Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
File:                     17tVI2VJnAeu00tohPWy6TgOvuE.mft (raw, json)
Hash identifier:          LYdTD28xcDHKQrgdA6L/wa3ZJZECn1bI8bcjuiQ1/QI=
Subject key identifier:   1D:F6:EF:13:F4:A9:A7:A4:EF:93:36:3B:3F:17:50:B9:DC:B1:68:E1
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Certificate issuer:       /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial:       019EBE7F775B52E1EA4C6C1FBE81A2D10340
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
Manifest number:          1043
Signing time:             Sat 13 Jun 2026 01:01:25 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:25 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:25 +0000
Files and hashes:         1: 17tVI2VJnAeu00tohPWy6TgOvuE.crl (hash: p4zbFKi9JOA4H0BqGvwx+VTM1IQUMXMSoEbveoBLzuk=)
                          2: 7G0NCEWyAUUTld6dbhxspAdwKu8.roa (hash: x0W+qVErOolxMsYnIkgUBz4sjWMNnyVZEzok5cCvMGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:77:5b:52:e1:ea:4c:6c:1f:be:81:a2:d1:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
        Validity
            Not Before: Jun 13 01:01:25 2026 GMT
            Not After : Jun 14 01:01:25 2026 GMT
        Subject: CN=1df6ef13f4a9a7a4ef93363b3f1750b9dcb168e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:34:3b:7a:f4:4a:5a:81:a4:06:c4:27:aa:de:
                    c1:b1:67:2d:56:59:f2:59:02:33:db:c0:9e:a1:e3:
                    e0:75:c5:a9:19:3b:17:a4:4a:d6:d8:f1:ae:66:3a:
                    46:27:ce:ef:2a:57:32:2c:fb:bf:73:5f:4e:90:b3:
                    02:4a:f2:74:e4:c4:28:fd:b8:f7:3d:d3:d0:a5:78:
                    96:bb:8b:4a:fa:a1:ba:d2:62:6e:3e:1e:33:48:5c:
                    02:f6:6b:e1:e5:5f:c8:be:0d:d3:65:a6:62:7d:13:
                    79:e9:6f:0a:f9:34:62:db:e7:fc:80:7e:3b:2b:ee:
                    19:e9:f2:66:aa:ff:10:12:ad:14:1d:db:10:b8:26:
                    eb:cb:9c:71:c2:25:0c:31:a7:e8:34:9b:bf:bf:2b:
                    be:d3:87:36:a3:fd:ac:47:8b:d1:f6:f6:b7:f8:e0:
                    37:8d:c3:19:91:7c:5a:f4:ae:ad:36:21:60:96:27:
                    02:42:20:f6:b1:fd:32:94:55:1f:a4:84:e1:51:38:
                    26:ef:21:06:37:2e:3f:80:cd:e2:68:44:64:9b:f7:
                    7f:ce:36:71:35:60:fe:ec:8a:1f:c6:cc:d5:d5:24:
                    4c:f5:25:7f:41:ca:e3:ad:84:8e:b5:6d:7b:3d:eb:
                    95:19:41:ad:c1:bb:14:10:0b:dc:e5:fa:66:dd:16:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F6:EF:13:F4:A9:A7:A4:EF:93:36:3B:3F:17:50:B9:DC:B1:68:E1
            X509v3 Authority Key Identifier:
                keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:40:7c:f8:b1:67:19:b1:15:d4:4d:42:60:3a:87:b6:16:87:
         37:c8:d6:97:10:e8:54:30:a6:f1:a5:00:b8:4d:b8:61:91:b3:
         03:75:89:69:ef:f4:aa:af:5b:de:96:bc:31:95:e5:95:d9:4f:
         dc:40:90:e3:f1:a6:99:62:62:3f:96:26:03:56:0e:4a:d6:f8:
         f5:02:de:90:24:d6:bd:60:ab:4a:c8:88:ce:77:a5:a1:55:ae:
         57:3d:b8:f2:b9:08:c7:27:66:3f:a1:e1:6f:33:26:d9:9a:e9:
         85:59:cb:b5:83:ef:46:a3:8a:42:b6:3f:f2:96:73:0e:ff:4f:
         30:4b:0d:e7:71:4b:c2:72:fa:2f:c9:12:6d:a6:89:fd:31:1e:
         7a:96:b8:52:ff:31:34:66:cb:79:5f:7e:f8:6d:8f:c9:a6:fa:
         b9:5f:ed:b0:c1:66:9b:b8:50:5f:90:e6:21:4a:9b:26:81:50:
         f6:ff:3f:0e:d6:92:a2:98:ef:ad:b1:27:c5:5f:2f:21:a2:95:
         b4:26:c1:17:8f:8d:ff:2c:28:b1:a4:cf:35:ab:c5:ec:4d:f7:
         df:c8:21:6b:a9:03:e1:94:29:af:73:51:1f:a5:6a:d6:ae:11:
         55:4b:e4:08:b6:17:f9:fc:43:2f:d4:9f:b2:90:32:ce:90:d5:
         ce:32:eb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:52:53 2026 by rpki-client