Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
File:                     jrM9OZ3Q9flhftTkcOa9ydELeiA.mft (raw, json)
Hash identifier:          wU9eZ7ByAriTKagG+fYAtHOEPdwqgXOVYA1iu3qJVAA=
Subject key identifier:   8F:8F:6B:43:84:BE:6F:2A:FB:B9:26:AE:FA:CB:B0:FA:10:57:D5:36
Authority key identifier: 8E:B3:3D:39:9D:D0:F5:F9:61:7E:D4:E4:70:E6:BD:C9:D1:0B:7A:20
Certificate issuer:       /CN=8eb33d399dd0f5f9617ed4e470e6bdc9d10b7a20
Certificate serial:       019E1EA2F9FF3B466BA9F3E0BC1D563F7231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
Manifest number:          99
Signing time:             Wed 13 May 2026 00:00:57 +0000
Manifest this update:     Wed 13 May 2026 00:00:57 +0000
Manifest next update:     Thu 14 May 2026 00:00:57 +0000
Files and hashes:         1: _Wy5a31X0fWVI5kzqNmJQQC4UbU.roa (hash: 9Bcaw7GkeT0B0JGjnO2Z6JkUkn/KrawL89AtsYKJKU0=)
                          2: jrM9OZ3Q9flhftTkcOa9ydELeiA.crl (hash: FuAl/B5ztksEf+kvUF1STST+WeqwxKV4xjtxG1CkM80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 00:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:f9:ff:3b:46:6b:a9:f3:e0:bc:1d:56:3f:72:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb33d399dd0f5f9617ed4e470e6bdc9d10b7a20
        Validity
            Not Before: May 13 00:00:57 2026 GMT
            Not After : May 14 00:00:57 2026 GMT
        Subject: CN=8f8f6b4384be6f2afbb926aefacbb0fa1057d536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:92:ed:d1:5e:8e:7b:b2:5e:35:f3:2f:0c:00:
                    ec:2c:46:6b:9d:d9:03:11:fe:8d:c2:4d:f8:66:1e:
                    f2:e6:78:27:d3:4b:92:28:89:be:3a:e6:8d:e2:9f:
                    51:ae:64:27:8e:03:63:31:eb:e5:ef:bb:0b:3b:4d:
                    84:cc:b6:04:76:c2:2b:8f:3f:f0:63:ec:f4:82:99:
                    b1:dd:db:7e:ec:3e:e7:25:e2:73:ba:0a:51:23:c4:
                    dc:ca:74:3d:cf:e0:fd:3f:97:a9:9d:ce:73:23:79:
                    1c:b6:01:0d:08:ff:7e:e5:63:1c:5d:6c:1a:75:c7:
                    1c:24:c3:07:99:a6:68:68:9b:12:61:dc:01:1c:20:
                    ce:0d:4c:46:8b:91:ad:86:e9:3d:44:ae:c9:1e:6f:
                    36:d3:76:e7:66:2f:13:b8:42:d9:a3:79:73:cb:9a:
                    78:f2:fc:14:fd:65:2e:ae:95:fc:26:9a:1e:d2:8a:
                    54:80:d8:14:bc:07:66:66:b9:0d:ef:54:98:e4:52:
                    31:ac:ea:a0:91:6d:ae:f5:b1:c6:a5:5e:46:09:7d:
                    4e:81:21:c3:ba:61:72:d5:4d:5f:2d:42:2f:63:a5:
                    2d:5d:a5:57:71:9c:bd:03:99:84:a9:6c:23:d1:d2:
                    fe:ac:57:d4:37:ac:47:fa:aa:13:e8:d9:f3:c8:54:
                    20:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8F:6B:43:84:BE:6F:2A:FB:B9:26:AE:FA:CB:B0:FA:10:57:D5:36
            X509v3 Authority Key Identifier:
                keyid:8E:B3:3D:39:9D:D0:F5:F9:61:7E:D4:E4:70:E6:BD:C9:D1:0B:7A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:98:f4:61:56:f7:9c:3f:6f:a3:0f:b2:45:6b:6e:0d:d5:a9:
         67:0a:f4:ce:57:fa:6a:35:a8:e1:b8:e8:9d:36:e6:2f:ec:8c:
         95:83:63:57:96:15:38:83:0b:4d:c5:74:5c:26:de:3d:4f:24:
         ba:f1:fa:c5:14:c4:8a:1c:54:2e:db:c2:20:bb:63:e8:e6:2e:
         a7:46:1c:80:d4:30:56:af:f3:8b:4d:c1:0f:02:99:be:35:e1:
         2b:16:c1:f9:43:6c:d6:e9:50:e5:c9:7e:90:38:6f:c8:df:19:
         4d:76:79:63:8d:28:c2:95:8a:03:ae:17:3c:b4:44:38:42:8e:
         4f:48:21:a8:f3:4b:a8:be:21:f0:5a:f5:45:59:64:a2:8f:d0:
         ff:02:e2:66:5c:ea:c9:14:3e:9d:2e:e7:8c:3e:5b:21:ac:fe:
         78:c4:aa:ea:7a:0a:1a:9c:66:88:8d:d1:cd:71:e6:63:06:b1:
         d1:bf:4f:02:e9:8d:e5:f8:e4:a5:57:2e:93:8c:36:8d:0b:2e:
         fe:73:5f:52:dd:e0:d7:56:cb:91:c9:82:46:49:d0:1d:70:6e:
         51:48:9a:f1:85:91:f7:13:b3:61:31:67:ba:ef:2e:04:c5:c6:
         ab:0c:ae:ab:4b:8b:fd:11:a5:e7:15:84:73:86:3c:0c:c5:7f:
         91:4e:b4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:02:21 2026 by rpki-client