Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
File:                     rrcMp77FOQL1z1eeuT7bDZKi-0M.mft (raw, json)
Hash identifier:          R/2h5knfpSgld4MYKrPM3ZhL6XwdfnUIRdLP56zzFIg=
Subject key identifier:   FD:85:99:7D:FC:C0:D2:A6:DA:0A:82:3C:24:A6:2C:10:FF:AE:AD:CB
Authority key identifier: AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43
Certificate issuer:       /CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43
Certificate serial:       019EC0DB2A8E647C9059872636F6C388A315
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
Manifest number:          01EF
Signing time:             Sat 13 Jun 2026 12:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:49 +0000
Files and hashes:         1: qZ7w8eltwpusgDZDYcyCDOLAgd4.roa (hash: tsflvwgXfYhAOmry/PKXKjcvkUzgCka5jl0JMjyOtdE=)
                          2: rrcMp77FOQL1z1eeuT7bDZKi-0M.crl (hash: 5DJ06psR/z0pk03kUQCOg8tCOfv0DsTfzd63y55gAjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:2a:8e:64:7c:90:59:87:26:36:f6:c3:88:a3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43
        Validity
            Not Before: Jun 13 12:00:49 2026 GMT
            Not After : Jun 14 12:00:49 2026 GMT
        Subject: CN=fd85997dfcc0d2a6da0a823c24a62c10ffaeadcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a9:0b:16:ff:f1:ca:67:20:66:49:53:21:7a:
                    63:25:63:ac:a1:50:7e:5d:9c:1d:ae:05:5d:6e:f3:
                    87:f2:29:2c:39:8b:db:6e:ca:08:46:78:9f:62:04:
                    4e:79:aa:dd:24:22:18:2c:1b:54:f9:04:cf:16:22:
                    5b:fb:5b:d2:68:64:a1:32:5c:d0:f9:1a:a4:8e:95:
                    e4:ab:25:76:e3:fa:14:1e:23:c0:9a:2a:fb:66:55:
                    cb:fd:55:10:8e:bf:e7:d7:a5:af:71:22:b4:2c:f6:
                    f5:7f:73:82:5d:73:c6:eb:fb:03:85:cb:26:45:bd:
                    b1:fe:1d:70:43:c9:f7:ef:ec:a8:f2:7a:7f:22:f7:
                    c7:c6:6b:b1:f7:4f:cb:a3:85:c9:99:38:73:0c:a7:
                    e7:e9:b6:89:e7:49:47:2c:9c:52:5a:eb:31:67:ab:
                    c7:50:5b:5c:d6:66:f9:33:66:0a:9a:26:e8:ee:06:
                    f8:99:f8:b2:08:37:a9:aa:48:a7:c4:e9:27:95:97:
                    b6:7b:9d:5a:88:b0:c8:2a:01:09:7d:fa:2c:51:0d:
                    60:c7:ce:85:62:33:06:8e:39:ab:ce:98:95:f2:a9:
                    79:7a:72:2d:9b:3d:c4:ec:fc:98:48:36:9d:8e:e6:
                    2a:dd:a9:31:3a:a8:4d:83:64:b9:8d:4d:4e:74:90:
                    96:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:85:99:7D:FC:C0:D2:A6:DA:0A:82:3C:24:A6:2C:10:FF:AE:AD:CB
            X509v3 Authority Key Identifier:
                keyid:AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:99:64:ee:8e:75:f8:7c:30:a7:be:95:a0:85:82:a2:5e:36:
         18:9c:db:fe:27:37:9c:b1:e0:b4:53:c5:d0:61:78:80:12:2d:
         c7:cb:19:24:ba:87:ce:13:69:8a:e7:08:b6:30:6c:50:65:96:
         96:53:dd:17:4f:16:51:9d:77:d5:1b:8c:14:e0:e1:ae:6e:4d:
         5f:10:e8:ea:2a:0c:bc:11:9d:7c:ad:08:86:38:f3:b7:e9:b6:
         9a:dd:8c:5f:31:17:3a:22:f7:1c:c1:e8:bb:29:9c:d8:e2:a1:
         ea:40:d8:3c:ac:9e:04:f2:d3:85:80:0d:8c:8b:b6:6e:b5:1d:
         88:b8:65:0c:4a:f8:4a:a6:45:09:30:0a:d5:4e:44:ad:22:ac:
         a1:a6:19:a3:6a:02:98:43:72:2e:2f:09:a0:fd:4d:6f:3e:26:
         2a:a5:cd:7f:26:e4:5a:96:80:dd:1a:43:91:43:5f:e1:78:3b:
         bc:0f:84:bc:ba:49:62:5f:9b:38:b9:8d:18:53:1b:f4:32:9b:
         2a:e0:9e:60:68:e4:77:ba:36:db:8c:d6:70:19:00:5f:de:de:
         30:0b:40:06:db:f4:f9:9b:0b:20:51:c8:dd:ef:16:af:22:24:
         6e:ae:5d:b2:31:94:ad:7e:fe:6c:62:6b:53:1d:90:3c:07:8c:
         40:2d:09:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:57:23 2026 by rpki-client