Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
File:                     pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft (raw, json)
Hash identifier:          co89v2cQhnLK1GBiznSRZUd67+OI3iV2CkAoZ+JtoKo=
Subject key identifier:   62:05:65:09:A8:E0:A7:2B:F7:40:79:D8:F0:6D:C9:40:9C:CA:AA:D0
Authority key identifier: A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
Certificate issuer:       /CN=a4917d885b675672fc8efb89d6e14e23675052d9
Certificate serial:       019E1F111744C3256B6BBDC627949CED52B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
Manifest number:          0B84
Signing time:             Wed 13 May 2026 02:01:14 +0000
Manifest this update:     Wed 13 May 2026 02:01:14 +0000
Manifest next update:     Thu 14 May 2026 02:01:14 +0000
Files and hashes:         1: T8H29xdvMM615tBBaetAKqxS1Lg.roa (hash: f1JOsohKbsQAHJoFy6fUS25sjpjOzZztTxeJ515Q3+k=)
                          2: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl (hash: jdpFhEoDEqxee+YfpN8qMm6fdNeZaKQh5l8TAvOkNtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:17:44:c3:25:6b:6b:bd:c6:27:94:9c:ed:52:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4917d885b675672fc8efb89d6e14e23675052d9
        Validity
            Not Before: May 13 02:01:14 2026 GMT
            Not After : May 14 02:01:14 2026 GMT
        Subject: CN=62056509a8e0a72bf74079d8f06dc9409ccaaad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c1:89:c7:36:6e:b5:ac:40:d0:8a:f1:10:bf:
                    9c:62:5b:db:36:6c:9e:c0:24:c0:6d:56:a6:37:ab:
                    e8:df:69:ed:71:2e:26:13:4a:c0:a7:36:0d:4a:af:
                    52:4d:a6:f9:70:57:de:eb:78:9c:67:61:a4:4b:60:
                    f3:70:c1:16:20:ce:d5:c1:95:fc:03:b8:b6:b5:8d:
                    8f:89:41:44:6c:42:9a:4e:1e:7f:8f:9a:84:09:2e:
                    e8:1c:94:ba:d6:46:9f:b1:3b:d5:9b:85:83:e8:bd:
                    62:c6:10:99:6d:b4:25:25:3d:54:f6:cc:67:0e:70:
                    0a:f6:95:64:e0:f9:0a:e0:a0:d3:12:2d:d0:73:9e:
                    a3:79:93:19:cc:ca:7d:c2:3f:8e:91:21:cd:51:5c:
                    27:55:85:66:60:56:3d:bf:3d:fe:1d:87:67:f0:d1:
                    52:30:1e:0b:94:79:1b:8d:d8:82:f6:28:6c:88:b3:
                    04:9a:47:1c:08:a0:2e:0e:38:a7:83:07:4e:6b:94:
                    ff:b9:95:fe:a8:ac:0e:93:41:5b:0a:82:dd:c2:b9:
                    e9:44:66:8f:c2:bd:c6:27:41:55:80:a8:4f:ae:84:
                    99:f7:af:42:8d:e5:06:bb:26:9b:99:02:b3:0d:49:
                    f5:b8:67:b4:2e:5c:f9:df:90:02:d6:9a:f9:ba:8b:
                    80:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:05:65:09:A8:E0:A7:2B:F7:40:79:D8:F0:6D:C9:40:9C:CA:AA:D0
            X509v3 Authority Key Identifier:
                keyid:A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f2:fd:8c:1b:25:df:8e:49:15:15:ea:f5:db:c2:6a:f7:ff:
         1b:35:83:1c:41:b0:91:6e:f6:78:3d:a4:ad:a9:e5:ed:b4:71:
         9f:1a:42:b8:fc:09:0b:a4:07:45:77:5d:d6:67:59:f7:9e:83:
         36:41:36:71:a9:35:6f:6b:0f:77:bb:4d:b6:23:ec:d8:49:ae:
         44:59:fa:25:41:01:c7:a7:d6:39:9c:f2:08:4b:53:fd:77:ae:
         0e:c9:71:35:6d:6b:06:0e:65:b4:91:93:5a:7a:3e:77:8e:d6:
         46:93:d6:b3:dc:a9:46:29:47:ca:8c:82:2c:a0:43:45:51:53:
         b4:e6:c1:7d:07:24:6c:a2:34:eb:5e:73:2c:d7:55:27:af:44:
         e1:fb:c8:42:09:cf:05:0f:8b:be:c2:0b:70:0f:78:0e:43:cf:
         df:b5:b6:3d:f2:e0:41:33:d2:74:51:38:f5:52:88:92:b1:fa:
         5b:1d:32:06:3a:23:7d:1e:85:74:ec:c0:cc:ae:a1:b6:2f:f8:
         5b:07:c8:c1:ff:64:fd:cd:98:0e:c9:bc:e6:f8:b8:53:84:cc:
         b7:fb:38:19:74:b1:95:37:5c:ff:97:00:6b:be:f8:c3:23:f7:
         e6:ca:cb:a6:25:ac:93:a8:d0:21:6a:be:0b:c2:06:42:b6:43:
         35:ec:cc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:46:26 2026 by rpki-client