Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
File:                     _nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft (raw, json)
Hash identifier:          u2Vu5v9R0OQD1kF2r/PvlnEht+jBvbAI1IdlmZ2tnyY=
Subject key identifier:   20:E1:3C:01:49:46:CA:0C:82:6D:0D:4A:0A:9F:80:92:A9:B8:32:C5
Authority key identifier: FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
Certificate issuer:       /CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
Certificate serial:       019EBF23C2750C789EDC4E06693D3C48C2B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
Manifest number:          A1
Signing time:             Sat 13 Jun 2026 04:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:52 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:52 +0000
Files and hashes:         1: MaIKlII8OqQMUgcccB9oH2ZcXoQ.asa (hash: F5TME2g2H+4oztuAWuswsZ8BHq80CCL87upK2MSDfeA=)
                          2: _nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl (hash: O12TBqehY56mV1pJf0unzV3Juik5AofCbVqjZbXjjZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:c2:75:0c:78:9e:dc:4e:06:69:3d:3c:48:c2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
        Validity
            Not Before: Jun 13 04:00:52 2026 GMT
            Not After : Jun 14 04:00:52 2026 GMT
        Subject: CN=20e13c014946ca0c826d0d4a0a9f8092a9b832c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:eb:cd:90:d1:0d:3d:f5:67:98:d3:b0:db:e7:
                    73:42:4d:e1:51:3f:b8:e5:ac:49:bd:a5:cb:0e:93:
                    9d:06:ff:cb:de:4f:07:28:69:2e:06:15:8a:88:e9:
                    fc:c8:50:3b:f6:6e:c8:1c:06:6e:b1:fe:99:d0:a3:
                    8d:f5:7a:65:db:dd:1f:e9:82:c7:1c:43:d7:6f:06:
                    b7:7a:73:4c:f7:4f:11:12:28:ef:6c:1f:63:f6:87:
                    f2:00:94:15:46:3d:ea:18:b6:7a:27:b9:c3:13:6b:
                    e3:3d:78:80:9d:90:1e:81:14:37:f0:c9:d7:0a:14:
                    01:72:ba:a0:b2:b8:eb:e8:83:e0:ce:3c:7a:b8:1a:
                    87:d0:2e:e4:fa:85:e1:0c:33:99:f8:81:49:22:93:
                    7a:44:13:0a:2e:bd:77:b3:3f:da:a2:7e:96:49:4c:
                    36:3e:30:a5:35:5a:5f:db:fe:48:ad:46:6a:3d:6d:
                    12:91:10:21:43:f1:7a:56:0d:c6:2b:7e:b6:67:85:
                    c0:db:df:b7:75:9f:90:41:b3:ea:88:e0:fe:c9:f2:
                    3e:87:04:eb:3b:39:cf:ec:23:23:95:14:d5:c3:c5:
                    36:c9:40:6d:b7:b3:da:9d:0f:c5:69:ef:70:d4:c9:
                    ad:3e:20:c7:43:a1:2a:03:99:d1:02:5d:39:1a:aa:
                    86:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E1:3C:01:49:46:CA:0C:82:6D:0D:4A:0A:9F:80:92:A9:B8:32:C5
            X509v3 Authority Key Identifier:
                keyid:FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f0:da:8c:79:04:df:fd:b8:35:a3:34:91:6d:af:fe:59:f6:
         1d:02:3e:7b:24:71:b0:7c:46:64:05:ab:cb:29:bc:3f:bc:38:
         e8:0e:ad:2e:98:eb:28:a1:50:e7:d2:b1:82:b0:3b:15:6b:42:
         4e:54:36:8e:19:10:7d:20:78:79:af:56:9c:47:e6:ee:4a:25:
         ea:26:15:de:b7:c8:e6:04:74:85:c0:9b:2a:3f:ba:90:cb:bb:
         54:26:b5:04:8b:2a:73:14:d1:2d:88:7e:9b:42:e6:70:ad:b1:
         e6:dc:73:6f:f9:6c:91:db:14:cc:ab:07:65:15:31:0e:6d:5d:
         f2:f5:02:5b:17:53:1c:8b:23:78:50:81:b5:6a:54:dd:c4:81:
         19:9b:0e:26:11:1a:15:c7:66:16:d0:7b:0d:8e:81:88:25:db:
         a5:e5:02:37:62:f0:17:fa:73:aa:6a:81:70:29:de:0c:36:f5:
         05:86:66:cb:51:ba:17:ee:70:9c:fb:40:3b:e5:07:e0:07:25:
         f8:e6:3d:16:39:61:26:a5:57:eb:c2:2d:7c:cc:f5:b2:72:fc:
         4b:9d:73:12:c3:17:41:3f:37:9b:35:a2:d9:38:c1:2a:63:b3:
         e4:6c:1a:f9:e9:29:71:07:0c:33:f2:93:e4:e8:0e:8d:fa:0e:
         42:26:72:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:49 2026 by rpki-client