Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
File:                     JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json)
Hash identifier:          SrlvZz1Qhkk/z6VNc5Td5kSBXSW+7OyMaLu7c45r/wU=
Subject key identifier:   C8:4A:AA:F1:F1:15:B9:B8:08:81:FF:4F:7E:4B:06:C6:22:7E:83:C2
Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
Certificate issuer:       /CN=256be176b313e1a8a050f670af576771b655d611
Certificate serial:       019EB921A510FB67C98E7894310A6F3A1614
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
Manifest number:          1956
Signing time:             Fri 12 Jun 2026 00:00:50 +0000
Manifest this update:     Fri 12 Jun 2026 00:00:50 +0000
Manifest next update:     Sat 13 Jun 2026 00:00:50 +0000
Files and hashes:         1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: v85z85cp98U9qbsVjBZ3X4Dpko6cpVjgZHK/dBsbdsU=)
                          2: p2IMZfuSyzWUQCvrAkoFeLo46oo.roa (hash: hxar/HLUHEBtlzcjTx3TaCuWIzPYRzZYjjh5egyYeWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:a5:10:fb:67:c9:8e:78:94:31:0a:6f:3a:16:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256be176b313e1a8a050f670af576771b655d611
        Validity
            Not Before: Jun 12 00:00:50 2026 GMT
            Not After : Jun 13 00:00:50 2026 GMT
        Subject: CN=c84aaaf1f115b9b80881ff4f7e4b06c6227e83c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0b:76:63:fe:0d:58:40:a4:70:e5:59:3d:05:
                    7d:fc:94:a6:94:b5:65:76:45:e8:20:6b:25:d3:70:
                    da:6a:d7:80:71:f7:fc:26:42:ea:97:d5:d3:11:5b:
                    3a:b8:69:ea:93:c7:b8:ee:ee:36:4a:30:bc:71:79:
                    81:21:79:38:93:e3:7c:6d:2c:a2:c6:bd:9d:bd:c4:
                    c8:ae:8e:09:30:d6:c1:b5:f0:db:35:65:4c:22:52:
                    90:e3:8f:2c:da:17:a3:d0:a9:ca:72:0e:43:bf:b7:
                    eb:f0:30:5a:74:59:6b:0f:95:45:50:4c:a3:1a:3d:
                    1e:48:06:ae:72:00:db:9a:6f:e7:04:8e:92:55:44:
                    3b:41:1a:6e:e8:e3:e6:12:bd:d8:24:d6:7c:d3:0b:
                    bb:8c:85:d8:85:f4:ac:c9:e3:31:ce:f3:f5:23:24:
                    33:2d:53:f9:5e:5b:60:1e:18:1b:1f:43:86:c2:14:
                    cc:fa:91:e7:a8:fb:7f:20:c6:2c:ab:04:7f:3d:bf:
                    af:8c:98:f6:5d:32:b9:3e:2a:40:31:bd:bc:19:9f:
                    59:73:f8:5c:84:4c:d6:14:74:67:98:7c:97:b5:e7:
                    08:6a:f6:db:72:d4:53:a9:97:cc:0d:e7:3d:81:04:
                    bb:0e:c2:f8:c4:ae:a6:43:37:67:00:e2:d8:bb:3b:
                    44:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4A:AA:F1:F1:15:B9:B8:08:81:FF:4F:7E:4B:06:C6:22:7E:83:C2
            X509v3 Authority Key Identifier:
                keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:51:5a:e7:01:81:71:be:f8:aa:34:1c:73:67:92:f5:ba:a9:
         af:d8:6d:1b:08:f3:b5:92:16:5f:ca:99:60:a3:32:e5:71:e0:
         65:fc:49:44:e3:d4:2b:55:e6:48:63:28:b7:ee:fd:41:ec:6c:
         91:f8:e8:aa:d3:1a:c4:39:81:6e:3f:be:52:7b:1c:03:92:85:
         f9:a2:be:12:67:a2:94:1f:08:c2:fb:b0:b6:ff:93:b9:3d:4d:
         bf:23:e0:c7:84:67:0f:eb:08:b0:0f:89:e6:c3:8e:60:59:5c:
         b5:20:9f:3f:c3:dc:52:7b:75:14:df:21:e0:c6:2e:05:0a:09:
         5d:69:2b:e0:11:fa:19:ab:97:58:0b:b5:f2:e6:77:34:1b:25:
         a5:a1:36:7b:a5:8e:e8:0a:d7:4d:39:bd:4c:43:61:66:0b:93:
         9f:60:b8:77:af:40:b2:2a:10:b6:3d:aa:41:8f:2b:c4:1d:2e:
         5c:74:bb:3e:56:6c:c0:bf:4f:f7:a4:f7:91:e5:1f:ca:60:6b:
         45:f3:79:bb:67:16:a0:81:85:7a:d1:22:28:49:69:f7:d1:04:
         cd:96:63:cd:0a:6e:9c:27:95:e1:c9:14:d0:80:17:c5:76:96:
         48:3c:f1:19:e8:43:8d:7c:a7:0a:ae:4e:bc:b4:e6:75:7c:80:
         05:2e:77:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:09 2026 by rpki-client