Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
File:                     ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft (raw, json)
Hash identifier:          JPUVb40NlFeatPPbamedj1xceV4QQr6HtckYqASDk7s=
Subject key identifier:   89:41:31:CE:EE:C1:9C:55:70:45:39:A6:D5:17:00:DD:2B:56:A2:78
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Certificate issuer:       /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial:       019F0DE3E8495567B46C07D7DA6D35F02B50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
Manifest number:          1992
Signing time:             Sun 28 Jun 2026 11:01:07 +0000
Manifest this update:     Sun 28 Jun 2026 11:01:07 +0000
Manifest next update:     Mon 29 Jun 2026 11:01:07 +0000
Files and hashes:         1: 6osyBEyP0HcSM0NQyBHIvRn1Fhk.roa (hash: hglwRwFDDllYX9jYTjK+3ZWKDlBPRVFz/hfeMX7vQ4o=)
                          2: JauiIPMakXs-XxyLaWxO0rjIw8E.roa (hash: iXxbDtozEsteNQ9atnfu+OC8ptchPtG62ieHNq3ckVI=)
                          3: Ote8Xple36NOljGpswnBnv1BVHg.roa (hash: 7PcKnm0HqFWloTnBPRiK0Jc5QCuqif0gaeoULdBF7ck=)
                          4: cKqvG9BsZG6su7we84q3E8DeV-0.roa (hash: yebnJKVbgSkS4D7E+ORpv+scwNkFgxpLo5cTVCzh2rI=)
                          5: jYL_MHWzxB2OX15Vxs1hmwy4NzY.roa (hash: VfRhELdR7icqL4aOULnTdK+xLakSZDUjVfSg/1rTQ3c=)
                          6: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl (hash: iw527G7NlxjRTqyR7lLC4zc3u4ZidMEFyynrPkJzT8E=)
                          7: vsAq2ox79fGO3Ta6QC_1orZGKIY.roa (hash: 11wmgbpdweQHKnUalimrWFHED8Za8q31JapGPV4qcP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0d:e3:e8:49:55:67:b4:6c:07:d7:da:6d:35:f0:2b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
        Validity
            Not Before: Jun 28 11:01:07 2026 GMT
            Not After : Jun 29 11:01:07 2026 GMT
        Subject: CN=894131ceeec19c55704539a6d51700dd2b56a278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:98:83:46:c0:ab:7b:55:1b:38:8a:cb:f7:85:
                    91:2e:e7:05:0e:ec:f5:c7:c9:fa:08:67:f3:7b:88:
                    e7:a7:71:bf:9e:0b:69:1a:41:3f:2a:09:c4:f9:ca:
                    62:89:ff:10:2d:e6:15:87:c3:6f:18:a7:ad:c1:e7:
                    c7:3f:81:4d:b4:f5:f0:ce:fa:a2:d6:3b:ce:c6:a3:
                    45:50:67:83:e3:f0:5e:93:04:22:1a:81:92:b9:09:
                    5e:42:fd:9f:fa:d5:f1:a8:55:44:b0:e8:9c:2d:46:
                    fc:c8:57:b0:74:cb:e5:fc:20:e0:84:10:b9:3a:1c:
                    2c:28:5f:6a:5d:94:31:e5:3f:56:60:d6:90:05:db:
                    4c:a1:2f:a9:bf:58:1c:61:96:b0:f9:61:63:17:ac:
                    e3:2f:50:5a:83:50:07:64:1f:06:a2:cb:99:99:49:
                    35:8f:26:fb:00:55:b6:ee:d2:87:04:5c:86:a2:6c:
                    ab:dc:f0:12:2f:8e:92:a9:52:b7:4c:d3:02:87:86:
                    5b:cb:d9:dd:db:60:e2:9c:d9:d4:55:fe:f7:4d:3f:
                    67:70:d5:0b:c4:07:be:41:33:c7:ea:f3:35:40:90:
                    12:f7:b6:bc:7a:2a:a8:5a:25:42:24:11:f0:a2:40:
                    58:be:ae:47:7d:49:dc:df:2a:1f:3e:e3:85:8d:85:
                    6c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:41:31:CE:EE:C1:9C:55:70:45:39:A6:D5:17:00:DD:2B:56:A2:78
            X509v3 Authority Key Identifier:
                keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a5:a2:9b:f0:9b:c1:b9:d4:99:cb:27:5e:6e:6a:d5:0c:09:
         41:d1:bb:ad:1f:ef:77:53:b1:c2:de:dd:88:27:47:d5:83:8b:
         2d:ac:9f:56:c9:b9:d3:b1:d2:f3:d2:8a:47:a9:aa:07:62:04:
         e1:3c:0e:ac:b4:db:c5:58:ec:c7:2d:a8:87:b8:6f:62:a8:db:
         31:bf:52:01:dd:7b:21:bb:a3:88:fe:7a:d4:11:cc:67:6b:f2:
         2b:31:22:6e:52:a6:78:b9:90:05:17:69:04:b2:27:b6:bc:63:
         a4:9f:28:d4:4c:b6:37:ac:4e:c3:70:c5:44:3a:54:b7:ed:d8:
         9e:7a:55:67:07:d9:48:b8:1a:7d:d3:81:0a:76:59:69:55:9e:
         a4:4f:3c:a7:91:78:67:d7:6d:e1:28:28:12:8e:d3:cc:71:5e:
         2b:9e:01:44:a7:5b:d1:95:f0:ce:49:ee:9d:58:c9:20:90:77:
         0b:59:e5:25:e4:ec:32:e5:64:85:af:9b:6e:20:85:67:d4:a6:
         ac:60:71:ca:24:6e:4c:bf:10:66:d6:d8:30:2d:cd:14:2d:2c:
         3f:cb:b5:c6:4f:5b:1f:e6:18:73:66:b6:b9:42:6f:3e:e6:25:
         c4:26:c7:7c:cf:54:e6:09:67:a5:93:13:1f:bb:38:96:30:9c:
         e5:5e:5b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 15:21:47 2026 by rpki-client