Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
File:                     j5h_qG-uztjKekRir38AXqsneag.mft (raw, json)
Hash identifier:          9P/vz3oATAbo2KqLDvjEyOxQPPIo8Uod8DJdTDZ9UCE=
Subject key identifier:   87:ED:21:A2:C3:06:1A:37:BB:4B:37:64:54:99:3E:98:39:9F:62:47
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Certificate issuer:       /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial:       019EDE0A058EE9306E8CD15C37E099114BED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
Manifest number:          104B
Signing time:             Fri 19 Jun 2026 04:00:59 +0000
Manifest this update:     Fri 19 Jun 2026 04:00:59 +0000
Manifest next update:     Sat 20 Jun 2026 04:00:59 +0000
Files and hashes:         1: S3xjSwjayGWQbrifgsC5G7Sh0Xg.roa (hash: tQnt0AxldpTLTefUEnKzHOLj+HzmMNDMI0YZ04Hh8vg=)
                          2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: zLCi/Fk/kO4WQajm9wosvWRZjc78l9OW63ioShw0EjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:de:0a:05:8e:e9:30:6e:8c:d1:5c:37:e0:99:11:4b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
        Validity
            Not Before: Jun 19 04:00:59 2026 GMT
            Not After : Jun 20 04:00:59 2026 GMT
        Subject: CN=87ed21a2c3061a37bb4b376454993e98399f6247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:9e:7a:ed:84:ca:31:65:e6:4d:8c:2b:d5:
                    d5:f0:cd:00:ee:f7:83:8e:fc:02:b3:f4:b5:cb:82:
                    aa:9b:4d:e9:94:1f:28:e7:fe:85:e7:c4:5b:6d:8f:
                    3b:28:04:6e:1e:4f:04:01:db:8a:3b:d9:5d:4e:97:
                    fa:11:0e:d9:57:be:82:b6:2e:69:d2:fd:56:07:2c:
                    b0:a8:2e:bd:d9:6e:06:37:5d:70:20:09:88:95:d9:
                    0c:44:c5:ce:f9:25:12:bd:8f:3d:2b:7f:53:70:b3:
                    3d:76:26:09:c1:06:e8:9c:20:e4:8f:8b:ca:c2:f8:
                    c5:07:fb:bc:d3:5d:5f:4a:11:b7:b7:b8:0e:c4:11:
                    72:5b:74:c9:89:e8:67:0a:ad:bc:60:b4:23:41:27:
                    a0:61:bb:0c:93:3f:46:1b:74:68:a1:34:33:8a:6a:
                    79:19:aa:97:c6:89:7c:63:cb:24:e3:88:cf:26:2f:
                    5c:d9:fe:aa:7b:d0:a5:38:2d:c9:4a:39:e8:9e:75:
                    1a:40:a7:08:fb:04:52:e3:2f:61:0b:ce:53:e3:27:
                    7d:a2:ee:c1:bf:87:be:8b:13:82:50:d1:f0:eb:66:
                    bd:75:5b:e7:72:d0:c6:be:83:b7:5f:96:f8:11:52:
                    72:ad:80:8c:36:e0:bc:56:e9:6c:57:62:a7:42:15:
                    7d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:ED:21:A2:C3:06:1A:37:BB:4B:37:64:54:99:3E:98:39:9F:62:47
            X509v3 Authority Key Identifier:
                keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:bb:8e:50:45:23:ba:87:75:f2:7f:67:92:73:1e:5b:04:f3:
         71:8a:bc:3e:bd:bc:b6:e4:e9:49:d6:1a:29:52:bd:48:69:46:
         14:5a:34:98:1a:21:df:a6:1a:56:c5:c4:67:71:65:fc:14:eb:
         f7:23:55:58:58:f6:e7:6d:b5:32:82:79:93:46:df:a3:2d:6b:
         29:3c:2b:e1:36:69:63:b1:c6:e2:ef:77:24:da:26:5e:78:59:
         91:81:51:f7:45:d0:87:6f:07:29:25:ee:79:44:67:7e:4e:50:
         6b:e8:4c:3c:d0:5b:4f:77:ed:f8:b8:dd:90:4c:5d:c1:b8:6c:
         cb:db:e6:84:c2:8f:43:78:d0:54:bc:be:14:e0:49:d6:5c:b2:
         4d:68:fd:a3:1c:34:db:9f:37:da:31:ad:e2:81:b4:db:e9:79:
         37:71:a8:65:33:1b:98:85:53:2f:4b:c1:72:ad:33:3b:eb:cc:
         ff:de:ab:5b:0b:f0:e8:80:69:e1:2b:cb:e9:00:cf:a9:1f:11:
         31:dc:7e:5e:90:e8:ea:c7:05:51:ff:35:a8:00:09:09:40:8d:
         ec:57:5e:10:d0:16:34:12:f7:9d:13:a1:b6:87:d8:c9:fc:86:
         10:46:3f:73:c6:11:6e:cf:e8:25:85:49:b7:88:89:2c:b8:21:
         9a:2d:0e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 08:19:38 2026 by rpki-client