Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
File:                     t72OrhZp3rOj-kGGSR4FyzLOCSo.mft (raw, json)
Hash identifier:          dfwvixcOyQdSurwXTxu4d+e1vZtr6Dthr768NAkCkx4=
Subject key identifier:   AC:EE:78:C2:79:83:D6:9F:26:FE:E3:EE:6D:30:24:59:E6:0C:FC:15
Authority key identifier: B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
Certificate issuer:       /CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Certificate serial:       019EC3A50F1FB5C8954A9A71140D24EDA837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
Manifest number:          141A
Signing time:             Sun 14 Jun 2026 01:00:34 +0000
Manifest this update:     Sun 14 Jun 2026 01:00:34 +0000
Manifest next update:     Mon 15 Jun 2026 01:00:34 +0000
Files and hashes:         1: OhJpimseggO-Y4_hoEiI1nB-3a4.roa (hash: zDlcOi1opjdDim5XNlXyOBikBSD080S2FUrAKbWMWcM=)
                          2: t72OrhZp3rOj-kGGSR4FyzLOCSo.crl (hash: 9XrMZZlfm8il/e1JQ0RXePmD369u4nVgS450GUgQ8os=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:0f:1f:b5:c8:95:4a:9a:71:14:0d:24:ed:a8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
        Validity
            Not Before: Jun 14 01:00:34 2026 GMT
            Not After : Jun 15 01:00:34 2026 GMT
        Subject: CN=acee78c27983d69f26fee3ee6d302459e60cfc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3c:c5:87:87:1e:0f:14:75:85:50:dc:f3:2d:
                    8a:9b:69:f2:62:2a:59:c5:10:33:42:26:01:89:6d:
                    11:dd:39:8b:3d:29:ee:25:de:53:98:ad:6d:cb:93:
                    68:a0:d2:4f:9d:ec:38:3f:f1:d9:f5:30:2a:8e:d1:
                    b0:a8:fa:d2:bd:b5:d9:4f:ca:10:5c:3f:23:ff:71:
                    be:b0:3c:31:8b:90:c8:de:12:eb:dd:9d:53:c1:ea:
                    08:d9:27:2d:8f:db:ff:1e:57:be:51:86:c9:27:1e:
                    aa:c8:38:eb:dc:a2:7a:63:b1:4f:d8:3b:7f:ce:2f:
                    a0:37:37:72:68:6c:a2:2d:84:02:29:e6:78:93:44:
                    c0:cb:52:c0:7f:d3:ea:6d:74:4b:5b:ff:c7:42:50:
                    c2:13:41:e6:1e:68:93:b2:b5:8a:d9:65:af:f7:3f:
                    48:c2:13:21:8e:8c:81:f0:52:2a:41:45:d3:1f:d3:
                    6c:cc:b9:2f:b4:0a:f2:b7:15:2b:eb:37:e3:d9:ec:
                    31:8a:ab:fc:b6:3d:3e:49:54:5b:de:d9:8d:4b:e3:
                    ec:9c:12:a4:39:2e:1b:be:80:72:e4:9c:a1:30:88:
                    dd:76:77:5a:a2:92:84:f9:cf:71:3d:94:d1:24:05:
                    93:f5:01:3f:16:b5:91:69:bd:15:23:d1:48:1a:7d:
                    99:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EE:78:C2:79:83:D6:9F:26:FE:E3:EE:6D:30:24:59:E6:0C:FC:15
            X509v3 Authority Key Identifier:
                keyid:B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:52:9f:d7:f7:1c:d0:11:9f:5a:7a:0b:01:ab:5b:a8:76:4b:
         bb:26:3d:da:ec:0f:62:ce:ce:f4:19:90:99:43:69:6e:9f:8e:
         3c:a3:6f:65:c6:2b:86:56:a1:a9:d4:ef:f8:e5:35:1b:20:fe:
         53:29:54:38:f8:31:48:a3:d6:57:2a:fb:ec:b1:3b:24:63:f7:
         5b:86:0f:99:46:7b:2c:31:73:42:7a:83:18:2c:61:bb:14:a6:
         f9:51:20:82:d4:e8:1b:d7:8d:05:a0:85:f3:05:00:1c:ff:8a:
         33:83:86:74:e5:96:38:ca:58:89:1c:ea:c7:f4:1d:bd:20:f1:
         27:9e:5f:16:7b:e6:05:e5:4a:cd:35:66:87:d3:d4:36:50:4f:
         b6:fa:64:f4:c0:46:34:b6:ac:2a:4f:df:66:d8:1d:12:65:c2:
         ff:9b:57:47:00:cb:68:92:cb:19:3b:e6:e6:a5:e3:86:9f:4b:
         57:97:55:44:8f:ef:bd:42:34:9e:b3:ca:bd:89:a1:87:1f:80:
         a4:bd:ce:4d:b4:ac:a7:9c:b7:46:c5:fa:f0:5b:0f:aa:09:2d:
         ce:d1:13:10:65:92:47:92:99:22:f9:5d:80:9c:39:8b:47:f1:
         ea:ca:52:72:ae:58:49:f8:d6:97:cd:5b:b2:30:fc:3d:3e:b5:
         cf:f0:52:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:57 2026 by rpki-client