Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
File:                     8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json)
Hash identifier:          XQxL5UQd4uu8UnlN0FXpXdf/yLfPRFTqeOFp2bfliEE=
Subject key identifier:   42:74:9B:F8:18:2B:40:07:8A:A6:BD:A9:0B:34:3A:6A:E7:BF:05:12
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Certificate issuer:       /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial:       019EBE7EEB754D4964819FC98A7E7246A961
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
Manifest number:          0B59
Signing time:             Sat 13 Jun 2026 01:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:49 +0000
Files and hashes:         1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: 77TKw6j4MBP3Nf7CHe8IXL4RFUPktDetaUhcMdAIjYc=)
                          2: UFBEpO4lAvQQYygzidhd3XdFxgI.roa (hash: UGxXMNFmL4JWlj/CB1VthyOKOfzl2mNWHFy1E8dwYXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:eb:75:4d:49:64:81:9f:c9:8a:7e:72:46:a9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
        Validity
            Not Before: Jun 13 01:00:49 2026 GMT
            Not After : Jun 14 01:00:49 2026 GMT
        Subject: CN=42749bf8182b40078aa6bda90b343a6ae7bf0512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:36:9c:0d:44:65:b7:63:64:b9:35:4e:57:82:
                    aa:84:47:15:ac:55:89:66:41:ab:a5:00:d6:34:25:
                    35:78:59:f8:5c:d0:68:3f:8b:88:e9:20:b0:c4:77:
                    96:a9:a3:28:e0:9e:28:d9:3c:a1:41:d0:dc:6e:79:
                    10:17:71:56:c3:60:a8:8f:f0:d7:ad:3d:26:6a:64:
                    1a:e6:70:18:3d:c3:4b:be:17:b5:b6:27:67:a7:5e:
                    65:c2:0d:65:a3:6f:c0:46:ad:de:4a:80:6d:17:d0:
                    d2:fe:9b:89:10:aa:98:01:56:60:78:23:54:02:6b:
                    3d:f1:70:79:d9:48:85:f2:01:3a:fb:58:6c:e2:21:
                    7c:a7:35:c3:16:ad:14:85:d8:1b:82:af:41:25:be:
                    de:0e:49:6a:fc:e1:f8:0a:c6:9f:4d:5b:cf:14:90:
                    c4:67:65:e5:04:a8:4c:3a:d1:e4:fd:97:cb:69:ca:
                    2d:1b:d7:88:7e:64:52:dc:22:bd:12:42:e5:68:37:
                    ae:7e:9a:d2:c2:a2:6d:8c:1e:68:54:2b:09:84:9b:
                    ce:a0:7a:cc:8d:68:6e:76:a8:71:96:79:0a:59:e2:
                    aa:16:c9:e6:05:31:7a:6d:c6:6b:b8:97:18:06:f5:
                    2c:e2:f8:60:f9:84:8c:6b:a1:e4:d3:85:ae:96:ef:
                    ee:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:74:9B:F8:18:2B:40:07:8A:A6:BD:A9:0B:34:3A:6A:E7:BF:05:12
            X509v3 Authority Key Identifier:
                keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:9c:1d:e5:93:8f:71:5c:ac:ec:a6:5a:c5:79:b0:2c:28:11:
         6d:98:1a:9a:61:dd:8e:41:a6:83:d2:60:2e:0f:df:8e:8d:5c:
         0e:b3:45:05:be:c1:fb:69:ce:3d:cb:8c:03:6b:a8:a2:d6:22:
         ce:3a:0e:57:6c:2b:6a:89:34:b2:d1:39:56:6e:ec:57:eb:ed:
         d1:67:99:bd:72:74:34:b8:3c:41:10:05:f3:d9:75:07:a3:7e:
         0e:bb:9c:ec:c2:d2:73:8d:32:4b:d4:df:8d:48:bc:ef:e2:61:
         67:d0:f1:36:1c:94:3e:af:5f:7e:04:27:4f:11:a6:0b:db:02:
         d1:7e:97:cd:c5:50:f6:cc:03:e8:eb:21:89:4e:94:67:c9:fa:
         bb:e2:d0:90:5f:49:00:0b:7e:a2:47:f7:90:9a:12:f8:71:5a:
         5b:02:5d:10:e6:99:b3:9a:80:95:f7:fe:15:d1:5d:bd:49:c9:
         28:3a:51:d3:13:48:b2:89:72:c2:15:72:79:16:30:8a:16:32:
         e4:9f:ef:a8:c2:93:74:5d:3d:5d:3f:10:1d:33:bc:8b:fa:80:
         f2:8c:8c:5f:33:60:11:89:2a:43:c8:4f:21:84:b3:72:93:bd:
         df:0e:de:45:b4:98:90:86:38:c6:03:fd:85:da:16:8d:7c:32:
         e0:f0:66:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:19:23 2026 by rpki-client