Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
File:                     jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft (raw, json)
Hash identifier:          y1xZoheKtVmPWCfCkpBQZqkEG6Zb5hN4giXB+QeXwkI=
Subject key identifier:   61:CF:50:73:5D:EC:FF:88:CD:E8:D1:42:BD:01:D9:83:0C:15:0C:22
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Certificate issuer:       /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial:       019E1D59BCE6D18260EFA01B986CD6120942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
Manifest number:          14F2
Signing time:             Tue 12 May 2026 18:01:20 +0000
Manifest this update:     Tue 12 May 2026 18:01:20 +0000
Manifest next update:     Wed 13 May 2026 18:01:20 +0000
Files and hashes:         1: 0Q-Zfa5EM9tNo04k8RE6e6TtkfU.roa (hash: RGjdNXoSFFGrfTu/Ti51Lk+K5F2xhb4depOlZwB8FXE=)
                          2: 1-VHrB2ftFgG1R7rW9e965VrbOgs.roa (hash: e22B3XhTvj7ENfOUB059RvQemhyhAgeNVsH6G1GtXTY=)
                          3: 1qpX2cPG5_nkbMnEo1efuLPeHZ8.roa (hash: spDyNX8ekUn+reTXNALqP0weIlhwk99TCbZoof+/3iU=)
                          4: 7YQDZucpbsxyTF1dG-WSopyYoD4.roa (hash: AZ+p2vdqGYxqTemz9H7WmkXG8urZ++JrwB5Ra4yemqo=)
                          5: Dw29NJ_ctrOpeieGYBgCqVAOqqY.roa (hash: JIVZInEs3qX488BMPJFD+ldY4NUedBvpDHZsEFrw4pk=)
                          6: Pnj_vmQa0ZunkGDFw9_ItsuwDa0.roa (hash: 0Ghl85pIQUjr9ungl4JN/VBPTNlFSKD8oMqKbzB0zRU=)
                          7: ZpiZYChv03XcXjWFsXMCV1QM0HU.roa (hash: wmoSAUcGUPypcaj5YjtRFn3oVWGJ3KsONwwVdodfB08=)
                          8: iVJ08SxG4feimgPWve7FHmKvN14.roa (hash: zFhC/XqvQ6mooyGtsx8PFTYFm28tXJQuLsuuvmNHdsY=)
                          9: jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl (hash: OUXHYbXnrh4RD4Ft9SVRYA2AXkzm/9kDOby3p8+ZBD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:bc:e6:d1:82:60:ef:a0:1b:98:6c:d6:12:09:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
        Validity
            Not Before: May 12 18:01:20 2026 GMT
            Not After : May 13 18:01:20 2026 GMT
        Subject: CN=61cf50735decff88cde8d142bd01d9830c150c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:e1:ce:bb:8a:5e:aa:81:4b:bf:5f:a5:f5:
                    d7:cc:db:28:7e:78:10:f9:fa:38:28:ba:0f:a2:b7:
                    64:c8:f0:e4:7f:c2:b3:89:11:37:dd:c7:c8:d8:24:
                    15:34:d8:d8:e2:43:f0:f3:f6:23:10:80:50:27:b9:
                    15:3f:b2:df:97:41:b1:9e:80:1a:78:8a:63:9d:68:
                    be:80:1f:68:bd:75:18:af:ff:38:58:4a:ed:74:4a:
                    15:ef:4b:26:41:2f:62:19:00:80:f4:3c:bf:c0:d2:
                    36:ad:e7:4c:7b:1c:d1:91:ec:14:98:04:76:75:8f:
                    9d:23:b7:ee:4e:21:4b:12:96:86:76:32:96:e4:4e:
                    d2:9d:fd:4f:fa:1f:95:e3:c4:51:a3:9b:59:5f:25:
                    02:27:1f:52:99:a6:39:a1:b6:61:66:a0:61:43:09:
                    db:d0:73:40:f8:2c:66:65:0d:8b:a1:a5:1b:8d:f2:
                    8e:de:a1:49:7d:1d:78:92:ea:1a:c1:12:d2:23:9b:
                    c3:c6:8e:9e:ec:9c:11:92:78:a3:55:f1:d8:31:c1:
                    b3:a8:70:40:0b:49:94:5e:af:0a:88:7c:e2:5d:a3:
                    a8:43:47:38:6d:02:b3:8d:e7:4c:83:af:65:d1:0d:
                    8a:04:2d:24:35:ea:ae:e4:98:53:48:81:00:9a:05:
                    57:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CF:50:73:5D:EC:FF:88:CD:E8:D1:42:BD:01:D9:83:0C:15:0C:22
            X509v3 Authority Key Identifier:
                keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:68:0b:83:10:49:19:b4:73:f0:20:da:ea:08:c9:05:7b:48:
         fe:a5:35:10:bc:21:f1:e8:4a:80:60:f5:d9:1a:a8:3e:f3:04:
         29:a7:81:e5:cd:7c:c5:3b:7e:3b:96:f5:d7:37:6c:3d:ea:cc:
         66:f9:51:14:ed:88:dd:ca:90:e2:f4:bc:60:e8:ff:57:2e:f1:
         59:99:67:80:3d:69:2e:4a:96:4e:0a:66:b6:b2:c0:e3:33:9e:
         de:22:8e:4b:5d:6c:cb:80:17:c7:ac:e9:a6:e2:d3:cb:ee:f6:
         98:65:9b:4b:58:0d:4a:4c:a6:8e:91:34:26:4e:2d:b9:45:58:
         06:54:ca:64:81:44:5a:e7:5b:36:87:8c:1a:b2:69:b5:2a:46:
         e4:6c:ba:3c:1f:40:f2:63:65:fc:76:e3:8f:0f:fc:36:66:1f:
         f0:2b:f0:a8:70:63:cc:4d:e4:c3:9c:01:ff:ae:7d:d0:92:d7:
         76:61:cc:60:55:a3:36:24:7b:1f:a8:bc:09:13:e7:54:0d:35:
         95:b4:c3:89:de:2b:39:b7:76:0e:c2:fe:74:2d:43:b5:a4:7f:
         14:ab:b3:66:bd:39:68:15:23:eb:1c:b7:22:3c:20:2b:83:f8:
         a3:31:f6:54:99:79:98:ae:27:be:29:96:c8:a8:16:27:6b:b5:
         e3:1d:99:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:30:48 2026 by rpki-client