64:32:93:
                    c8:21:8d:cb:25:a0:70:d0:1e:c4:26:c6:da:2b:77:
                    c1:11:44:98:59:0b:d9:4c:58:f7:94:41:3b:db:64:
                    57:c3:77:86:15:d2:26:7e:d0:14:73:a8:33:21:c1:
                    4a:6c:e8:4d:44:77:6c:dd:1a:04:a6:5c:a2:7d:b8:
                    13:e6:ad:b8:79:dd:62:58:d6:91:63:87:23:5c:59:
                    6d:da:64:60:aa:23:d7:88:1e:9d:2a:03:f8:10:c2:
                    26:3c:b4:73:db:6a:34:80:54:93:61:69:19:35:c2:
                    a6:7b:d3:67:4e:c3:1e:f1:9e:69:ba:24:a8:74:ba:
                    40:f6:17:44:d6:bb:b8:dc:4e:0f:54:ba:e5:d4:cc:
                    91:e7:3b:ae:b0:34:48:4b:4b:97:d2:41:c9:b2:f2:
                    76:fc:58:c7:88:c9:d9:ea:d3:8c:50:9a:3b:af:68:
                    9d:66:c4:4d:d8:0b:2e:13:ee:6b:e7:d6:c9:da:07:
                    40:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:95:45:D1:D6:E5:B8:52:D1:9D:B0:18:49:3E:D3:D9:47:B8:44:9B
            X509v3 Authority Key Identifier:
                keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:4b:a2:5d:4f:d9:66:75:aa:5a:79:d6:a8:51:c9:86:4a:c7:
         78:06:5a:e3:db:b4:d6:7d:e1:9c:e3:c0:d2:81:a3:56:c4:d4:
         a5:65:64:7c:9b:1c:0d:f2:0c:33:93:a1:6a:cb:cf:a5:18:5d:
         0f:d0:61:6a:d8:de:5f:7d:e4:ff:73:dd:09:9d:fc:f8:73:45:
         44:50:6f:8f:ea:24:fd:fc:98:d2:8e:f5:25:4a:49:ed:3f:72:
         0e:b9:f4:09:b1:a5:47:10:59:f1:d8:7b:74:ea:38:68:27:87:
         7e:7c:ec:fa:77:cc:5f:9f:23:78:96:36:98:1e:df:ab:43:5a:
         f3:18:1b:55:33:26:e4:e9:0c:85:76:bf:bc:a7:00:1b:d9:99:
         27:cc:cd:5c:67:9f:fd:e8:1d:58:70:56:8e:36:8b:1f:fa:9c:
         94:da:ea:0c:53:47:91:b4:3c:24:e2:b0:df:28:24:d9:79:ae:
         66:30:08:b2:32:73:f6:c6:b7:39:d8:45:19:3d:4a:1f:b7:12:
         38:7a:6d:bf:30:93:44:6b:ca:2e:29:af:c7:0b:b9:84:2e:56:
         f0:4a:42:59:a9:3c:2e:58:c5:94:7d:64:9c:2a:a8:9f:57:57:
         ac:7c:3c:58:df:cf:d8:f2:40:fb:43:0d:e9:85:23:07:09:60:
         12:03:f7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:17:09 2026 by rpki-client