Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
File:                     sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft (raw, json)
Hash identifier:          Kpq0mH8Ys+M6S9DeWpXjYXa0MvlPgD5BAV5GaP8G9kg=
Subject key identifier:   53:4D:37:82:53:DA:36:D7:22:2A:79:A1:62:13:C6:29:BB:34:B1:12
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Certificate issuer:       /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial:       019EBF9179BC5B3FC4F67087EFED06C09632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
Manifest number:          14B8
Signing time:             Sat 13 Jun 2026 06:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:42 +0000
Files and hashes:         1: 35qhAQKnv1mZjO22yTQ-wyvYzto.asa (hash: OjstDLpxFizovicdQpcPnjVqRrDOAeV/hfCot+ezciw=)
                          2: Zopjwe1rzd92yl72g_6NHQcrS2g.roa (hash: nDvQP9lRFjKHJxmHIMp23P7uE0RhUeA887SfeMIm2EU=)
                          3: g2idL-D8suQFsQoE5OmsRPApfGw.roa (hash: czmirE4/eGdQOoSaanjSLhXcburfB40hJBvEhvVcnZ8=)
                          4: jmDndIYIGgfpBEWWzSh6LHZQ2es.asa (hash: uHpXZzgGL3Rk2CN+F5Efi6PUzkboBx9FgZH/bc5JSPs=)
                          5: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl (hash: nw1wTm2JbIwBLyrddKXcTIONbomeMM95k6//cNSnFLI=)
                          6: xJVZmwhY7utaptENw2W7cxJs8A0.roa (hash: 6LO6+5kQiWhvtv1cMZ+cZDZ7KIpd7UwlqzDqG/cJAzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:79:bc:5b:3f:c4:f6:70:87:ef:ed:06:c0:96:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
        Validity
            Not Before: Jun 13 06:00:42 2026 GMT
            Not After : Jun 14 06:00:42 2026 GMT
        Subject: CN=534d378253da36d7222a79a16213c629bb34b112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:13:e9:bf:89:43:e9:69:2e:21:5e:05:84:d9:
                    5d:94:07:c6:c6:2b:82:c9:bf:e3:6f:ea:4b:06:33:
                    c9:7d:66:12:cc:fc:0e:12:e2:0a:56:7b:de:be:2f:
                    26:87:97:65:86:fe:60:83:c5:27:f4:55:17:4f:02:
                    0c:db:a0:4b:b5:ec:08:d0:5f:d5:a6:70:80:12:63:
                    15:47:4a:36:35:e1:d8:48:c6:b6:50:1d:eb:f1:86:
                    37:1a:34:1e:85:90:72:c9:57:72:d0:fa:27:eb:98:
                    71:a6:46:ed:bc:8b:5d:4c:04:05:2f:9f:f5:23:d6:
                    51:f7:e2:38:63:f3:d6:df:b3:c3:0b:e6:7d:2d:8c:
                    0d:fb:76:d1:81:80:fa:f3:fa:26:78:76:68:7f:f1:
                    90:76:09:37:8a:cb:4c:08:4c:ea:e8:28:f6:73:f7:
                    75:c5:9f:eb:fa:86:44:0f:cb:28:c2:fe:d5:9e:71:
                    c8:30:4a:79:56:7e:f7:59:0d:53:28:ec:75:fb:af:
                    b3:93:ef:0d:12:5b:79:5f:02:9a:be:99:e4:f2:47:
                    57:65:d7:75:34:0b:32:91:30:a4:98:29:e2:03:25:
                    92:49:44:b4:b4:9b:ce:5d:3c:e4:23:14:d4:e0:60:
                    f5:70:ee:25:35:12:b9:51:57:bb:3b:ea:c6:03:78:
                    9b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4D:37:82:53:DA:36:D7:22:2A:79:A1:62:13:C6:29:BB:34:B1:12
            X509v3 Authority Key Identifier:
                keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fe:27:c8:93:52:85:ac:75:5b:24:d3:f6:0e:f1:74:64:ba:
         b2:23:11:51:f7:b6:1e:84:da:90:33:6b:f9:6a:7c:2e:59:5e:
         96:de:55:72:41:72:f8:f1:b2:e8:f0:76:5e:ca:37:fc:ca:a8:
         af:d6:aa:d4:9c:7a:56:36:08:9d:20:e2:d3:1f:ee:cb:35:e6:
         79:e6:17:5b:1a:35:05:58:ed:e4:c7:4f:4d:ec:fa:e4:a1:b2:
         79:a2:c5:ed:1e:5a:c9:fd:52:ef:3c:3e:4e:37:5f:0d:10:9a:
         f6:30:53:40:1f:c5:0e:d2:80:a2:53:71:df:93:ed:d5:a9:04:
         bd:b3:12:78:e4:e5:3b:31:d9:ab:30:d3:d0:a8:ac:2e:db:b5:
         e7:d7:ca:03:80:ac:90:15:1d:eb:0d:3a:9b:16:b4:e3:3c:05:
         2d:94:9d:8d:36:8d:c8:c8:cc:5a:0b:d7:b6:85:0a:6a:f7:87:
         8b:b2:30:a5:1b:8e:7c:77:bb:66:21:95:c3:1f:4a:40:c3:c8:
         55:37:23:ef:2b:2e:4b:2b:82:16:2a:ed:23:ef:2e:f0:f6:e3:
         d3:6f:32:b1:e9:15:22:c8:4e:f8:a3:66:f3:da:ea:95:80:c9:
         e0:69:22:2b:6e:f6:86:d3:b6:78:01:c1:d0:9a:2a:cf:87:8a:
         f0:b6:79:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:51 2026 by rpki-client