Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
File:                     J97R2QxNUraHECO8cSltCKmMTNs.mft (raw, json)
Hash identifier:          ZJjFhh20Jx1NZF/d8IEspTkAXEOGcr8NOf0WXgEgKUw=
Subject key identifier:   43:F0:6C:39:5A:01:3E:0D:6A:21:74:0F:72:B3:15:B6:28:BE:C1:A4
Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
Certificate issuer:       /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Certificate serial:       019E1EA36B5DD7B3E92C33F166BA33AB923C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
Manifest number:          0EC8
Signing time:             Wed 13 May 2026 00:01:26 +0000
Manifest this update:     Wed 13 May 2026 00:01:26 +0000
Manifest next update:     Thu 14 May 2026 00:01:26 +0000
Files and hashes:         1: 9eN7qSejmD6NfaFbsmt0-Q4AgoA.roa (hash: EthJtYsvDPJskDLNQI0HAM0yvVrJhOQozB0uYpm7BsE=)
                          2: J97R2QxNUraHECO8cSltCKmMTNs.crl (hash: bn27e3sEcHtF0EAzsvduelaqNxuOUPKSrK8J4hwX62Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:6b:5d:d7:b3:e9:2c:33:f1:66:ba:33:ab:92:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
        Validity
            Not Before: May 13 00:01:26 2026 GMT
            Not After : May 14 00:01:26 2026 GMT
        Subject: CN=43f06c395a013e0d6a21740f72b315b628bec1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:64:e2:12:d6:ea:11:08:21:03:2c:9e:b0:
                    6d:b2:79:9b:11:63:75:09:e2:82:fe:1e:0e:6b:41:
                    77:22:fc:75:02:27:96:e9:a3:ff:6c:ab:fc:86:31:
                    70:92:f9:8c:63:4f:5e:f4:ff:33:63:f7:31:88:52:
                    29:66:42:98:13:8e:40:5f:58:3d:f9:ab:b8:5e:fe:
                    88:83:90:68:2c:f8:25:3f:82:52:93:d1:ce:ec:85:
                    06:50:5b:08:ad:d2:1e:7f:af:96:5d:ee:da:5d:06:
                    33:22:5f:19:1e:b1:5a:a1:81:d2:70:7c:66:a7:c4:
                    c8:e0:43:a6:31:e1:db:5c:97:12:cb:39:ef:5b:31:
                    b3:54:85:5d:8e:c1:bf:f2:81:b4:1f:16:99:05:2d:
                    91:35:81:5c:02:3a:57:f0:d4:55:66:c8:1f:3d:ff:
                    e0:69:af:03:42:38:b4:d2:0b:35:03:e5:a8:30:7f:
                    49:b6:71:41:70:24:b5:e1:9c:50:bc:69:f8:5a:75:
                    f0:fe:62:e4:f1:d6:ab:74:c8:76:e0:1a:15:3a:3a:
                    5f:d2:fe:43:e0:78:0e:ae:f6:11:70:b0:56:b3:37:
                    5d:37:eb:66:6f:cc:81:71:2c:49:87:1f:b2:20:96:
                    1e:77:05:2f:a6:d7:94:d9:db:02:34:14:84:5e:e5:
                    25:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F0:6C:39:5A:01:3E:0D:6A:21:74:0F:72:B3:15:B6:28:BE:C1:A4
            X509v3 Authority Key Identifier:
                keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:c7:53:17:a9:ca:5c:40:1c:ce:b5:74:b8:43:f5:bc:31:fb:
         80:b3:25:d7:b4:e2:5c:29:0f:09:1b:53:b0:27:a7:78:98:64:
         6a:04:54:c6:7b:81:e0:1a:ba:50:65:f6:69:cb:75:25:55:a0:
         e6:8f:bc:1a:9a:5d:07:bf:f0:26:c9:f1:12:af:9b:c6:ce:fb:
         d7:e0:c3:19:61:b6:ba:7e:db:8a:df:1a:f8:9c:fe:d7:90:2f:
         f3:38:06:3a:70:63:5e:76:20:05:c0:12:3e:57:87:02:03:dc:
         e7:1e:a7:67:7b:a2:2f:db:62:f4:4f:bc:31:e1:b2:88:09:85:
         10:2d:cb:ea:5c:78:83:a1:90:6e:db:5c:bb:9f:a5:c4:02:fd:
         cd:59:5e:c0:53:13:fe:2d:76:96:ce:ff:99:d9:bc:4c:6f:76:
         89:54:41:98:a6:92:fd:85:c0:ec:59:95:07:43:e5:36:18:fd:
         dd:10:e0:98:10:34:e4:8a:38:cf:c9:a9:d6:36:a7:10:f8:8b:
         55:46:49:f2:91:63:2a:8a:bd:f3:47:d0:69:87:a1:69:7d:fd:
         be:d7:5b:75:5a:be:20:68:c6:9a:d6:c5:fd:d0:4b:fc:c4:3f:
         f4:98:91:ec:a2:77:a4:4a:7c:5c:58:6a:1a:9c:88:c1:82:7f:
         4b:72:29:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:19:22 2026 by rpki-client