Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
File:                     tJvYTaF5l8uyhq-QIqsuBboItEI.mft (raw, json)
Hash identifier:          surKpv1ToddgCRCeDzs9AvLk0xnw0pgQwmcfER1B13o=
Subject key identifier:   96:C2:11:9A:3B:36:5D:7A:B9:12:F4:B6:32:A5:99:BB:75:23:33:40
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Certificate issuer:       /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial:       019EC25CCEBE42E0DF5FEBDB37B30A8B6CEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
Manifest number:          14BC
Signing time:             Sat 13 Jun 2026 19:02:02 +0000
Manifest this update:     Sat 13 Jun 2026 19:02:02 +0000
Manifest next update:     Sun 14 Jun 2026 19:02:02 +0000
Files and hashes:         1: PTqqtT4_tP0RAOhqpaeaV7qFsoM.roa (hash: gS+7X+RhiaD/Wpkqye3btlKeUsU6cdg4vX6kC9nPKmY=)
                          2: Zx8NV8g2SZTn17r6ny-ihGOw0zg.roa (hash: oDKvuRyprpCre1JRHHQFdko0hYMR6EjsyiF9Shy7Ous=)
                          3: o_4znoNuO2BlgKbgpDwRbvS5e9M.roa (hash: UG/yd3TL4Rh6gQUIGrMAEttNV+zSF20Hc2Z6UKPMWAc=)
                          4: tJvYTaF5l8uyhq-QIqsuBboItEI.crl (hash: OIr+yGvnUOhntwH91hQk07ZrSPS3KF75kaHZmjmwraA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:ce:be:42:e0:df:5f:eb:db:37:b3:0a:8b:6c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
        Validity
            Not Before: Jun 13 19:02:02 2026 GMT
            Not After : Jun 14 19:02:02 2026 GMT
        Subject: CN=96c2119a3b365d7ab912f4b632a599bb75233340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:40:07:23:43:4a:c3:ff:fe:1c:0c:41:5a:
                    76:7d:43:e4:cd:e9:f5:fd:03:bd:b8:35:3b:15:d3:
                    ef:a1:cf:5b:82:91:03:49:af:ed:44:68:cc:f2:74:
                    f6:e8:9d:13:79:d8:31:d1:02:d6:c1:92:04:f9:60:
                    13:95:9b:c5:6b:4b:49:47:59:95:64:6e:08:95:8d:
                    ad:07:b2:99:b0:03:1e:5f:71:f5:de:ca:31:74:38:
                    64:cb:30:58:f3:33:dc:c3:c4:c0:65:cf:3a:6d:6d:
                    a8:37:c5:41:6a:08:9d:8c:87:7d:56:f3:16:8f:a3:
                    a9:6f:0a:50:03:22:e9:a8:db:bb:ea:cb:fd:cc:d1:
                    d5:76:22:04:5f:ce:f4:17:d7:3e:c8:a9:e8:e3:69:
                    e5:5b:4d:75:5f:a2:e0:09:b1:b0:f6:e5:00:99:c4:
                    68:9a:8b:52:6b:7a:6e:bb:a5:ed:91:58:13:56:fd:
                    37:52:cd:67:e4:47:9c:93:e9:18:b0:43:81:a6:62:
                    7b:25:52:2b:0e:d5:a5:a8:ee:25:99:1d:2b:a9:4c:
                    05:54:41:09:c9:49:e6:9e:09:df:a0:49:1f:5b:62:
                    80:ba:1e:f2:29:00:0c:98:79:fa:99:9d:36:33:0e:
                    e4:2d:d6:2c:8e:65:cf:c9:bd:84:25:e7:b1:58:43:
                    d4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C2:11:9A:3B:36:5D:7A:B9:12:F4:B6:32:A5:99:BB:75:23:33:40
            X509v3 Authority Key Identifier:
                keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c5:c4:1d:ad:22:7d:e0:e8:7a:05:df:3e:50:62:e2:a0:2e:
         a3:5c:27:84:98:42:ed:08:da:7e:f1:67:0a:3c:d8:99:b6:ad:
         b2:40:3d:c3:e2:51:a1:54:72:ba:69:6b:c9:18:2b:a2:b6:ff:
         9b:ff:39:88:f3:65:56:b4:23:6c:ef:f4:6c:80:f4:80:cc:c7:
         be:13:1e:c1:c7:d1:a5:36:48:d9:60:5d:1c:f6:d8:e8:f1:0c:
         0c:81:db:29:88:57:56:b4:b4:b6:7d:31:52:8a:b5:be:ad:2a:
         d1:48:a9:9e:2c:83:50:dd:7a:28:4a:32:26:cf:9f:6e:d7:fc:
         da:e5:e0:01:4c:ff:61:96:6f:4f:f2:3e:bd:1f:7b:16:5b:8a:
         8f:6e:da:db:ab:82:b6:f3:dc:3e:67:de:d5:a1:14:ab:b8:70:
         6b:50:d1:d2:33:ad:2b:9b:58:31:56:e7:2e:a0:aa:4a:23:ff:
         94:55:e4:aa:68:e5:a8:f2:73:60:ab:b6:08:18:52:3d:78:43:
         9f:e4:ca:01:87:d2:ac:c4:d8:9f:f0:ce:28:ab:cf:9a:99:25:
         c8:86:51:3b:06:07:84:89:b5:e7:08:f0:68:7b:14:26:f7:80:
         84:a0:c2:16:1a:b9:65:b9:e0:c2:10:5e:74:c6:a4:83:bf:9f:
         be:24:30:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:01:36 2026 by rpki-client