Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
File:                     _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json)
Hash identifier:          nSbCow/EIdzzVkNoMDdytNfAg064w6ohLRYwxwlCJI4=
Subject key identifier:   DB:A3:72:45:12:C9:6A:E8:13:DB:F7:49:B2:FA:A2:0A:B6:6B:17:AB
Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
Certificate issuer:       /CN=fe340911274377a89ca1f9c15f180da986d744b7
Certificate serial:       019E29948EFDC494CAAF8295B0C7486CF600
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
Manifest number:          059F
Signing time:             Fri 15 May 2026 03:01:02 +0000
Manifest this update:     Fri 15 May 2026 03:01:02 +0000
Manifest next update:     Sat 16 May 2026 03:01:02 +0000
Files and hashes:         1: 9SBS7gJbmM_H_U69hDRLz5tqENk.roa (hash: CohDToPDWHyGMje9oQIew781Ud8ugON8LORc7w4Ntug=)
                          2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: LRHRdR5fV80IH4E7BlVDbuziN/hM7r20ApB2X4Dc58U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:94:8e:fd:c4:94:ca:af:82:95:b0:c7:48:6c:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7
        Validity
            Not Before: May 15 03:01:02 2026 GMT
            Not After : May 16 03:01:02 2026 GMT
        Subject: CN=dba3724512c96ae813dbf749b2faa20ab66b17ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:e4:ee:8c:b5:f0:62:25:07:34:e0:cc:ff:
                    92:e1:9f:e2:da:35:16:e5:1c:01:9c:b1:b8:c3:1f:
                    c8:27:33:03:80:37:12:c3:6e:0a:dd:0b:43:cd:70:
                    c6:a8:2d:67:d7:0c:4e:7c:85:fd:f2:3c:75:20:a4:
                    0a:7f:16:a7:52:70:d0:16:3c:6e:03:24:b3:9b:c8:
                    70:2c:b2:16:be:32:46:59:8e:fc:d5:b7:b8:c3:f1:
                    90:aa:24:a0:72:5d:e8:2b:72:4a:8c:06:90:1e:9e:
                    af:75:4c:66:67:84:06:46:e4:2b:0d:c1:18:cc:91:
                    49:b5:f9:4f:ee:33:90:64:5c:18:a1:d9:57:a4:e8:
                    30:c6:ba:55:13:59:87:11:3d:08:f3:1e:6d:e9:c8:
                    dc:33:cd:42:b5:32:c6:5e:e6:02:df:8f:30:37:f3:
                    e2:78:a9:36:23:2a:5a:e8:d6:71:8d:37:94:ea:32:
                    2d:9b:1b:9f:b8:ad:dd:0f:de:5d:6e:ac:bd:5f:2a:
                    c1:7e:19:5c:e8:28:1b:f4:4e:b9:84:00:62:d7:57:
                    21:13:f4:30:57:51:60:40:b8:be:09:10:03:19:42:
                    5c:41:29:1b:a5:60:8e:e8:32:da:b2:2c:1f:91:e4:
                    97:a7:7b:f7:7c:6d:79:f1:5f:3d:e0:a7:ee:74:b1:
                    8d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A3:72:45:12:C9:6A:E8:13:DB:F7:49:B2:FA:A2:0A:B6:6B:17:AB
            X509v3 Authority Key Identifier:
                keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b4:3c:c3:ce:28:17:4f:ee:81:86:fa:3e:43:2a:7a:c4:02:
         6e:69:62:75:35:4b:4e:72:93:5a:a2:cc:d0:de:d1:d5:c6:a9:
         5f:d7:33:07:d6:dc:40:1c:05:a3:d0:e7:0e:96:10:41:11:a3:
         dc:f0:aa:6d:73:be:28:05:78:94:22:03:03:da:6e:4b:4a:07:
         4c:48:08:2a:91:04:57:05:0d:54:c1:f1:9a:c2:41:88:16:0e:
         9c:fa:51:06:c5:ec:60:66:52:fe:e1:c2:dd:c3:26:cf:12:c0:
         84:47:73:d4:56:b1:d7:1d:1b:08:80:bd:ff:2f:91:64:e0:22:
         d1:20:98:43:4a:79:3f:6f:d1:08:73:5d:00:a7:9b:75:99:be:
         0e:89:9b:60:08:7b:8b:2c:3a:f1:c6:98:ea:29:88:9e:04:2a:
         8f:9a:9a:48:61:95:bf:23:56:1e:32:db:19:a6:36:eb:3e:4b:
         51:f6:3d:6c:4f:44:62:65:3e:44:7c:1b:0c:12:f7:0f:f2:02:
         ca:96:a4:f6:34:dc:0e:a0:a7:3c:9c:4e:46:81:9b:e4:9c:c7:
         8d:5a:7a:9f:5f:15:e3:f8:78:1e:5b:de:ed:24:5e:88:84:05:
         aa:3d:b4:b5:c2:58:a1:70:dd:5f:ba:f6:d3:03:92:d5:f1:b2:
         66:41:a3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:56:36 2026 by rpki-client