Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
File:                     jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json)
Hash identifier:          0OPUwUrLKOXH3ANya/nB2h1Nr7DK9psdGA72dUgHM/A=
Subject key identifier:   C6:FE:16:5E:23:9D:51:A9:85:84:CF:59:26:95:19:9F:56:1F:89:87
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Certificate issuer:       /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial:       019F1189F9172FF0FF00A40B5ECFF5B49CC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
Manifest number:          16C7
Signing time:             Mon 29 Jun 2026 04:01:22 +0000
Manifest this update:     Mon 29 Jun 2026 04:01:22 +0000
Manifest next update:     Tue 30 Jun 2026 04:01:22 +0000
Files and hashes:         1: 17ZzXQIgaPFFjeqMhwt3zOxvx1s.roa (hash: 86lU48qvlXKv6saptuHXqJOZusprYtOpfN/ZmUTRc2c=)
                          2: EozSJCiP9Cygcyge5GyOuN1Brck.roa (hash: FC5zsNMnxd0ekJD3hWuMDKKtr4NZV7IGmew1wZKk3hk=)
                          3: SJ04ay6mMnNqXRQ46nJIK4oxSlw.asa (hash: 2SJn970nGzja/+MwrBnP0LJ7l6DR9foN++GvgJnVlAw=)
                          4: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: wbbtA4GjwvSqT19wyYxIHX3gbkbKQFAhWGvPsSkJHDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:89:f9:17:2f:f0:ff:00:a4:0b:5e:cf:f5:b4:9c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
        Validity
            Not Before: Jun 29 04:01:22 2026 GMT
            Not After : Jun 30 04:01:22 2026 GMT
        Subject: CN=c6fe165e239d51a98584cf592695199f561f8987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c0:63:31:38:81:9a:16:3c:26:e2:9f:b6:0f:
                    41:90:49:3d:68:5c:42:f9:57:4c:83:8b:b1:60:65:
                    ad:5d:79:e0:27:2e:b8:f3:49:6c:5e:20:bc:da:da:
                    d9:a7:9e:d2:85:0a:82:1c:d8:da:b1:76:5b:d6:de:
                    94:ad:ff:38:d3:d2:6b:db:5d:eb:fd:4c:23:49:ac:
                    e7:82:dc:6b:79:58:7b:13:af:07:da:e1:82:80:04:
                    77:92:5a:6d:ab:4e:96:fa:fd:05:5b:ac:87:a0:6d:
                    b8:b3:6b:e6:1c:6d:26:97:13:cc:32:e4:62:9c:f9:
                    46:25:1c:38:e2:d8:ef:7d:ac:b4:06:a0:b6:f4:40:
                    d9:a3:78:7c:f8:44:95:bb:d1:cb:34:8d:fb:24:66:
                    d0:13:ab:51:b1:ff:a4:7d:ea:3a:23:81:57:d3:f1:
                    f3:f3:35:b5:5a:d9:29:e3:39:06:2a:ae:9b:26:62:
                    fc:49:6f:75:59:c3:0b:f0:43:62:70:98:34:5b:b0:
                    ef:94:a5:12:28:d1:c1:69:a4:d4:70:89:8e:f1:f2:
                    0d:e0:89:4a:99:f4:62:8b:40:36:65:70:99:50:ad:
                    4b:18:38:22:68:e3:0b:3f:c4:b7:e2:6c:80:ba:ac:
                    37:cb:2b:8c:be:46:02:63:d3:84:36:94:b1:92:b8:
                    eb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FE:16:5E:23:9D:51:A9:85:84:CF:59:26:95:19:9F:56:1F:89:87
            X509v3 Authority Key Identifier:
                keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e9:96:09:53:74:08:65:ff:ac:20:5e:dc:c4:8b:3b:71:80:
         48:09:75:4d:7a:9e:0e:e8:a6:17:7d:5c:cf:50:e4:75:97:25:
         83:3b:d8:fa:aa:b4:50:ac:90:87:16:a1:dd:6d:bd:b5:54:7d:
         f6:da:ca:23:7d:94:69:f6:64:47:62:04:e5:17:2c:3b:1c:6a:
         9c:13:e5:3d:d6:48:11:e0:01:a1:2a:ad:54:54:4b:69:7c:b5:
         1a:19:6f:74:ae:43:ca:81:4d:80:55:99:12:7f:51:dd:cc:be:
         d7:75:b2:6e:47:7f:2a:9f:b1:d1:b3:f9:c2:01:5b:5c:09:0c:
         c9:69:99:7a:72:c0:95:5b:28:94:f9:26:b7:77:9e:71:07:5d:
         5d:5f:7f:a3:44:b5:fd:14:b1:01:1e:05:ef:f9:b8:1b:03:83:
         71:68:e7:f3:29:00:21:bb:e7:19:57:b5:3d:26:37:8c:ed:5d:
         11:22:60:3e:6c:fb:51:c9:e4:e4:16:10:10:d3:e2:ae:9f:34:
         3d:eb:d6:ce:3e:98:67:5b:d9:f6:4a:8f:fc:c7:83:8b:08:3d:
         dd:31:e9:87:e2:c3:5c:26:5a:13:8d:69:b3:e9:33:03:9f:6f:
         13:4e:20:6a:3f:61:0e:07:25:8f:ea:b4:a9:d7:2c:24:12:0c:
         53:3c:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:34:03 2026 by rpki-client