Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File:                     jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier:          jF0iesE0y4U7f+Kq8ctnAOLzXKjxQ26IE4LyYeAlWLA=
Subject key identifier:   4C:7F:EB:78:DE:44:A5:33:8B:7D:6C:24:38:D7:41:DC:ED:BE:90:38
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer:       /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial:       019E905C6BF78E9168DD25C33C49C1206FA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number:          0558
Signing time:             Thu 04 Jun 2026 02:00:36 +0000
Manifest this update:     Thu 04 Jun 2026 02:00:36 +0000
Manifest next update:     Fri 05 Jun 2026 02:00:36 +0000
Files and hashes:         1: OTzOq7SDpRdksgl_zYPgtdePfLI.roa (hash: D6qdGzPzEfS+jEvVQOP5Z3G0DkCqmvwi/YwWrt4+qgc=)
                          2: Uxk1FwItIfltxuYz2o9bKLPYoqw.roa (hash: 00PfsX6vRTHIMTxBup/P+JPXMFRRdRTXxG1QyBpuPMY=)
                          3: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: dyDwbv90RewUhfaGX636uzUx7ibvzAmVqoN5AvsHzAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:90:5c:6b:f7:8e:91:68:dd:25:c3:3c:49:c1:20:6f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
        Validity
            Not Before: Jun  4 02:00:36 2026 GMT
            Not After : Jun  5 02:00:36 2026 GMT
        Subject: CN=4c7feb78de44a5338b7d6c2438d741dcedbe9038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:46:a2:43:3c:1d:4c:a4:47:34:43:8a:5f:
                    61:bd:2f:61:84:24:b6:18:ab:d9:25:a9:dd:65:aa:
                    48:ea:7e:78:cf:0f:00:ba:c9:30:45:f1:d5:20:8c:
                    5f:de:2a:bc:0e:d6:57:b8:06:79:49:21:b2:f2:f3:
                    c7:6d:13:c6:19:9b:49:a1:4e:c9:8b:d9:e6:b7:f2:
                    e8:91:cf:da:6e:64:76:64:c1:bf:18:a9:f5:fb:56:
                    db:21:13:3e:25:27:28:98:d9:49:66:59:c8:ae:c8:
                    65:77:ee:4c:d1:db:25:5c:d5:9f:3d:91:81:1c:23:
                    91:57:a2:7a:aa:b9:e6:76:43:ef:41:83:7b:a1:11:
                    87:04:39:c2:2a:f0:d3:8b:30:d8:f9:81:4d:c0:45:
                    74:aa:19:df:18:aa:20:44:74:2d:a6:95:74:c3:55:
                    c0:23:33:f5:fd:b3:d6:8e:79:53:78:32:da:99:00:
                    d9:ab:1d:51:47:f1:f4:0b:12:e0:b8:a2:1e:84:e3:
                    5c:5e:64:6d:10:0c:62:5a:01:61:79:3c:80:93:9c:
                    bb:b4:7b:fb:e3:ec:2e:fd:8b:2e:a6:e4:ea:d7:e4:
                    64:c7:b0:76:5e:6c:27:27:23:fa:8d:56:e0:0e:9f:
                    49:42:73:b2:b1:f3:f2:16:88:e4:ce:96:b0:31:97:
                    b7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7F:EB:78:DE:44:A5:33:8B:7D:6C:24:38:D7:41:DC:ED:BE:90:38
            X509v3 Authority Key Identifier:
                keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f6:71:99:b5:29:ac:f7:4c:d3:0f:65:74:da:cd:ef:e0:93:
         ef:89:17:bf:7c:f3:4c:7c:f6:a0:59:1d:bc:c4:78:e5:63:16:
         62:91:a0:81:c5:17:bb:09:88:29:99:cf:98:69:6b:e5:95:86:
         a1:c9:90:23:7c:17:d3:2c:d4:48:53:87:18:9d:c0:09:3b:6e:
         79:b1:51:ac:1c:36:d9:d4:fe:a7:34:23:f5:08:54:a9:3c:78:
         75:1a:f4:f8:fa:2d:35:43:6a:ed:ef:e6:de:0d:36:b2:a0:9d:
         d2:09:1f:10:b2:09:2b:02:27:20:62:e7:1d:5e:03:94:2f:b7:
         96:2c:50:e7:47:6e:06:96:68:54:75:f7:d8:e7:d1:15:b1:4a:
         f4:4b:aa:fb:02:93:58:37:22:c0:da:ad:11:b5:8f:09:4d:9d:
         95:5f:b1:4c:5a:82:d9:e8:6d:4b:5c:d1:a9:b9:ab:07:09:13:
         d8:8c:5d:61:54:bc:ab:1e:53:a5:d2:e2:83:af:cd:bf:05:00:
         ab:2b:19:d5:f7:84:f9:64:53:d7:3d:98:95:f7:7d:32:11:7f:
         38:b2:94:a1:2c:5a:ea:90:2a:1e:21:6a:a5:16:3a:04:f2:02:
         32:69:63:65:b4:d6:91:68:70:46:5a:11:8a:ce:4c:4f:d4:14:
         54:c0:59:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:24:36 2026 by rpki-client