Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
File:                     JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft (raw, json)
Hash identifier:          qT9hr+CVXJQtqX039cL/LHvfEG0JUwKaOM8JAecCbVE=
Subject key identifier:   54:CE:D8:29:D6:9A:A9:F1:F0:B4:27:F9:67:24:7E:15:90:B7:77:B8
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Certificate issuer:       /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial:       019EB9584219CC2910780E039D4BEE8A29BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
Manifest number:          1431
Signing time:             Fri 12 Jun 2026 01:00:29 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:29 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:29 +0000
Files and hashes:         1: 1-wqXuXVjU4DK7DThoDM4xKkLzpA.roa (hash: Ysd+kwqFCaatF0B+CxMd/0KKzo486Kn7yiW2Q4tdeXQ=)
                          2: 5e0tqH24BTM03yiq8eWs7gQhfjU.roa (hash: 2dooK4E+vB8Vi+8KxuvklQIHFbXhQITTT/Vg0tuOqZ0=)
                          3: BAVWZ2GqddVuzhP06KD0A_bCtt4.roa (hash: eKvOsbHOl1mbbSCZG1SoTdZdmz2aVvIhgRs7YLzoCNw=)
                          4: JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl (hash: hbVFhLGAVr5uV9hOSgbmSBwgIT7dD9ehWPKAnsvgIrs=)
                          5: obhZjPoFU0GF5aoDtx8pszyeQNo.roa (hash: DtLP/BpnbtJiMnxxKHcSTdBX7T/DtG/NN3abv8oUzzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:42:19:cc:29:10:78:0e:03:9d:4b:ee:8a:29:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
        Validity
            Not Before: Jun 12 01:00:29 2026 GMT
            Not After : Jun 13 01:00:29 2026 GMT
        Subject: CN=54ced829d69aa9f1f0b427f967247e1590b777b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:60:45:9a:62:f7:1b:51:9e:ce:08:ed:61:28:
                    61:0c:ed:17:81:60:8f:d4:78:ff:43:66:0b:ba:b9:
                    8e:9b:6c:62:a6:da:82:3e:11:15:5b:03:3c:e5:68:
                    64:fe:2d:b7:e5:1e:60:fc:b6:e8:77:3e:9d:5f:79:
                    d8:76:c4:f1:be:a4:6c:f0:b2:54:d9:f7:46:d8:55:
                    c8:bb:77:1f:d2:0e:ac:0f:7c:29:7a:07:a6:ec:0e:
                    8e:34:eb:86:c4:90:45:2b:76:8c:f5:0d:a2:89:30:
                    26:0b:2b:6f:95:4f:b8:36:79:9f:0e:91:71:2c:3c:
                    eb:9f:87:e6:80:5c:1d:e3:ea:d5:71:4f:c6:fc:e5:
                    9c:2a:1e:3f:04:8f:4e:b1:7c:28:e8:12:c4:2a:11:
                    40:cf:d2:d0:12:86:a0:82:84:02:73:7e:53:eb:65:
                    95:ff:82:78:8e:b3:db:2c:e3:e9:06:27:74:27:c7:
                    50:cb:86:5c:b2:bc:ec:89:9b:d1:83:1f:bc:12:4d:
                    f9:60:97:d6:f6:14:e8:5a:54:ed:16:88:f4:83:0b:
                    eb:ca:7e:a3:ab:85:34:d9:6b:51:5a:d4:bf:50:b0:
                    02:25:bd:43:4f:7c:16:7f:97:fa:6a:bb:9b:ae:28:
                    02:2a:58:69:8a:01:c5:a5:65:b2:4c:36:44:bc:1c:
                    24:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CE:D8:29:D6:9A:A9:F1:F0:B4:27:F9:67:24:7E:15:90:B7:77:B8
            X509v3 Authority Key Identifier:
                keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:49:cf:cd:9e:8f:ee:36:cc:aa:9a:1c:93:2f:8a:8f:85:9d:
         60:0a:93:70:f0:30:32:22:46:57:c0:10:4a:97:94:f8:e4:55:
         5a:02:d0:85:64:99:b2:08:00:0b:55:4f:c1:c6:e4:32:85:60:
         10:e9:0b:7f:9f:9f:a4:16:e1:b5:96:aa:a0:cc:2e:90:ae:ed:
         d1:ac:ca:0f:8d:7e:72:c0:0e:22:68:b6:60:40:20:35:02:7d:
         c3:57:40:07:14:3f:2a:ed:b1:a1:26:50:4a:93:8e:77:3b:c6:
         d1:a2:49:0b:9e:3c:52:73:fa:d9:0e:73:09:7e:d6:2d:68:ea:
         88:6e:02:3b:6f:9b:85:16:a7:54:f3:e3:c4:a7:1e:ab:56:0d:
         8d:a5:8b:48:e6:ab:32:7b:7a:b1:6f:24:43:ac:c3:66:49:4e:
         ee:c6:58:e8:75:5f:8b:96:c9:f8:c0:9e:5b:1d:59:07:91:5b:
         64:70:52:08:bd:48:a2:3a:ea:f4:2d:4d:c7:c9:cf:72:b0:55:
         ca:80:d9:62:17:5b:f6:c0:8e:d4:30:3b:90:7c:ac:2c:42:78:
         6d:a5:6b:16:21:ab:2a:de:76:ed:fd:7b:e3:b0:f5:0a:af:54:
         c8:78:41:40:27:15:95:e0:e6:29:68:74:af:95:6f:0f:17:10:
         3e:e4:8e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:34 2026 by rpki-client