Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
File:                     d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json)
Hash identifier:          KOf531lAEPsyx6DlN7qjh76X3O0GXet8KMBeHQt8CsM=
Subject key identifier:   C2:61:8A:AE:BE:59:62:D7:A8:AD:9D:B4:6E:FA:6F:48:6D:43:C6:3B
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Certificate issuer:       /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial:       019E1D90983066421564B233EFDFFE63947D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
Manifest number:          11C6
Signing time:             Tue 12 May 2026 19:01:15 +0000
Manifest this update:     Tue 12 May 2026 19:01:15 +0000
Manifest next update:     Wed 13 May 2026 19:01:15 +0000
Files and hashes:         1: IM14LBYF8xBAMrWihjQwJhZWTFs.roa (hash: L/LoNTKL0OkWZiTSY3TN85uewDjoeQN9VcIBqy5aAq8=)
                          2: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: IHjt137o9VNpGmCE0lx9T4VIbXMXQFpdZ9nVeCM2EVI=)
                          3: meqA3EJ2dk40MOFtOn3KY_3JqZc.roa (hash: PMvWvyZeQ/F56OIn+Hm8HW0sQqsC8sTM1/3A775LAFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:98:30:66:42:15:64:b2:33:ef:df:fe:63:94:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
        Validity
            Not Before: May 12 19:01:15 2026 GMT
            Not After : May 13 19:01:15 2026 GMT
        Subject: CN=c2618aaebe5962d7a8ad9db46efa6f486d43c63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e1:b0:11:6d:e8:e0:69:b0:89:24:3d:15:0d:
                    9f:6d:9a:a9:c5:0e:60:77:47:89:ec:c3:5b:fc:4c:
                    85:b8:24:1d:47:9b:0d:83:3f:3e:39:75:3e:4d:cf:
                    2b:f5:b6:1a:81:4a:b1:c3:f2:b2:e3:c2:78:1a:f7:
                    e6:46:31:f4:5a:85:70:9f:3f:bb:2d:2f:b4:c5:0b:
                    3a:6f:77:c7:84:7a:58:6d:c7:e5:5d:42:3d:52:be:
                    72:46:21:99:e7:e5:b2:f1:36:7c:1e:15:0e:c9:bc:
                    db:61:20:5e:23:2c:d7:25:ce:45:57:37:fa:f2:bf:
                    70:52:27:e1:f0:c7:71:20:60:72:5e:32:ae:6b:d1:
                    9f:b9:ec:dd:34:08:5a:56:6f:f2:b7:36:d6:66:a0:
                    df:7c:ed:d2:9e:0e:54:75:7d:14:c4:8d:91:76:83:
                    0e:34:f1:4b:5c:86:61:c3:94:04:8f:ce:05:26:f7:
                    9c:be:1b:0b:95:8e:46:b1:8f:1e:b9:5b:b5:be:6a:
                    81:09:27:06:5b:95:34:25:23:6c:bb:e1:10:cd:e0:
                    a9:e9:f5:92:68:4e:60:30:1e:09:f3:8c:28:09:de:
                    6b:d5:3c:a2:07:d8:7d:30:b0:5a:64:c1:31:09:a8:
                    2d:69:91:33:64:ed:5d:07:9b:ca:d9:5b:08:9a:6f:
                    56:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:61:8A:AE:BE:59:62:D7:A8:AD:9D:B4:6E:FA:6F:48:6D:43:C6:3B
            X509v3 Authority Key Identifier:
                keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9f:55:5d:d8:9b:0e:c7:f2:d2:52:a6:6f:8d:1b:a7:8d:0e:
         87:75:33:76:74:3d:7d:d4:a6:5d:9a:33:61:0b:aa:a1:f3:3e:
         c7:1c:09:35:66:89:6d:2e:8f:31:23:b3:1d:d9:bd:c1:99:44:
         c9:46:c7:89:0f:1f:7c:34:fc:8e:5c:e7:04:5a:c8:50:dd:62:
         49:70:5d:75:e4:b8:35:09:c7:e8:e2:01:32:cb:64:9c:fd:e7:
         e6:b5:99:51:c5:f8:5d:13:73:4d:a2:0d:ae:95:73:f3:79:2a:
         fa:f6:be:5c:be:3d:de:0c:df:62:6b:4f:6e:31:4d:8c:e8:5a:
         70:e2:2f:dc:c9:59:9d:8d:89:f2:a6:32:48:d6:6f:d8:fc:cf:
         5c:b9:7c:ec:44:50:a9:40:a8:b5:ad:99:54:ab:98:18:d5:d3:
         e6:b5:d4:5e:c5:1f:7d:0c:5d:37:90:db:60:9c:0e:c3:63:ce:
         91:4a:09:a6:f3:f9:f1:17:87:d2:28:22:4a:d6:14:63:19:ae:
         49:c5:20:c3:6a:d5:87:c7:f7:6c:92:16:e7:64:1a:f5:62:24:
         d6:31:32:17:6c:d2:21:bc:30:1a:1a:47:6f:ac:e5:71:c0:db:
         e4:af:db:ed:47:27:b8:1b:b8:9f:63:0e:b6:d8:07:e4:ed:00:
         40:60:b4:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkJgwZkIVZLIz79/+Y5R9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjhlN2ZiZDRhYjY5NTA3ZmIxZmUzNTc5YWYzNDNhNTY2
MzkwODYwHhcNMjYwNTEyMTkwMTE1WhcNMjYwNTEzMTkwMTE1WjAzMTEwLwYDVQQD
EyhjMjYxOGFhZWJlNTk2MmQ3YThhZDlkYjQ2ZWZhNmY0ODZkNDNjNjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+GwEW3o4GmwiSQ9FQ2fbZqpxQ5g
d0eJ7MNb/EyFuCQdR5sNgz8+OXU+Tc8r9bYagUqxw/Ky48J4GvfmRjH0WoVwnz+7
LS+0xQs6b3fHhHpYbcflXUI9Ur5yRiGZ5+Wy8TZ8HhUOybzbYSBeIyzXJc5FVzf6
8r9wUifh8MdxIGByXjKua9GfuezdNAhaVm/ytzbWZqDffO3Sng5UdX0UxI2RdoMO
NPFLXIZhw5QEj84FJvecvhsLlY5GsY8euVu1vmqBCScGW5U0JSNsu+EQzeCp6fWS
aE5gMB4J84woCd5r1TyiB9h9MLBaZMExCagtaZEzZO1dB5vK2VsImm9W9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJhiq6+WWLXqK2dtG76b0htQ8Y7MB8GA1UdIwQY
MBaAFHf45/vUq2lQf7H+NXmvNDpWY5CGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1Njgt
NzdmNmU5NGUzZGNjLzEvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1NjgtNzdmNmU5NGUzZGNj
LzEvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS59VXdib
Dsfy0lKmb40bp40Oh3UzdnQ9fdSmXZozYQuqofM+xxwJNWaJbS6PMSOzHdm9wZlE
yUbHiQ8ffDT8jlznBFrIUN1iSXBddeS4NQnH6OIBMstknP3n5rWZUcX4XRNzTaIN
rpVz83kq+va+XL493gzfYmtPbjFNjOhacOIv3MlZnY2J8qYySNZv2PzPXLl87ERQ
qUCota2ZVKuYGNXT5rXUXsUffQxdN5DbYJwOw2POkUoJpvP58ReH0igiStYUYxmu
ScUgw2rVh8f3bJIW52Qa9WIk1jEyF2zSIbwwGhpHb6zlccDb5K/b7UcnuBu4n2MO
ttgH5O0AQGC0jQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:23:01 2026 by rpki-client