Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft
File:                     feM_CE7LgSODxwJ1w4XUYZstox8.mft (raw, json)
Hash identifier:          OiE8YLy/J7M4vuXtdCm6B1Xqi44thfKp0+OxoTmE4dI=
Subject key identifier:   C0:94:F3:A4:B5:87:AE:55:12:10:5A:82:6E:04:24:97:E9:27:1B:05
Authority key identifier: 7D:E3:3F:08:4E:CB:81:23:83:C7:02:75:C3:85:D4:61:9B:2D:A3:1F
Certificate issuer:       /CN=7de33f084ecb812383c70275c385d4619b2da31f
Certificate serial:       019EBEB5A1F33C5B75D0AC784259AFA34D65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/feM_CE7LgSODxwJ1w4XUYZstox8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft
Manifest number:          66
Signing time:             Sat 13 Jun 2026 02:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:34 +0000
Files and hashes:         1: 5Scl3zXAEvT9Imonr9uJSjo6tG8.asa (hash: 2kTmN9J7DNO7vHCgKZRb1obKROe/qCTKWR7Gio+rcvQ=)
                          2: feM_CE7LgSODxwJ1w4XUYZstox8.crl (hash: ouJY80QwBP9afWMq1dcGKeTlbtZnw7Y4O88h/4XyAr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/feM_CE7LgSODxwJ1w4XUYZstox8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:a1:f3:3c:5b:75:d0:ac:78:42:59:af:a3:4d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de33f084ecb812383c70275c385d4619b2da31f
        Validity
            Not Before: Jun 13 02:00:34 2026 GMT
            Not After : Jun 14 02:00:34 2026 GMT
        Subject: CN=c094f3a4b587ae5512105a826e042497e9271b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:82:2c:6b:3f:a7:51:f0:66:14:77:c6:5c:
                    ad:97:70:e6:c9:3c:e8:60:d3:88:2f:df:fa:8c:59:
                    cb:2e:69:98:d8:30:81:bd:1d:80:1e:17:a7:58:fe:
                    68:c5:6b:5e:05:b7:49:9f:4f:bc:d9:87:ef:a4:72:
                    c6:2c:c3:e0:16:14:64:db:15:4f:33:cf:10:fa:54:
                    a3:10:52:0e:21:38:75:8a:0a:86:0f:24:63:99:2f:
                    a8:28:b7:4b:4a:1d:c1:de:27:ef:ee:a7:9f:b4:d2:
                    69:ff:4c:90:66:ac:f3:fc:a5:c3:86:01:61:cd:57:
                    60:e1:d5:cb:1b:7c:2a:67:08:63:b0:97:27:93:03:
                    6e:7b:0a:2d:12:14:96:fe:3f:63:56:f5:f5:b4:3e:
                    83:db:1a:13:70:00:d9:8a:e0:ce:4e:2c:9b:ce:e8:
                    d6:e4:21:eb:65:7b:e1:d5:cd:39:69:be:a0:a8:80:
                    40:1c:4a:16:da:4e:22:5e:72:02:cc:dd:12:c9:c1:
                    85:f7:b4:a5:ef:d5:65:27:59:d2:26:62:49:c5:f5:
                    fc:e5:6e:f5:c2:05:bd:9e:76:e3:43:0a:bb:22:f3:
                    01:12:55:76:5c:1d:9c:7b:92:56:b3:91:7c:0a:4d:
                    7a:da:d6:28:eb:67:1d:42:28:3c:c5:f8:c4:37:9b:
                    1c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:94:F3:A4:B5:87:AE:55:12:10:5A:82:6E:04:24:97:E9:27:1B:05
            X509v3 Authority Key Identifier:
                keyid:7D:E3:3F:08:4E:CB:81:23:83:C7:02:75:C3:85:D4:61:9B:2D:A3:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feM_CE7LgSODxwJ1w4XUYZstox8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:90:df:e6:c2:21:bc:c7:3e:b3:e5:c5:57:01:c8:46:0b:c6:
         b2:f2:53:1c:c8:ac:b6:aa:60:99:92:57:24:c1:52:c0:a6:30:
         54:39:88:df:e1:fe:4e:b1:c7:05:80:34:32:20:50:ea:5d:ba:
         17:2f:1a:cc:5f:93:b7:5d:ba:9a:df:f1:72:74:a4:ed:91:d1:
         cf:e8:f1:43:c3:da:e4:48:db:ba:be:75:b2:59:09:d6:be:0b:
         bf:85:60:19:89:5a:ad:db:6a:da:30:4b:3c:5a:a8:66:7e:4c:
         db:a3:91:d1:7c:a8:9e:a8:a7:79:60:7c:db:b4:64:51:37:31:
         d4:15:f0:fc:21:5d:ba:bb:6f:cb:55:d4:f3:39:11:e1:bb:9f:
         37:0c:e6:23:a4:ae:ad:30:be:65:c6:a6:e8:a2:c1:ba:68:99:
         fd:48:ea:d0:af:56:6e:bf:26:f2:01:3c:b6:4a:db:8f:5e:6c:
         db:a3:fb:72:ad:d3:d2:89:1a:9d:24:34:ad:b7:f6:2f:d2:ed:
         22:34:e5:91:c0:9f:6f:9a:a1:a7:8a:2a:4b:04:fc:be:ce:97:
         f6:ee:0a:a1:9a:4c:89:74:62:12:9c:e2:7d:f0:97:4d:5a:07:
         e9:88:8a:11:fd:37:35:30:1c:e5:cd:a4:7e:2e:67:c4:a2:ef:
         30:ee:c4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:07:53 2026 by rpki-client